$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: JWMLCXj91SpbjD6BS6FOtP/ySu+vSiQFXgm4pbY0sMI= Subject key identifier: D0:B1:D4:BE:1D:2E:35:15:A4:9F:95:95:4B:47:80:B2:DF:10:3D:2C Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 16C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 16B1 Signing time: Sat 28 Feb 2026 16:43:59 +0000 Manifest this update: Sat 28 Feb 2026 16:43:59 +0000 Manifest next update: Sat 07 Mar 2026 16:43:59 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: jQbShRHfKsq9JhUiHXq3Xi4ppEIgZv9OJdmAwfnNwSo=) 2: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: bW1tXZTK5POt+zZDGbG4YDsox5kPeg50QnLxOuLANNg=) 3: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: sJz6G/xstqw6p4gPUJK4gZEDHHsTgFb0oSV9wpMQ7es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5827 (0x16c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Feb 28 16:43:59 2026 GMT Not After : Mar 7 16:43:59 2026 GMT Subject: CN=69a31b4f-4b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:87:a8:20:66:95:31:e2:38:11:1c:3c:fa: a7:0f:cd:30:74:b9:4e:7b:93:af:bc:75:4b:ab:d0: 82:fa:f4:9e:1e:8c:29:1a:08:f6:f7:27:2f:31:56: 60:7a:88:20:30:93:8f:6f:db:b0:5c:df:75:f5:13: 77:eb:92:c1:a3:c9:22:4d:ed:97:12:5d:ee:04:33: 27:43:ce:42:55:79:f5:7b:ec:05:8d:77:ff:b9:c4: d4:7a:fe:10:b4:05:a6:92:58:75:7d:67:75:92:59: 27:32:93:42:d3:b8:2b:1c:0c:f7:31:da:29:e5:36: 1d:93:38:10:9f:22:0c:3d:8f:6d:0a:10:c5:5b:51: 7f:be:81:a9:26:7e:5e:bf:dc:27:dc:e3:b4:3d:1d: 9e:13:85:c9:a3:66:b5:4c:f1:66:2b:c8:0b:59:f0: a6:c0:94:b7:37:98:c9:38:85:48:7d:83:25:ba:0c: 9e:e6:42:11:a8:09:ca:dd:77:8d:b6:10:12:ac:64: 1e:d8:cc:9b:95:8b:63:97:d9:7a:68:00:f3:30:bd: 51:82:e8:a9:02:dd:86:a0:cb:e9:cc:96:fc:91:71: 32:6d:72:b1:23:83:af:58:bc:d9:9d:f1:3d:18:9a: d0:88:5d:81:55:f1:0d:09:93:47:ea:25:2a:99:d0: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B1:D4:BE:1D:2E:35:15:A4:9F:95:95:4B:47:80:B2:DF:10:3D:2C X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:35:f1:d3:69:60:76:1c:0b:a0:33:c8:46:ec:94:97:a7:47: d7:f4:33:dd:df:a6:f7:62:ee:d0:26:ea:07:51:89:55:c5:88: cd:0f:0f:4b:26:5a:a0:c6:97:52:41:92:60:42:33:65:74:19: 23:95:4b:6c:8f:f7:f5:e6:c9:14:f1:13:ee:27:1b:33:63:1a: a4:48:11:39:fd:57:52:8d:f3:5c:6b:bd:17:2b:75:55:42:9a: 26:cf:5f:ea:17:f7:5e:36:48:39:f9:23:d2:73:55:84:73:99: f6:51:82:2b:0e:b6:a6:96:af:b0:76:92:7b:1c:0a:de:3c:80: 11:4c:b1:ff:ad:4e:de:90:ac:83:de:b1:dd:cc:c3:83:6f:ab: 74:50:9f:d5:b1:58:b8:db:e2:79:59:be:86:d5:99:6d:32:3e: 79:90:45:ec:f6:8d:37:4d:c2:c0:09:9c:4d:12:4a:97:d9:7f: 95:66:23:71:90:02:58:e3:ac:8a:cc:0c:e6:8c:b2:b4:79:95: 7b:4d:d9:aa:57:c6:ad:4a:33:4e:50:d9:2d:14:6b:c0:1e:74: f7:a7:eb:e2:45:08:30:9d:1d:c3:28:47:fa:a5:cb:36:db:cb: ad:0d:61:39:5e:2b:50:6b:5e:0e:f1:5b:a4:31:e7:4e:cc:61: e8:50:a1:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYwMjI4MTY0MzU5WhcNMjYwMzA3MTY0MzU5WjAYMRYwFAYD VQQDDA02OWEzMWI0Zi00YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZKHqCBmlTHiOBEcPPqnD80wdLlOe5OvvHVLq9CC+vSeHowpGgj29ycvMVZg eoggMJOPb9uwXN919RN365LBo8kiTe2XEl3uBDMnQ85CVXn1e+wFjXf/ucTUev4Q tAWmklh1fWd1klknMpNC07grHAz3Mdop5TYdkzgQnyIMPY9tChDFW1F/voGpJn5e v9wn3OO0PR2eE4XJo2a1TPFmK8gLWfCmwJS3N5jJOIVIfYMlugye5kIRqAnK3XeN thASrGQe2MyblYtjl9l6aADzML1RguipAt2GoMvpzJb8kXEybXKxI4OvWLzZnfE9 GJrQiF2BVfENCZNH6iUqmdDrNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCx1L4d LjUVpJ+VlUtHgLLfED0sMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdjXx02lgdhwLoDPIRuyUl6dH1/Qz3d+m92Lu0CbqB1GJVcWIzQ8PSyZaoMaX UkGSYEIzZXQZI5VLbI/39ebJFPET7icbM2MapEgROf1XUo3zXGu9Fyt1VUKaJs9f 6hf3XjZIOfkj0nNVhHOZ9lGCKw62ppavsHaSexwK3jyAEUyx/61O3pCsg96x3czD g2+rdFCf1bFYuNvieVm+htWZbTI+eZBF7PaNN03CwAmcTRJKl9l/lWYjcZACWOOs iswM5oyytHmVe03ZqlfGrUozTlDZLRRrwB5096fr4kUIMJ0dwyhH+qXLNtvLrQ1h OV4rUGteDvFbpDHnTsxh6FChBQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:46:04 2026 by rpki-client