$ rpki-client -vvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft File: Ok9ILhJcCNuDBRbVGkot8eCqiso.mft (raw, json) Hash identifier: 0PJruTJCzE0VgOoFREd76RY8vsFaxFjtVq8zCWhHH+o= Subject key identifier: 93:FB:81:5E:1B:C0:14:7C:BC:C5:B1:FF:14:14:33:28:26:99:AF:5F Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA Certificate issuer: /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Certificate serial: 0B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft Manifest number: 0B28 Signing time: Sun 26 Jul 2026 19:43:32 +0000 Manifest this update: Sun 26 Jul 2026 19:43:31 +0000 Manifest next update: Sun 02 Aug 2026 19:43:31 +0000 Files and hashes: 1: Ok9ILhJcCNuDBRbVGkot8eCqiso.crl (hash: JOlFpW8nCNGOzD1toiJyeJdou4Jslq1/rM/hnuFpxkk=) 2: F25A6266796A11EB82E0EE24C4F9AE02.roa (hash: gg5YRxm/OG8ParGdDVWKapchKMYooC3n6Om94oqfGGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C158, serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Validity Not Before: Jul 26 19:43:31 2026 GMT Not After : Aug 2 19:43:31 2026 GMT Subject: CN=6a666363-b2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bc:a9:34:a4:ee:c7:d8:fc:e6:b7:55:97:11: 30:3b:e6:a8:1b:61:59:ae:d8:ba:a7:0e:2f:01:39: d2:ab:f7:b3:be:3a:5d:89:91:9a:b5:29:5f:ed:25: e9:40:a0:94:25:e2:b5:7f:de:78:9e:9b:4a:46:df: 33:31:20:15:cc:36:45:fb:fd:9d:a5:b8:1c:61:ec: 09:68:a6:d6:2c:7e:7c:31:8d:c8:08:46:03:6a:7b: 96:f9:78:27:32:8d:05:9d:5b:ab:cb:f2:c0:b6:6b: 9f:22:9c:83:b1:42:88:2d:db:cf:80:b8:b7:5a:0d: b7:ba:96:51:0b:d8:24:7d:28:3a:2f:b1:41:9d:00: 9d:51:17:59:84:91:fe:b6:10:08:b9:cd:2a:c1:90: 8a:e0:fc:14:c8:e5:11:63:25:49:e4:c8:b2:49:90: e3:6a:0f:ad:64:e6:0b:59:e6:17:09:7a:3f:c4:f0: 6f:3e:ac:d2:37:7d:b8:a8:2d:f1:51:a6:2a:f2:6f: d5:8b:1e:d0:7e:50:19:46:26:61:03:fa:99:ba:55: 1d:81:d8:e9:4f:7a:87:71:c0:01:f2:c8:e6:d3:0b: 7c:29:d0:89:51:96:24:6c:90:26:36:25:15:c7:8e: ae:43:a8:bf:33:7a:50:33:1f:ef:e2:28:d5:e6:a4: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FB:81:5E:1B:C0:14:7C:BC:C5:B1:FF:14:14:33:28:26:99:AF:5F X509v3 Authority Key Identifier: keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c7:6e:0d:43:36:78:48:55:fc:71:47:fc:37:cf:60:8b:5a: 74:10:c8:b1:af:de:5f:ee:98:28:37:8b:1c:d5:a2:59:87:2c: 1e:93:1b:fa:c7:90:26:da:5d:89:39:8c:a7:4b:cb:1c:c5:3b: 97:5a:56:7a:10:7f:03:3c:60:9b:54:98:5f:9c:38:3e:bb:54: 22:45:1b:1e:f9:d6:7b:15:ca:e8:ef:1a:20:27:69:77:3c:15: 34:77:4d:a3:96:7c:6d:1f:7a:f9:f2:de:07:f8:42:ea:81:11: f3:00:22:be:e6:14:1b:05:f7:46:27:53:66:fa:59:2a:7b:65: 3c:81:2f:94:64:85:fe:23:ea:fe:47:96:e4:02:f8:6b:45:cd: 28:d5:ce:dc:87:c2:a0:d9:83:2c:94:c4:d8:80:7e:d6:5a:a8: 9c:0b:39:b3:5d:65:99:f8:fe:46:de:7e:74:a3:6d:b2:c2:85: 0d:5f:80:6c:00:00:85:ce:1f:9c:29:85:9c:be:de:ff:f6:90: b0:88:32:b4:ad:89:8f:ef:f2:fd:5f:12:7e:1a:2a:4c:f4:98: 39:43:2b:63:2d:d9:a8:a0:05:af:4b:3e:e8:78:74:d4:ea:6f: 0d:d0:3a:9c:03:48:cd:bf:67:e7:1b:fd:54:13:60:f4:60:ba: be:64:64:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxNTgxMTAvBgNVBAUTKDNBNEY0ODJFMTI1QzA4REI4MzA1MTZENTFBNEEyREYx RTBBQThBQ0EwHhcNMjYwNzI2MTk0MzMxWhcNMjYwODAyMTk0MzMxWjAYMRYwFAYD VQQDEw02YTY2NjM2My1iMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rypNKTux9j85rdVlxEwO+aoG2FZrti6pw4vATnSq/ezvjpdiZGatSlf7SXp QKCUJeK1f954nptKRt8zMSAVzDZF+/2dpbgcYewJaKbWLH58MY3ICEYDanuW+Xgn Mo0FnVury/LAtmufIpyDsUKILdvPgLi3Wg23upZRC9gkfSg6L7FBnQCdURdZhJH+ thAIuc0qwZCK4PwUyOURYyVJ5MiySZDjag+tZOYLWeYXCXo/xPBvPqzSN324qC3x UaYq8m/Vix7QflAZRiZhA/qZulUdgdjpT3qHccAB8sjm0wt8KdCJUZYkbJAmNiUV x46uQ6i/M3pQMx/v4ijV5qSwMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJP7gV4b wBR8vMWx/xQUMygmma9fMB8GA1UdIwQYMBaAFDpPSC4SXAjbgwUW1RpKLfHgqorK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzE1OC9BRTUxRDgwMjY3 M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NOdURCUmJWR2tvdDhlQ3Fp c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rOUlMaEpjQ051REJSYlZHa290OGVDcWlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzE1OC9BRTUxRDgwMjY3M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NO dURCUmJWR2tvdDhlQ3Fpc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfsduDUM2eEhV/HFH/DfPYItadBDIsa/eX+6YKDeLHNWiWYcsHpMb+seQJtpd iTmMp0vLHMU7l1pWehB/Azxgm1SYX5w4PrtUIkUbHvnWexXK6O8aICdpdzwVNHdN o5Z8bR96+fLeB/hC6oER8wAivuYUGwX3RidTZvpZKntlPIEvlGSF/iPq/keW5AL4 a0XNKNXO3IfCoNmDLJTE2IB+1lqonAs5s11lmfj+Rt5+dKNtssKFDV+AbAAAhc4f nCmFnL7e//aQsIgytK2Jj+/y/V8SfhoqTPSYOUMrYy3ZqKAFr0s+6Hh01OpvDdA6 nANIzb9n5xv9VBNg9GC6vmRkcQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:42 2026 by rpki-client