$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: viX+fp7lONNaXhtBcd5+aYExZOvOGS1cmokat8ot2ao= Subject key identifier: 51:52:1B:84:65:E6:35:B3:29:98:C9:71:BD:30:73:54:18:70:A7:63 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 1715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 16FF Signing time: Tue 28 Jul 2026 16:43:24 +0000 Manifest this update: Tue 28 Jul 2026 16:43:23 +0000 Manifest next update: Tue 04 Aug 2026 16:43:23 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: /1Q3Z9hNpSS18zYJnVrSNYa9lG/cYkrUhL7uEgncMVY=) 2: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: axiKuwLSfY8matk7uBsk8eo5tXOq+cX6OWML8EZD+cQ=) 3: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: Z38B7rPVhqG6tcWO8r6+i/l0vZbjlq448NkG06qknRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5909 (0x1715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Jul 28 16:43:23 2026 GMT Not After : Aug 4 16:43:23 2026 GMT Subject: CN=6a68dc2c-81c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:39:51:96:6f:00:af:eb:84:54:dd:ca:d4:aa: 6a:64:54:f7:d9:11:cb:1d:26:8a:29:2f:61:08:94: 64:2d:82:df:79:41:ea:c9:a0:38:23:31:ec:05:e4: 42:90:cf:e3:78:ab:52:e2:d1:60:09:f8:09:d3:db: bb:3e:d8:b2:2e:c3:58:e5:7f:36:d0:66:36:e4:a3: ed:11:23:e9:01:b3:50:ff:dd:e7:7e:c0:94:ea:96: 2e:1c:d4:17:c1:5a:63:ac:4f:0f:1f:22:56:1a:d6: 8a:09:0e:98:2a:43:e0:9a:35:77:41:21:2e:a4:e0: 77:99:a5:ce:18:2b:dc:23:b3:77:f0:0d:3e:a9:2e: db:59:a6:a8:55:f6:f6:a0:d4:ab:04:e3:c7:f8:e3: c4:f7:c1:15:2c:80:c6:96:aa:2e:a3:d9:a2:2b:4d: 59:76:03:0a:f0:80:c3:38:db:a8:f0:a7:1f:7f:5f: 3d:b7:f2:94:33:be:72:c7:56:fa:f5:d1:ef:eb:11: 3f:fa:54:e8:00:29:fb:da:03:23:bc:ec:2e:a8:a0: 19:6c:60:2d:a4:99:ce:58:a2:ce:55:af:ea:c3:0b: d6:1e:39:de:b3:03:6f:99:81:f5:2e:38:74:cc:0b: af:0a:21:13:8d:f8:e8:81:e8:40:06:68:63:ba:06: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:52:1B:84:65:E6:35:B3:29:98:C9:71:BD:30:73:54:18:70:A7:63 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:18:92:c0:6b:cc:3b:b5:ec:67:8b:32:71:28:38:29:1e:bf: 3f:64:b9:8e:d3:68:85:bf:88:74:b3:eb:38:b4:eb:c6:08:89: d2:03:89:6c:14:4d:9b:4b:bb:8a:3f:19:a5:39:81:2b:3d:ca: 62:8c:1f:14:a7:ea:ea:ab:26:84:15:77:9a:c3:4f:bb:f2:26: 65:2d:69:9f:5f:76:49:dd:e0:04:30:89:a2:12:c0:60:2a:cd: 77:bc:70:dc:12:39:59:1b:10:55:7d:5e:ab:30:ab:c6:bb:b3: 9b:7d:fe:da:e1:52:bd:0d:b8:c8:02:60:79:ae:32:20:f9:8d: d7:b3:d1:22:10:ce:4d:07:fc:b3:47:f4:1a:61:24:fd:be:86: 5e:17:7c:89:da:c9:62:e5:57:e5:5d:0f:46:d7:c2:3d:3a:e1: 11:9f:7b:c8:78:5a:1e:6e:d3:82:60:b6:5c:9b:48:a4:71:1a: a3:b9:a5:eb:e7:af:43:0f:ed:9f:ee:7d:a7:1d:9b:fb:b6:66: 45:09:c1:ee:fa:8c:71:07:65:a3:d7:1c:1b:e7:47:af:51:9c: 01:87:1e:72:00:e8:c2:93:ad:45:b3:89:bc:5a:0d:54:79:77: af:76:64:13:d0:3f:c6:8f:42:78:57:68:48:5d:13:50:ad:db: 09:29:96:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYwNzI4MTY0MzIzWhcNMjYwODA0MTY0MzIzWjAYMRYwFAYD VQQDEw02YTY4ZGMyYy04MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DlRlm8Ar+uEVN3K1KpqZFT32RHLHSaKKS9hCJRkLYLfeUHqyaA4IzHsBeRC kM/jeKtS4tFgCfgJ09u7PtiyLsNY5X820GY25KPtESPpAbNQ/93nfsCU6pYuHNQX wVpjrE8PHyJWGtaKCQ6YKkPgmjV3QSEupOB3maXOGCvcI7N38A0+qS7bWaaoVfb2 oNSrBOPH+OPE98EVLIDGlqouo9miK01ZdgMK8IDDONuo8Kcff189t/KUM75yx1b6 9dHv6xE/+lToACn72gMjvOwuqKAZbGAtpJnOWKLOVa/qwwvWHjneswNvmYH1Ljh0 zAuvCiETjfjogehABmhjugbG3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFSG4Rl 5jWzKZjJcb0wc1QYcKdjMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAhiSwGvMO7XsZ4sycSg4KR6/P2S5jtNohb+IdLPrOLTrxgiJ0gOJbBRNm0u7 ij8ZpTmBKz3KYowfFKfq6qsmhBV3msNPu/ImZS1pn192Sd3gBDCJohLAYCrNd7xw 3BI5WRsQVX1eqzCrxruzm33+2uFSvQ24yAJgea4yIPmN17PRIhDOTQf8s0f0GmEk /b6GXhd8idrJYuVX5V0PRtfCPTrhEZ97yHhaHm7TgmC2XJtIpHEao7ml6+evQw/t n+59px2b+7ZmRQnB7vqMcQdlo9ccG+dHr1GcAYcecgDowpOtRbOJvFoNVHl3r3Zk E9A/xo9CeFdoSF0TUK3bCSmWIA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:01:58 2026 by rpki-client