$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft File: okltnZFYW2aRdHCbDN4x_OMbL1o.mft (raw, json) Hash identifier: PXjsfwo1gDih9RPtpd6ZZqvkd/fgTv+cpEZBC40WRY4= Subject key identifier: 65:10:4A:A1:EE:34:06:77:4D:0F:13:61:12:A8:18:11:61:C4:32:AA Authority key identifier: A2:49:6D:9D:91:58:5B:66:91:74:70:9B:0C:DE:31:FC:E3:1B:2F:5A Certificate issuer: /CN=A91B67D6/serialNumber=A2496D9D91585B669174709B0CDE31FCE31B2F5A Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft Manifest number: 35 Signing time: Tue 27 Oct 2026 08:54:28 +0000 Manifest this update: Tue 27 Oct 2026 08:54:27 +0000 Manifest next update: Tue 03 Nov 2026 08:54:27 +0000 Files and hashes: 1: okltnZFYW2aRdHCbDN4x_OMbL1o.crl (hash: q2UnV/ZOFXNKMTbtCKXI7XO563pZ/9ifPjmeID6xWgQ=) 2: 0385DA1883C711F189BAF24284A30FBC.roa (hash: SWSLd1xBawCW6ENPqMycNBRpduG6/fZvzOANRn5i3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.crl rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D6, serialNumber=A2496D9D91585B669174709B0CDE31FCE31B2F5A Validity Not Before: Oct 27 08:54:27 2026 GMT Not After : Nov 3 08:54:27 2026 GMT Subject: CN=6ae066c4-2c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:69:9e:c2:ab:cd:e1:88:c7:2c:ef:6a:68: 2b:b3:08:5e:2d:0f:b9:2a:a5:0a:e4:c2:42:92:09: f9:85:b4:d3:b0:83:a0:d3:6a:fa:43:5f:ed:d9:b0: 28:62:6c:b4:da:db:21:7e:a4:a0:3d:88:bd:9e:09: b1:07:e6:38:8c:cf:9b:55:d5:59:98:b4:c5:45:60: ce:3b:ce:aa:19:16:9c:54:6b:37:11:8f:3e:d5:bc: 99:43:62:0f:62:d1:c8:29:81:8d:33:f4:c6:2f:64: 8f:c7:8d:fa:a7:dd:50:f2:9e:30:a9:d1:7c:6c:21: 63:fc:d7:64:e1:2f:8e:8c:c4:c8:59:72:a4:c6:77: 8d:ca:32:bb:2f:2f:40:aa:c9:f7:71:d7:e6:e3:be: cc:58:ff:31:b8:20:83:8c:68:e5:02:2d:d0:f9:42: 3e:28:bd:88:96:23:4c:17:12:5b:03:1d:2c:71:ac: 16:1b:98:f3:3c:6a:36:e3:1f:a7:54:f2:28:51:a6: 2f:ed:a6:e5:ac:87:45:b3:20:99:9d:bb:f2:86:2e: af:e6:58:3b:ca:db:49:f8:c0:10:5f:87:90:10:ab: d5:93:5c:22:55:10:93:b4:a8:ea:58:94:a1:3b:7d: 70:bd:a4:1c:e0:4c:92:14:0d:c5:92:96:07:aa:67: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:4A:A1:EE:34:06:77:4D:0F:13:61:12:A8:18:11:61:C4:32:AA X509v3 Authority Key Identifier: keyid:A2:49:6D:9D:91:58:5B:66:91:74:70:9B:0C:DE:31:FC:E3:1B:2F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:43:7b:36:ff:a8:f0:87:9b:ec:62:bd:a0:ae:9f:9a:c6:22: 