$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: TWdKgRsEqD0iV/ljIhcjDGybSNiT+m10KD8gx0p89VM= Subject key identifier: 81:A1:2A:10:BB:A9:8D:90:8F:A2:CB:1E:E4:43:3E:FB:ED:FE:13:59 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 16FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 16E8 Signing time: Fri 12 Jun 2026 16:36:15 +0000 Manifest this update: Fri 12 Jun 2026 16:36:14 +0000 Manifest next update: Fri 19 Jun 2026 16:36:14 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: 4I6G3uqEbeQTZYieqEZ0ni/3Se1HHX7XssghOnRECdw=) 2: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: axiKuwLSfY8matk7uBsk8eo5tXOq+cX6OWML8EZD+cQ=) 3: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: Z38B7rPVhqG6tcWO8r6+i/l0vZbjlq448NkG06qknRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5886 (0x16fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Jun 12 16:36:14 2026 GMT Not After : Jun 19 16:36:14 2026 GMT Subject: CN=6a2c357f-d3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:4b:7f:46:3a:40:7a:4c:45:f4:e8:18:06: 32:92:16:a1:03:f3:21:2b:63:0d:db:f0:36:5e:5e: c7:09:44:1b:be:e5:ca:73:3a:19:4b:0a:2f:c5:25: 21:be:96:8c:0d:0a:ed:41:b9:9b:88:2a:c0:8f:95: 64:ae:fa:e1:36:00:dc:53:eb:c5:e0:46:04:3e:20: d1:db:73:21:09:b6:96:c4:1e:f5:af:29:69:86:03: 1f:d8:fa:57:75:06:fc:1b:c2:ac:8c:90:21:b9:4b: 36:c2:80:d7:27:3b:8f:3f:24:e8:57:1d:75:af:77: 8c:3a:4c:0a:96:1a:6d:0a:a3:cf:d2:27:79:d5:90: 8e:ec:65:01:96:fa:ba:7c:ac:ec:79:d0:f2:ae:03: ca:71:07:56:5a:7d:c6:4b:fc:3d:53:5d:e6:b3:31: 9a:c4:85:e0:bd:a8:d7:06:d8:b4:41:75:d8:76:3d: 01:3e:24:9e:14:10:ad:3d:21:81:0e:e7:02:df:d4: 6a:1c:67:83:86:d0:67:a4:0c:10:7d:e4:a1:4b:f7: 7a:33:b8:0c:44:1d:16:6f:96:10:c6:fa:7c:99:82: 04:29:9d:b2:bb:64:dd:2f:8c:32:77:34:49:c7:0e: 33:74:0d:46:be:aa:97:8b:cd:f6:b1:70:ec:38:47: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A1:2A:10:BB:A9:8D:90:8F:A2:CB:1E:E4:43:3E:FB:ED:FE:13:59 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e6:af:0f:75:1e:dc:83:9b:2f:74:57:a1:a4:17:ac:3f:b2: 35:15:d1:06:17:c4:2a:f3:31:15:6f:81:04:c2:10:b1:0c:a8: bd:02:7b:7f:56:df:c0:48:31:91:70:6d:7d:c7:33:83:46:e7: 4f:e8:6f:c6:65:87:fb:14:ae:6b:7b:54:98:19:88:b7:29:b0: 5c:b4:42:f9:86:a3:c8:ea:c0:4a:d3:72:fe:c1:53:2a:a9:6d: c4:22:0d:cb:f6:9d:c2:21:86:f8:2d:5e:1b:86:00:47:fe:5d: 85:0a:44:cf:85:9e:e7:ab:1f:e7:61:a5:65:e8:e8:5f:30:bc: 30:9b:18:36:95:76:5b:0f:20:ad:a5:3c:2c:c1:d1:28:2b:bc: 63:fe:8c:e1:40:bf:27:37:0a:f5:53:73:6c:ae:d9:ba:bc:6b: 53:3b:c9:52:fc:26:60:c8:57:1d:93:ad:31:8f:5e:88:c9:0c: e9:2f:ff:e5:68:6a:95:bb:e8:a4:18:8b:cd:b3:eb:b6:6b:dc: 08:d1:8e:91:f9:80:24:a9:1d:a4:87:e2:38:56:17:39:4c:90: c5:a6:89:92:52:c1:59:ab:cd:80:88:12:ee:7d:78:59:e0:93: db:51:a6:29:a9:83:f6:08:41:a3:af:75:a8:82:9a:28:3c:2c: 79:17:c1:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYwNjEyMTYzNjE0WhcNMjYwNjE5MTYzNjE0WjAYMRYwFAYD VQQDEw02YTJjMzU3Zi1kM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsdLf0Y6QHpMRfToGAYykhahA/MhK2MN2/A2Xl7HCUQbvuXKczoZSwovxSUh vpaMDQrtQbmbiCrAj5VkrvrhNgDcU+vF4EYEPiDR23MhCbaWxB71rylphgMf2PpX dQb8G8KsjJAhuUs2woDXJzuPPyToVx11r3eMOkwKlhptCqPP0id51ZCO7GUBlvq6 fKzsedDyrgPKcQdWWn3GS/w9U13mszGaxIXgvajXBti0QXXYdj0BPiSeFBCtPSGB DucC39RqHGeDhtBnpAwQfeShS/d6M7gMRB0Wb5YQxvp8mYIEKZ2yu2TdL4wydzRJ xw4zdA1GvqqXi832sXDsOEe1bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGhKhC7 qY2Qj6LLHuRDPvvt/hNZMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKeavD3Ue3IObL3RXoaQXrD+yNRXRBhfEKvMxFW+BBMIQsQyovQJ7f1bfwEgx kXBtfcczg0bnT+hvxmWH+xSua3tUmBmItymwXLRC+YajyOrAStNy/sFTKqltxCIN y/adwiGG+C1eG4YAR/5dhQpEz4We56sf52GlZejoXzC8MJsYNpV2Ww8graU8LMHR KCu8Y/6M4UC/JzcK9VNzbK7ZurxrUzvJUvwmYMhXHZOtMY9eiMkM6S//5Whqlbvo pBiLzbPrtmvcCNGOkfmAJKkdpIfiOFYXOUyQxaaJklLBWavNgIgS7n14WeCT21Gm KamD9ghBo691qIKaKDwseRfBug== -----END CERTIFICATE-----Generated at Sat Jun 13 07:24:06 2026 by rpki-client