$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: s1JJz0uU4XRdCzONm+sZfr14hZnu9efRqTqMX+g/2Lg= Subject key identifier: 39:0C:47:49:85:5D:D1:6B:7F:EB:79:5E:C3:52:BD:4E:98:84:5B:B1 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 172D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 1715 Signing time: Fri 04 Sep 2026 16:35:38 +0000 Manifest this update: Fri 04 Sep 2026 16:35:38 +0000 Manifest next update: Fri 11 Sep 2026 16:35:38 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: Cho8ItCIjF/gBTkKTPnHvZSP4PzBBfCYBZ7eLVFOzOQ=) 2: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: tVo9Z2FSMOetrp2j2EYJddOd8LH6HrgTtdxpl4sMUKQ=) 3: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: +S9KMUljfxQJFwqoopUe9aDl8dajJPyPJ+b4JFYvIxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5933 (0x172d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Sep 4 16:35:38 2026 GMT Not After : Sep 11 16:35:38 2026 GMT Subject: CN=6a9af35a-8aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:dc:e9:37:25:c3:b3:6f:5b:53:b3:80:1b: 87:5b:fd:c3:62:3d:88:22:49:fe:c9:39:fb:e8:7d: 6d:b5:7c:ad:ea:00:61:56:98:c6:60:70:ac:a5:d5: 42:7a:84:bb:17:cf:96:b7:96:10:ad:fe:eb:dc:a4: 4e:40:9b:fb:7c:76:e3:d5:9e:7c:93:1f:a5:8a:d9: 9e:3e:9c:eb:56:cc:c4:84:b2:b3:9e:cc:eb:ca:be: 71:be:b4:b6:ac:46:51:7b:d1:87:3e:1f:c7:18:96: 47:89:d9:83:c2:2c:a1:fa:40:9f:4d:0a:68:82:1e: a5:99:bf:49:1a:4b:ad:84:7b:3e:d4:2f:5e:9d:d3: 55:c2:17:4f:09:30:4d:70:c3:87:09:d7:98:b3:6c: 8f:a1:9a:1c:04:1b:d1:d6:71:02:a6:38:50:0f:a1: c4:34:ba:ab:3f:5f:05:9a:4a:3a:8a:4d:a3:03:15: 01:b3:2f:55:3b:37:9c:68:33:50:d8:98:9d:19:e4: f2:be:e3:38:b8:1f:0f:12:9a:1b:27:df:19:fb:f0: 1e:9b:10:3d:1e:af:fd:64:c6:ac:3d:be:9a:cb:e3: bf:73:fa:38:d8:57:e8:9f:58:c5:25:6c:5a:a3:c9: ac:9f:3c:b3:63:79:20:dd:4b:7e:43:f1:5d:c1:c8: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0C:47:49:85:5D:D1:6B:7F:EB:79:5E:C3:52:BD:4E:98:84:5B:B1 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:27:3e:d9:c4:3f:c8:1e:86:4f:0d:62:80:b2:03:4c:e9:56: cf:f3:a4:9e:25:94:e7:67:14:83:ef:a5:ea:70:81:9b:18:76: 31:83:77:f4:71:ab:53:a5:1a:7e:1a:73:83:5d:dc:18:8f:1d: 3f:19:15:57:a0:8e:f1:6c:5c:55:29:ae:ad:72:df:88:33:5c: f9:19:65:6f:f1:57:17:e7:21:fc:44:f4:ac:71:82:89:3a:ee: 82:19:c2:21:95:b1:4a:a0:82:69:a1:0c:0a:17:07:83:07:85: 32:ab:07:86:56:a2:63:c4:7a:55:bd:9f:e3:aa:ed:e8:83:e5: bd:9e:06:26:38:c0:df:64:76:ba:99:98:52:f4:73:85:52:f1: 46:98:09:e9:4b:29:35:c9:2d:4c:4e:50:d7:b0:79:2e:33:f4: 46:b4:e2:d2:c7:0a:b2:15:fa:cc:14:af:14:28:61:fb:be:70: 73:c7:1a:8e:47:db:c5:64:db:37:c6:a8:5c:04:94:1e:71:99: 46:17:d8:ef:0f:63:68:8a:d3:dc:80:09:ff:e6:f5:36:e8:ff: 40:d6:eb:9a:66:0e:3a:a8:60:fc:9d:85:fc:a8:81:0c:58:c3: 03:71:7b:6b:c4:ab:4f:fc:c3:6a:87:9b:6a:91:20:cf:58:25: f3:16:0a:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYwOTA0MTYzNTM4WhcNMjYwOTExMTYzNTM4WjAYMRYwFAYD VQQDEw02YTlhZjM1YS04YWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmLc6Tclw7NvW1OzgBuHW/3DYj2IIkn+yTn76H1ttXyt6gBhVpjGYHCspdVC eoS7F8+Wt5YQrf7r3KROQJv7fHbj1Z58kx+litmePpzrVszEhLKznszryr5xvrS2 rEZRe9GHPh/HGJZHidmDwiyh+kCfTQpogh6lmb9JGkuthHs+1C9endNVwhdPCTBN cMOHCdeYs2yPoZocBBvR1nECpjhQD6HENLqrP18Fmko6ik2jAxUBsy9VOzecaDNQ 2JidGeTyvuM4uB8PEpobJ98Z+/AemxA9Hq/9ZMasPb6ay+O/c/o42Ffon1jFJWxa o8msnzyzY3kg3Ut+Q/Fdwch5mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkMR0mF XdFrf+t5XsNSvU6YhFuxMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABCc+2cQ/yB6GTw1igLIDTOlWz/OkniWU52cUg++l6nCBmxh2MYN39HGrU6Ua fhpzg13cGI8dPxkVV6CO8WxcVSmurXLfiDNc+Rllb/FXF+ch/ET0rHGCiTrughnC IZWxSqCCaaEMChcHgweFMqsHhlaiY8R6Vb2f46rt6IPlvZ4GJjjA32R2upmYUvRz hVLxRpgJ6UspNcktTE5Q17B5LjP0RrTi0scKshX6zBSvFChh+75wc8cajkfbxWTb N8aoXASUHnGZRhfY7w9jaIrT3IAJ/+b1Nuj/QNbrmmYOOqhg/J2F/KiBDFjDA3F7 a8SrT/zDaoebapEgz1gl8xYKLQ== -----END CERTIFICATE-----Generated at Sat Sep 5 04:58:07 2026 by rpki-client