$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: hSiA82/6UwLiSSQcOBtyHVSc99xeKo9YBAZcckq/c8w= Subject key identifier: 42:80:93:4E:D7:53:76:45:B5:C3:21:5D:0C:89:F2:65:31:2F:00:D7 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 1746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 172E Signing time: Sat 24 Oct 2026 16:35:05 +0000 Manifest this update: Sat 24 Oct 2026 16:35:04 +0000 Manifest next update: Sat 31 Oct 2026 16:35:04 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: CdNRQy6eWLX92jH/Rdjv+k/XarUXfXrHgOJgU6GQ0hU=) 2: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: +S9KMUljfxQJFwqoopUe9aDl8dajJPyPJ+b4JFYvIxM=) 3: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: tVo9Z2FSMOetrp2j2EYJddOd8LH6HrgTtdxpl4sMUKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 16:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5958 (0x1746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Oct 24 16:35:04 2026 GMT Not After : Oct 31 16:35:04 2026 GMT Subject: CN=6adcde38-6380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:1d:79:5a:5d:0d:98:1f:bd:c0:47:7f:8c: 24:65:fa:15:3f:59:f5:c5:be:c4:6d:ad:dc:a9:c7: e2:1d:b4:b3:b2:49:8d:34:8b:83:65:5d:0b:7e:04: a7:34:31:48:e2:c2:4e:72:b0:53:fb:9a:77:df:c9: 50:22:6e:59:ff:a1:33:28:69:37:3d:7e:54:9b:e1: b7:0c:2f:bf:67:6a:b9:13:51:f6:d2:42:8d:cb:f7: 7c:2e:9a:aa:2f:1b:1b:1a:dc:bc:30:be:95:e8:87: ea:23:4f:40:0a:e0:5d:19:61:f2:d9:e3:68:d2:d1: fb:89:90:0f:5b:64:32:96:0d:f7:88:6d:cc:74:be: b8:17:ed:5e:40:4a:12:25:e8:82:3d:38:d9:dc:60: b7:a6:f0:15:20:d5:c2:2b:c5:9d:16:29:09:c8:16: 0a:db:d6:ba:46:21:73:69:3e:4b:5f:e9:31:b5:44: 18:ee:56:2d:f6:4b:92:13:d6:02:61:23:8b:db:b8: 1e:30:fe:5b:e7:7a:66:d5:5b:31:36:7e:55:45:9f: 6b:7b:2d:03:2a:61:25:d4:de:a3:c3:62:33:61:d4: 6e:f6:76:51:51:3c:fa:b9:50:60:df:53:8c:1b:0c: 9b:72:a3:c8:77:1b:2a:de:98:6f:6c:46:e6:77:93: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:93:4E:D7:53:76:45:B5:C3:21:5D:0C:89:F2:65:31:2F:00:D7 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ee:4f:19:61:f2:c1:3a:de:dc:21:21:9b:c5:07:83:9f:16: 82:8a:8d:92:9e:52:84:22:f7:9c:98:65:9f:c0:16:77:aa:d3: f1:fe:4e:6c:98:0d:ea:f0:64:ae:18:e6:a9:e7:3f:f6:5b:89: a0:f4:53:52:b5:72:05:25:1d:ef:4e:ab:c6:73:a4:5a:14:31: 47:3b:25:e1:62:81:55:b3:02:27:a6:a8:65:3a:b5:d2:28:35: 2e:10:a2:52:86:88:2a:4f:71:92:59:35:3d:d3:c1:c2:de:c6: 25:3f:c9:9d:e5:75:c2:a0:c6:2a:0f:fd:7f:25:15:0b:97:d0: b3:c3:9f:43:e6:13:6c:5b:b8:61:fc:1f:86:04:05:76:9c:8d: c4:51:f3:4a:e0:dd:63:6b:38:e0:70:d8:f2:79:f1:24:76:ff: 1c:19:70:2e:b8:77:7d:1f:f7:35:29:fc:25:3b:75:91:f4:c0: 8b:41:a5:d4:16:03:c7:31:96:9f:4e:22:ad:70:47:2f:29:b5: 0b:2e:3d:35:46:4c:d0:fe:d8:0e:52:94:2c:7a:12:17:e7:f9: 42:16:b6:6d:85:6e:02:05:11:10:f3:10:4a:bc:05:d6:6e:b0: 8c:15:93:92:e7:5b:f5:4f:f9:2f:e3:e4:33:7f:d4:22:d8:1f: 9e:4a:62:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYxMDI0MTYzNTA0WhcNMjYxMDMxMTYzNTA0WjAYMRYwFAYD VQQDEw02YWRjZGUzOC02MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs0deVpdDZgfvcBHf4wkZfoVP1n1xb7Eba3cqcfiHbSzskmNNIuDZV0LfgSn NDFI4sJOcrBT+5p338lQIm5Z/6EzKGk3PX5Um+G3DC+/Z2q5E1H20kKNy/d8Lpqq LxsbGty8ML6V6IfqI09ACuBdGWHy2eNo0tH7iZAPW2Qylg33iG3MdL64F+1eQEoS JeiCPTjZ3GC3pvAVINXCK8WdFikJyBYK29a6RiFzaT5LX+kxtUQY7lYt9kuSE9YC YSOL27geMP5b53pm1VsxNn5VRZ9rey0DKmEl1N6jw2IzYdRu9nZRUTz6uVBg31OM GwybcqPIdxsq3phvbEbmd5PgRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKAk07X U3ZFtcMhXQyJ8mUxLwDXMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADe5PGWHywTre3CEhm8UHg58WgoqNkp5ShCL3nJhln8AWd6rT8f5ObJgN6vBk rhjmqec/9luJoPRTUrVyBSUd706rxnOkWhQxRzsl4WKBVbMCJ6aoZTq10ig1LhCi UoaIKk9xklk1PdPBwt7GJT/JneV1wqDGKg/9fyUVC5fQs8OfQ+YTbFu4YfwfhgQF dpyNxFHzSuDdY2s44HDY8nnxJHb/HBlwLrh3fR/3NSn8JTt1kfTAi0Gl1BYDxzGW n04irXBHLym1Cy49NUZM0P7YDlKULHoSF+f5Qha2bYVuAgUREPMQSrwF1m6wjBWT kudb9U/5L+PkM3/UItgfnkpiew== -----END CERTIFICATE-----Generated at Sun Oct 25 06:48:28 2026 by rpki-client