$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft File: ok2WODNZy0lmoVuakGkT61RWZXs.mft (raw, json) Hash identifier: Y7YEiTI/2wRua/UOfSfVN3GlAZJ2o/e8xi4h/UN59MU= Subject key identifier: 7A:45:4F:6F:25:F9:BB:30:68:96:6F:61:B4:90:78:58:86:72:AB:AC Authority key identifier: A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B Certificate issuer: /CN=A91C9C03/serialNumber=A24D96383359CB4966A15B9A906913EB5456657B Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft Manifest number: 0108 Signing time: Mon 05 Oct 2026 06:35:30 +0000 Manifest this update: Mon 05 Oct 2026 06:35:30 +0000 Manifest next update: Mon 12 Oct 2026 06:35:30 +0000 Files and hashes: 1: ok2WODNZy0lmoVuakGkT61RWZXs.crl (hash: h0eph7ga2/YbIvEUU/X9bVHVPJrUXBUE0d0vgPPTcmk=) 2: 19088D04716211F0A531A51FC4F9AE02.roa (hash: YQ9P3hZSVyByvwWvHjcvm6ovGJgl+C3bbNJ0X0PJR6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 06:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C03, serialNumber=A24D96383359CB4966A15B9A906913EB5456657B Validity Not Before: Oct 5 06:35:30 2026 GMT Not After : Oct 12 06:35:30 2026 GMT Subject: CN=6ac34532-2ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:58:20:06:62:3b:e7:a9:52:e1:54:ae:d9: 06:91:03:ca:61:82:74:ff:22:d7:c1:d1:85:65:be: f9:11:1f:de:bd:1b:9d:29:ff:37:e6:cc:98:41:d6: 06:44:3c:39:85:84:a2:12:10:dc:5f:16:df:40:ec: 64:cd:72:43:41:e5:24:f4:93:8d:e3:ee:1a:0d:2d: 2b:65:f3:0c:63:b7:af:b0:ab:d2:8c:09:12:00:59: 39:79:7a:b4:f4:5a:ba:6a:23:12:85:46:a4:2f:a9: 68:28:03:69:cc:62:27:f4:6c:1c:74:8c:d0:ce:df: 8a:1d:fd:59:41:85:1f:78:02:e3:93:21:93:03:16: 57:c6:73:14:b3:a0:51:b5:b0:75:ce:7d:54:2c:dd: 6d:67:76:45:f6:e1:58:aa:8e:57:7c:6f:8a:e8:53: da:a3:12:c4:1d:24:99:cf:8c:50:43:fd:7b:4e:52: 8f:87:4b:cf:8f:08:3b:2f:fc:bb:24:c2:39:4e:4e: 91:a3:26:7f:f6:da:2a:0a:19:43:68:94:87:6b:d0: 36:af:37:a2:ae:04:54:d4:cd:d6:dc:f7:7a:1c:99: d3:66:9b:94:92:1a:a6:85:54:29:3a:c6:b9:51:ae: 6b:6f:1b:86:c8:cd:7c:9c:15:a2:94:61:58:f7:66: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:45:4F:6F:25:F9:BB:30:68:96:6F:61:B4:90:78:58:86:72:AB:AC X509v3 Authority Key Identifier: keyid:A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e2:07:10:41:5b:20:67:57:f8:42:98:93:72:9b:1a:15:28: 8d:ac:8c:ab:4a:90:09:3f:6c:15:d9:8b:b6:84:7a:a1:8a:83: 80:9f:1f:70:59:97:3e:7c:02:12:3b:4d:96:66:13:61:eb:0e: a0:9d:d3:fb:73:e7:cb:e0:ee:3e:11:be:26:bc:9b:02:60:6d: b0:24:30:61:23:7c:6e:a5:65:12:6e:11:8e:ad:be:f5:b3:98: 7d:54:ca:c4:95:1b:3f:60:fb:30:1d:69:37:52:d5:28:6a:c1: 74:7a:61:94:99:ab:10:13:41:21:96:22:7d:1b:a7:9d:c8:8f: 5d:be:24:dd:8c:78:43:cb:36:c8:63:b5:44:a8:ce:d2:c1:aa: 4e:8b:c5:2c:02:da:76:ab:90:63:1f:31:92:bb:90:e9:38:26: 11:f8:fc:2b:53:2d:6a:ef:1a:4a:d4:0a:4b:f5:76:fe:5d:0f: f4:e0:2e:3b:a3:80:7d:4f:36:fb:65:d2:77:7b:a8:00:0a:7c: 49:05:fa:99:9f:53:6d:6e:12:04:b5:ed:35:d6:c7:8c:c0:5c: ad:36:db:3a:91:c2:94:76:e8:fb:db:af:64:ef:c2:6a:7a:bd: e1:27:63:f8:2d:9a:58:0d:73:af:67:f6:13:30:34:80:d5:53: 33:1a:7f:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDMxMTAvBgNVBAUTKEEyNEQ5NjM4MzM1OUNCNDk2NkExNUI5QTkwNjkxM0VC NTQ1NjY1N0IwHhcNMjYxMDA1MDYzNTMwWhcNMjYxMDEyMDYzNTMwWjAYMRYwFAYD VQQDEw02YWMzNDUzMi0yZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt49YIAZiO+epUuFUrtkGkQPKYYJ0/yLXwdGFZb75ER/evRudKf835syYQdYG RDw5hYSiEhDcXxbfQOxkzXJDQeUk9JON4+4aDS0rZfMMY7evsKvSjAkSAFk5eXq0 9Fq6aiMShUakL6loKANpzGIn9GwcdIzQzt+KHf1ZQYUfeALjkyGTAxZXxnMUs6BR tbB1zn1ULN1tZ3ZF9uFYqo5XfG+K6FPaoxLEHSSZz4xQQ/17TlKPh0vPjwg7L/y7 JMI5Tk6RoyZ/9toqChlDaJSHa9A2rzeirgRU1M3W3Pd6HJnTZpuUkhqmhVQpOsa5 Ua5rbxuGyM18nBWilGFY92biPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpFT28l +bswaJZvYbSQeFiGcqusMB8GA1UdIwQYMBaAFKJNljgzWctJZqFbmpBpE+tUVmV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwMy8zN0QxOEExNjM5 QTMxMUYwQkFENzJDM0NDNEY5QUUwMi9vazJXT0ROWnkwbG1vVnVha0drVDYxUlda WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rMldPRE5aeTBsbW9WdWFrR2tUNjFSV1pYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwMy8zN0QxOEExNjM5QTMxMUYwQkFENzJDM0NDNEY5QUUwMi9vazJXT0ROWnkw bG1vVnVha0drVDYxUldaWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAheIHEEFbIGdX+EKYk3KbGhUojayMq0qQCT9sFdmLtoR6oYqDgJ8fcFmXPnwC EjtNlmYTYesOoJ3T+3Pny+DuPhG+JrybAmBtsCQwYSN8bqVlEm4Rjq2+9bOYfVTK xJUbP2D7MB1pN1LVKGrBdHphlJmrEBNBIZYifRunnciPXb4k3Yx4Q8s2yGO1RKjO 0sGqTovFLALadquQYx8xkruQ6TgmEfj8K1Mtau8aStQKS/V2/l0P9OAuO6OAfU82 +2XSd3uoAAp8SQX6mZ9TbW4SBLXtNdbHjMBcrTbbOpHClHbo+9uvZO/Canq94Sdj +C2aWA1zr2f2EzA0gNVTMxp/tQ== -----END CERTIFICATE-----Generated at Tue Oct 6 08:50:39 2026 by rpki-client