67:76:c9:45:e0:8d:75:20:d6:53:b3:e2:06:6a:3c:0d:1a:8a: cb:84:94:aa:fe:5e:2c:4a:0a:42:9b:18:2b:60:5e:6f:27:10: 4e:f9:f5:41:e4:3d:60:a4:0b:39:55:98:ca:51:a0:b3:09:29: 24:c5:86:32:4c:13:77:a9:a9:d6:83:ed:6b:6e:1c:b5:52:74: 82:17:cd:87:5b:64:9c:d2:26:5c:e8:78:4a:2f:85:91:a4:68: 9b:95:d8:95:88:13:83:34:d0:17:33:45:5d:40:46:da:c6:29: 2f:41:f6:f7:9f:e6:e6:eb:9f:1a:ad:c9:a5:f5:27:00:d4:c2: 7f:92:1b:1d:ae:fe:27:b3:7a:42:10:7e:a4:aa:92:51:ba:02: ec:b4:ce:de:0b:1c:02:86:fd:67:e0:93:f3:62:ad:89:ca:e2: 7f:91:de:85:a2:97:ab:c3:9d:66:4c:4a:75:64:ac:94:d3:26: 2c:52:ad:6c:ef:cb:86:db:1f:3c:3a:6b:18:d7:bc:66:53:1a: 62:3b:d4:fe:67:b0:3a:5f:6b:2d:34:f7:58:f7:e2:cf:79:35: 83:53:08:de:8e:ed:19:73:cd:b6:ed:69:1a:aa:ef:02:9b:04: 48:7d:82:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjdENjExMC8GA1UEBRMoQTI0OTZEOUQ5MTU4NUI2NjkxNzQ3MDlCMENERTMxRkNF MzFCMkY1QTAeFw0yNjEwMjcwODU0MjdaFw0yNjExMDMwODU0MjdaMBgxFjAUBgNV BAMTDTZhZTA2NmM0LTJjNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr/GmewqvN4YjHLO9qaCuzCF4tD7kqpQrkwkKSCfmFtNOwg6DTavpDX+3ZsChi bLTa2yF+pKA9iL2eCbEH5jiMz5tV1VmYtMVFYM47zqoZFpxUazcRjz7VvJlDYg9i 0cgpgY0z9MYvZI/Hjfqn3VDynjCp0XxsIWP812ThL46MxMhZcqTGd43KMrsvL0Cq yfdx1+bjvsxY/zG4IIOMaOUCLdD5Qj4ovYiWI0wXElsDHSxxrBYbmPM8ajbjH6dU 8ihRpi/tpuWsh0WzIJmdu/KGLq/mWDvK20n4wBBfh5AQq9WTXCJVEJO0qOpYlKE7 fXC9pBzgTJIUDcWSlgeqZwPbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZRBKoe40 BndNDxNhEqgYEWHEMqowHwYDVR0jBBgwFoAUokltnZFYW2aRdHCbDN4x/OMbL1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2N0Q2LzgyNkQ1OTkwODND MzExRjFCQzg4NUIzRjgzQTMwRkJDL29rbHRuWkZZVzJhUmRIQ2JETjR4X09NYkwx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2tsdG5aRllXMmFSZEhDYkRONHhfT01iTDFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 N0Q2LzgyNkQ1OTkwODNDMzExRjFCQzg4NUIzRjgzQTMwRkJDL29rbHRuWkZZVzJh UmRIQ2JETjR4X09NYkwxby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCzQ3s2/6jwh5vsYr2grp+axiJndslF4I11INZTs+IGajwNGorLhJSq/l4sSgpC mxgrYF5vJxBO+fVB5D1gpAs5VZjKUaCzCSkkxYYyTBN3qanWg+1rbhy1UnSCF82H W2Sc0iZc6HhKL4WRpGibldiViBODNNAXM0VdQEbaxikvQfb3n+bm658arcml9ScA 1MJ/khsdrv4ns3pCEH6kqpJRugLstM7eCxwChv1n4JPzYq2JyuJ/kd6Foperw51m TEp1ZKyU0yYsUq1s78uG2x88OmsY17xmUxpiO9T+Z7A6X2stNPdY9+LPeTWDUwje ju0Zc8227Wkaqu8CmwRIfYKT -----END CERTIFICATE-----Generated at Wed Oct 28 00:41:44 2026 by rpki-client