$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: xIA95Rvuyntxmm/E5JcL55JmfuKgfoy2/wvOpxacZE0= Subject key identifier: 5F:CC:B9:8B:DE:A0:9A:1A:5F:36:7A:57:7F:6A:DF:6E:21:BE:06:E3 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 16E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 16CB Signing time: Thu 16 Apr 2026 16:35:45 +0000 Manifest this update: Thu 16 Apr 2026 16:35:45 +0000 Manifest next update: Thu 23 Apr 2026 16:35:45 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: waalCsKYf/FnQ29eeWT9sBQVgShvJ41XiFB36E+53K4=) 2: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: axiKuwLSfY8matk7uBsk8eo5tXOq+cX6OWML8EZD+cQ=) 3: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: Z38B7rPVhqG6tcWO8r6+i/l0vZbjlq448NkG06qknRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5857 (0x16e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Apr 16 16:35:45 2026 GMT Not After : Apr 23 16:35:45 2026 GMT Subject: CN=69e10fe1-7cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:0c:a4:80:9b:68:49:75:e3:9d:50:02:85: c3:26:49:0e:bb:36:55:08:41:f6:0e:a3:39:f7:5e: 33:bc:10:e3:f6:7b:05:c5:1c:0b:ef:f1:00:ce:27: d0:ac:a6:2c:6a:37:2a:2a:9e:42:d9:06:bd:21:57: 8c:d3:37:8f:aa:c3:2b:60:47:6c:1a:14:47:22:79: 8b:cf:bc:af:44:b0:dd:6f:81:8f:37:f8:53:80:f0: 9a:5c:aa:67:d1:29:79:e7:45:06:2f:e0:33:a2:2e: 35:4d:eb:7b:0b:5e:bd:27:d0:8d:da:04:06:09:a7: aa:87:5e:5c:13:e7:bf:3b:7c:64:7f:c3:5a:a1:90: 83:0f:9b:c5:ba:55:a8:b3:15:d1:f5:88:06:82:22: 8a:ce:24:5c:dc:f4:c3:da:51:a5:05:6e:1f:9d:e3: 0a:38:54:5e:74:ad:ac:28:60:4f:da:34:32:ba:a5: 03:63:c0:fb:8a:6f:fc:8d:04:da:23:c5:d5:bb:56: 42:6a:d9:c5:20:be:a1:7d:36:27:fa:87:68:de:33: 3c:e3:01:90:f4:1e:2d:60:85:a8:09:b6:1c:f0:eb: cc:6c:22:b7:0f:e5:2e:c1:11:2a:ca:e9:f4:cc:4b: 3d:16:58:c3:90:d5:a9:1a:f6:2e:06:81:e3:07:bd: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CC:B9:8B:DE:A0:9A:1A:5F:36:7A:57:7F:6A:DF:6E:21:BE:06:E3 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ab:34:1e:24:1c:5a:56:4d:81:ce:ac:b4:13:df:21:bf:0d: 8e:a2:80:e5:83:15:29:a1:31:04:d6:27:f3:a1:38:33:a5:19: 3d:f4:55:e1:d0:08:e0:4b:a1:93:30:57:07:02:1f:1a:ba:59: 5a:2f:73:0e:09:89:ba:d6:8e:7b:d9:0b:93:3f:ad:fe:58:44: c5:90:d8:86:ec:d2:7f:31:ef:57:98:bd:58:1e:1b:29:38:f0: 40:0e:8d:0a:eb:f7:51:57:cb:64:23:3d:e6:65:7c:a8:3b:72: d0:4a:50:44:f3:d2:2c:bd:8a:54:1c:c0:65:bf:b4:07:65:29: fb:a8:fe:3b:b0:9f:d1:84:30:dc:a6:41:e7:6e:b8:a4:c3:74: 5d:84:7d:d0:79:61:eb:3a:dc:14:85:c5:c6:37:2b:3c:79:44: 8c:e6:70:5c:fa:6a:fc:c7:32:d1:50:2a:19:82:20:eb:39:97: f6:c4:64:ba:f5:4e:b6:85:5f:f2:fd:20:7c:31:f9:e7:15:a4: 56:53:20:89:15:31:9b:34:38:f5:43:ed:d7:91:ec:e2:db:15: 2d:e3:29:8a:c9:dc:e2:ff:40:9f:49:1f:ad:28:c9:5c:38:71: 9f:96:30:2d:8f:d5:b8:c6:2a:bd:70:a8:e2:3b:0c:68:10:9e: fa:d0:6e:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYwNDE2MTYzNTQ1WhcNMjYwNDIzMTYzNTQ1WjAYMRYwFAYD VQQDEw02OWUxMGZlMS03Y2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+IMpICbaEl1451QAoXDJkkOuzZVCEH2DqM5914zvBDj9nsFxRwL7/EAzifQ rKYsajcqKp5C2Qa9IVeM0zePqsMrYEdsGhRHInmLz7yvRLDdb4GPN/hTgPCaXKpn 0Sl550UGL+Azoi41Tet7C169J9CN2gQGCaeqh15cE+e/O3xkf8NaoZCDD5vFulWo sxXR9YgGgiKKziRc3PTD2lGlBW4fneMKOFRedK2sKGBP2jQyuqUDY8D7im/8jQTa I8XVu1ZCatnFIL6hfTYn+odo3jM84wGQ9B4tYIWoCbYc8OvMbCK3D+UuwREqyun0 zEs9FljDkNWpGvYuBoHjB73O/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/MuYve oJoaXzZ6V39q324hvgbjMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANKs0HiQcWlZNgc6stBPfIb8NjqKA5YMVKaExBNYn86E4M6UZPfRV4dAI4Euh kzBXBwIfGrpZWi9zDgmJutaOe9kLkz+t/lhExZDYhuzSfzHvV5i9WB4bKTjwQA6N Cuv3UVfLZCM95mV8qDty0EpQRPPSLL2KVBzAZb+0B2Up+6j+O7Cf0YQw3KZB5264 pMN0XYR90Hlh6zrcFIXFxjcrPHlEjOZwXPpq/Mcy0VAqGYIg6zmX9sRkuvVOtoVf 8v0gfDH55xWkVlMgiRUxmzQ49UPt15Hs4tsVLeMpisnc4v9An0kfrSjJXDhxn5Yw LY/VuMYqvXCo4jsMaBCe+tBuyA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:29 2026 by rpki-client