$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft File: Ok9ILhJcCNuDBRbVGkot8eCqiso.mft (raw, json) Hash identifier: /pmNLD0lghO7gq4MqYUP522fQsc4zQzcfdnmAK3G60E= Subject key identifier: FA:28:F9:FA:A0:07:09:6D:54:62:DE:E0:89:8F:19:33:12:51:05:E8 Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA Certificate issuer: /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Certificate serial: 0B4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft Manifest number: 0B45 Signing time: Sun 20 Sep 2026 19:10:55 +0000 Manifest this update: Sun 20 Sep 2026 19:10:55 +0000 Manifest next update: Sun 27 Sep 2026 19:10:55 +0000 Files and hashes: 1: Ok9ILhJcCNuDBRbVGkot8eCqiso.crl (hash: zCF5hkHH487bq6k+hMfeFb3skavskEY26O0eM8VyQAo=) 2: F25A6266796A11EB82E0EE24C4F9AE02.roa (hash: gg5YRxm/OG8ParGdDVWKapchKMYooC3n6Om94oqfGGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2893 (0xb4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C158, serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Validity Not Before: Sep 20 19:10:55 2026 GMT Not After : Sep 27 19:10:55 2026 GMT Subject: CN=6ab02fbf-14da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:8f:2b:7c:4c:61:a8:98:f1:1d:59:d0:24: 63:03:b1:26:88:87:13:d1:56:f8:53:95:69:08:91: dd:13:36:6b:d6:c3:5d:32:fd:ac:16:23:31:5d:02: de:ee:1f:c1:59:8b:4d:9b:48:40:fb:e7:8b:73:83: ae:7d:a8:dc:08:50:ec:51:a7:66:65:b9:7e:35:cb: 67:aa:92:a2:2a:6d:47:7f:69:b5:f0:96:37:e6:2a: 30:6c:2a:e2:60:ed:65:ff:41:77:e6:54:4d:fb:ef: e7:76:c1:dc:a9:f2:57:9e:e1:01:99:78:47:d4:ca: b9:69:79:48:7d:e4:c4:f2:fb:77:fd:e1:8b:00:0e: f0:8c:76:ef:75:3e:35:62:f9:7f:3d:56:b8:12:00: a6:fd:1e:72:4f:c5:91:12:61:97:86:7b:e4:58:73: 65:f2:aa:9d:a8:11:1f:f1:18:30:39:15:ee:46:dc: 10:02:d5:1a:27:0e:9b:1c:fc:7d:04:55:91:79:ab: 69:39:54:29:86:70:9a:59:e7:76:4f:fa:fa:58:8f: f9:d0:c9:ac:1f:8c:e8:3e:5a:dd:90:e7:3e:7d:e7: 9f:e0:55:80:2c:e6:1e:d9:19:da:17:20:fd:2d:c9: 19:fc:3a:33:b4:63:f4:7e:c4:2c:4f:c6:ce:2b:5f: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:28:F9:FA:A0:07:09:6D:54:62:DE:E0:89:8F:19:33:12:51:05:E8 X509v3 Authority Key Identifier: keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:33:79:32:c2:4e:f8:f9:b2:0b:72:be:09:b8:e6:f7:08:e7: c9:bf:f8:74:df:d6:64:68:b4:87:aa:28:70:22:58:bc:fc:6f: 57:d8:4a:fe:05:f7:4e:4a:a4:cb:bd:22:78:d9:4a:90:85:88: 41:c7:e4:ea:f1:0e:dd:52:44:d2:5b:e7:42:5c:c2:11:b2:a6: 34:88:c2:89:83:e6:e9:df:c5:77:9b:61:1a:9c:73:3d:89:b4: be:fc:b7:01:cf:ed:02:63:8d:1c:e4:33:89:ef:6d:08:77:9c: 9c:91:1a:cc:d3:67:70:d5:2f:c6:af:ad:cc:d6:3e:cb:86:fe: e8:d9:bd:3a:31:85:12:ef:f8:9f:3d:87:29:6d:94:f8:ad:89: 49:b2:22:fe:8c:52:ef:56:e9:1f:ba:43:4c:91:e5:3a:45:86: 69:d4:e6:29:80:50:d2:b2:4f:3e:b0:b0:0d:a6:1d:3f:75:dc: a6:cd:0e:e4:21:f4:ab:6d:29:25:7a:d2:f6:14:4d:ef:60:20: 35:91:cc:bd:2b:fe:a2:b6:c4:0c:9d:3d:97:99:1d:c8:e5:30: 70:d2:cb:cc:b5:6d:7b:d4:5b:e9:fb:65:e6:7e:5e:e2:45:74: f5:74:60:6a:b2:60:dd:35:48:80:97:a7:a5:cf:74:30:d3:8d: 58:be:1f:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxNTgxMTAvBgNVBAUTKDNBNEY0ODJFMTI1QzA4REI4MzA1MTZENTFBNEEyREYx RTBBQThBQ0EwHhcNMjYwOTIwMTkxMDU1WhcNMjYwOTI3MTkxMDU1WjAYMRYwFAYD VQQDEw02YWIwMmZiZi0xNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNiPK3xMYaiY8R1Z0CRjA7EmiIcT0Vb4U5VpCJHdEzZr1sNdMv2sFiMxXQLe 7h/BWYtNm0hA++eLc4OufajcCFDsUadmZbl+NctnqpKiKm1Hf2m18JY35iowbCri YO1l/0F35lRN++/ndsHcqfJXnuEBmXhH1Mq5aXlIfeTE8vt3/eGLAA7wjHbvdT41 Yvl/PVa4EgCm/R5yT8WREmGXhnvkWHNl8qqdqBEf8RgwORXuRtwQAtUaJw6bHPx9 BFWReatpOVQphnCaWed2T/r6WI/50MmsH4zoPlrdkOc+feef4FWALOYe2RnaFyD9 LckZ/DoztGP0fsQsT8bOK18hqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoo+fqg BwltVGLe4ImPGTMSUQXoMB8GA1UdIwQYMBaAFDpPSC4SXAjbgwUW1RpKLfHgqorK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzE1OC9BRTUxRDgwMjY3 M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NOdURCUmJWR2tvdDhlQ3Fp c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rOUlMaEpjQ051REJSYlZHa290OGVDcWlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzE1OC9BRTUxRDgwMjY3M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NO dURCUmJWR2tvdDhlQ3Fpc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJzN5MsJO+PmyC3K+Cbjm9wjnyb/4dN/WZGi0h6oocCJYvPxvV9hK/gX3Tkqk y70ieNlKkIWIQcfk6vEO3VJE0lvnQlzCEbKmNIjCiYPm6d/Fd5thGpxzPYm0vvy3 Ac/tAmONHOQzie9tCHecnJEazNNncNUvxq+tzNY+y4b+6Nm9OjGFEu/4nz2HKW2U +K2JSbIi/oxS71bpH7pDTJHlOkWGadTmKYBQ0rJPPrCwDaYdP3Xcps0O5CH0q20p JXrS9hRN72AgNZHMvSv+orbEDJ09l5kdyOUwcNLLzLVte9Rb6ftl5n5e4kV09XRg arJg3TVIgJenpc90MNONWL4fpw== -----END CERTIFICATE-----Generated at Tue Sep 22 18:31:05 2026 by rpki-client