$ rpki-client -vvf rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft File: bOklSpy_oHBCJDc13OT79-VGEWY.mft (raw, json) Hash identifier: eNgK0GRIEsNmkpdSlMXPOI5mJFbLKETG92eNpCnFxfM= Subject key identifier: 12:DF:2A:DC:5B:83:05:72:BD:03:96:56:BE:85:65:D8:90:71:7F:43 Authority key identifier: 6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66 Certificate issuer: /CN=A91454F3/serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166 Certificate serial: 0D22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft Manifest number: 0D19 Signing time: Tue 28 Jul 2026 18:21:26 +0000 Manifest this update: Tue 28 Jul 2026 18:21:25 +0000 Manifest next update: Tue 04 Aug 2026 18:21:25 +0000 Files and hashes: 1: bOklSpy_oHBCJDc13OT79-VGEWY.crl (hash: g60xfZlv5EKayCtb7xTpHfVav+WS0RXVDh7WrgEjqJw=) 2: 9DDA09EC05DC11EA9B6B0560C4F9AE02.roa (hash: jOASJy08cQtiHT2anaDk0d4CR9FN0kGkmWrO2dstaFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3362 (0xd22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454F3, serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166 Validity Not Before: Jul 28 18:21:25 2026 GMT Not After : Aug 4 18:21:25 2026 GMT Subject: CN=6a68f326-1e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:f3:39:50:63:1e:da:27:33:ff:5f:0a:f4: 65:30:d7:4e:aa:f0:1e:6c:22:30:3b:a0:3a:ed:c0: 2f:fb:e6:8c:17:4a:7d:9e:08:e3:d4:b6:bf:72:ac: 4d:bf:81:c7:b3:43:38:2a:55:74:81:18:a6:3c:9d: 65:e2:96:57:a3:26:eb:a5:f2:b4:59:c1:46:fd:04: 2f:0b:63:7a:8e:a9:ae:e3:bf:3b:22:46:3f:c8:3d: f1:2c:80:a6:9d:70:03:30:af:b9:99:cc:ea:88:62: 59:1a:a5:5b:d6:31:f4:97:93:31:01:26:0f:39:7f: 67:b6:81:48:49:f0:b6:02:f0:e2:47:85:1b:6f:de: 26:e4:2a:85:23:48:70:3c:d9:35:88:7c:5b:a6:af: 02:1b:41:11:d5:33:d0:7f:7c:80:cf:b2:07:a1:a9: 3f:c9:42:07:5d:d8:e8:b0:5c:c9:f6:9a:b7:02:f2: cc:b5:53:4a:f0:28:63:8c:52:a7:72:83:0a:56:61: d4:98:9b:9e:95:b6:53:a8:1d:69:4e:ec:18:8f:4f: 66:1d:ed:80:6f:f3:89:e0:6b:10:92:1f:22:b6:a5: 4d:77:bc:eb:31:b6:3a:5d:52:08:3e:ab:c5:39:53: 40:3d:a5:15:9f:b0:f0:72:ed:3f:c5:10:8a:e8:42: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DF:2A:DC:5B:83:05:72:BD:03:96:56:BE:85:65:D8:90:71:7F:43 X509v3 Authority Key Identifier: keyid:6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:12:6f:cb:0e:f6:5f:50:da:53:22:95:9c:64:6c:62:95: 2e:87:3b:8d:40:00:73:04:87:90:2e:98:75:38:76:ab:d9:89: f8:ff:44:d1:f7:96:aa:59:68:82:c2:02:20:bc:dd:7c:8e:16: 0f:7f:39:03:34:1c:43:0b:43:30:22:25:d5:ef:0e:89:c7:03: 91:6f:a9:7b:78:cb:e8:6f:0e:4a:c5:e1:0c:eb:92:94:c0:71: cf:71:89:67:2e:4f:c7:f5:92:68:72:c9:d4:d1:60:5d:df:7c: dc:93:22:15:19:9e:54:69:8b:eb:5b:57:73:83:0c:41:f9:bf: a0:e2:a4:b2:ce:f1:36:44:88:27:30:55:50:98:39:b4:9b:a1: cb:b1:a7:72:0a:a1:06:22:8e:bd:93:c9:56:95:39:0a:19:66: cf:6e:56:6f:1f:d0:62:db:d6:90:a2:79:a7:46:9b:b7:15:08: 2a:6a:b6:5d:d6:f0:52:24:8f:8f:79:26:99:46:5c:1b:91:53: 8d:01:39:dd:40:c8:68:e3:71:67:dc:79:29:87:d0:44:30:07: 71:65:1b:d4:26:9c:f1:ea:9c:a2:40:ac:ff:2b:5f:ce:d3:ea: fc:62:4a:26:0b:80:97:2f:2b:61:d9:79:67:3b:56:82:13:18: f2:25:b7:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RjMxMTAvBgNVBAUTKDZDRTkyNTRBOUNCRkEwNzA0MjI0MzczNURDRTRGQkY3 RTU0NjExNjYwHhcNMjYwNzI4MTgyMTI1WhcNMjYwODA0MTgyMTI1WjAYMRYwFAYD VQQDEw02YTY4ZjMyNi0xZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h3zOVBjHtonM/9fCvRlMNdOqvAebCIwO6A67cAv++aMF0p9ngjj1La/cqxN v4HHs0M4KlV0gRimPJ1l4pZXoybrpfK0WcFG/QQvC2N6jqmu4787IkY/yD3xLICm nXADMK+5mczqiGJZGqVb1jH0l5MxASYPOX9ntoFISfC2AvDiR4Ubb94m5CqFI0hw PNk1iHxbpq8CG0ER1TPQf3yAz7IHoak/yUIHXdjosFzJ9pq3AvLMtVNK8ChjjFKn coMKVmHUmJuelbZTqB1pTuwYj09mHe2Ab/OJ4GsQkh8itqVNd7zrMbY6XVIIPqvF OVNAPaUVn7Dwcu0/xRCK6ELvqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLfKtxb gwVyvQOWVr6FZdiQcX9DMB8GA1UdIwQYMBaAFGzpJUqcv6BwQiQ3Ndzk+/flRhFm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRGMy8xRUY3ODY2ODA1 REMxMUVBOTc0M0JBNUZDNEY5QUUwMi9iT2tsU3B5X29IQkNKRGMxM09UNzktVkdF V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPa2xTcHlfb0hCQ0pEYzEzT1Q3OS1WR0VXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRGMy8xRUY3ODY2ODA1REMxMUVBOTc0M0JBNUZDNEY5QUUwMi9iT2tsU3B5X29I QkNKRGMxM09UNzktVkdFV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFFASb8sO9l9Q2lMilZxkbGKVLoc7jUAAcwSHkC6YdTh2q9mJ+P9E0feWqllo gsICILzdfI4WD385AzQcQwtDMCIl1e8OiccDkW+pe3jL6G8OSsXhDOuSlMBxz3GJ Zy5Px/WSaHLJ1NFgXd983JMiFRmeVGmL61tXc4MMQfm/oOKkss7xNkSIJzBVUJg5 tJuhy7GncgqhBiKOvZPJVpU5Chlmz25Wbx/QYtvWkKJ5p0abtxUIKmq2XdbwUiSP j3kmmUZcG5FTjQE53UDIaONxZ9x5KYfQRDAHcWUb1Cac8eqcokCs/ytfztPq/GJK JguAly8rYdl5ZztWghMY8iW3Zw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:39:29 2026 by rpki-client