$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: LrV520jqcQB7IkD9T7kabDFz155eiabWFUv1e+o/tGs= Subject key identifier: 74:A1:10:81:AE:36:D8:5D:86:A4:66:AA:61:C8:54:5C:6A:D5:5A:81 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 1737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 171F Signing time: Thu 24 Sep 2026 16:35:35 +0000 Manifest this update: Thu 24 Sep 2026 16:35:35 +0000 Manifest next update: Thu 01 Oct 2026 16:35:35 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: jIiBalREhOr6xrMfSQH7/toH+hTDb0cLxnuwQ8S62lc=) 2: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: tVo9Z2FSMOetrp2j2EYJddOd8LH6HrgTtdxpl4sMUKQ=) 3: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: +S9KMUljfxQJFwqoopUe9aDl8dajJPyPJ+b4JFYvIxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5943 (0x1737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Sep 24 16:35:35 2026 GMT Not After : Oct 1 16:35:35 2026 GMT Subject: CN=6ab55157-cd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:61:3e:1e:db:d8:c9:b1:4d:b1:44:78:19: 01:a5:8b:04:3d:58:49:61:10:83:fc:85:88:cc:88: c5:eb:d8:1f:d7:a5:f1:db:a2:9c:c5:4f:9e:0c:9d: 22:4a:a7:8d:c4:c5:57:43:ba:d7:4a:20:dc:7c:d7: b7:9c:24:b9:44:f6:5e:1a:30:08:53:11:5b:ef:5b: ce:e6:9c:c3:47:e8:46:65:34:ff:be:4f:71:4e:0d: 43:77:6b:54:e0:62:d8:51:1d:9d:3c:53:fb:dd:5d: 9b:65:7b:0b:20:06:af:34:c9:e2:75:15:bf:5a:c8: 75:8e:23:83:ec:d5:fc:e8:43:10:4b:55:7e:1d:fc: db:22:ef:cc:bb:de:4e:c0:99:86:85:df:cd:bd:ad: 56:73:e3:d8:08:d2:8c:63:86:6d:04:03:29:f3:77: ea:cd:b2:e6:df:a3:6c:fa:2b:b8:b4:e5:e5:84:42: 1d:5c:e8:7d:4b:6b:85:37:47:ea:f7:ec:60:3f:90: a9:87:2b:d4:6b:d8:66:06:01:59:e5:13:93:01:25: a1:b1:96:e2:e0:04:69:0c:61:e8:1d:b7:a2:18:d7: 9c:fb:6a:bc:fd:9e:fb:cb:e0:6d:a0:f2:ef:92:9a: ed:02:6e:9d:86:58:5b:03:42:53:88:6a:7e:54:d8: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A1:10:81:AE:36:D8:5D:86:A4:66:AA:61:C8:54:5C:6A:D5:5A:81 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:93:a3:f5:b8:0e:e7:15:56:29:82:4d:f0:ca:79:97:fc:bf: 7f:e5:5e:25:e1:8c:e0:60:17:20:24:ac:3f:02:94:03:c2:0f: 0e:e7:89:d8:ad:1e:3c:c3:75:0c:cf:bf:c4:68:df:7f:28:1a: e6:2a:b6:9d:70:27:56:64:fd:7d:40:d3:12:a5:5b:36:1d:a7: 1c:5e:72:84:50:fe:68:f0:39:86:a0:db:0a:85:99:35:81:17: a8:18:3b:5a:00:d8:0a:d9:12:fd:89:96:e2:c4:de:98:90:ca: e3:6d:de:88:1e:e6:34:e5:bf:4a:99:78:e7:1a:82:d5:22:bf: b4:31:86:59:e0:f6:49:15:d6:cf:7d:89:71:e6:1c:0f:f2:0b: 45:cd:73:c2:95:db:a5:c2:5c:31:3e:8b:1e:70:7a:45:1a:63: 7b:07:8e:28:7b:28:17:a1:ef:9e:70:7a:d2:07:5b:ef:d6:9a: c9:c7:a3:f6:0f:8d:28:c9:f8:89:ba:a5:00:97:76:c3:76:fa: b4:8b:ff:e1:f2:0c:b0:85:60:e2:fd:04:ca:14:b5:02:79:19: 9e:a2:ab:b9:ee:3b:71:4a:ad:b3:2b:6a:c5:8b:04:43:9b:0c: 09:14:06:d0:f4:f0:ad:82:2d:e3:4b:94:d3:24:66:eb:4f:9b: 02:53:04:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYwOTI0MTYzNTM1WhcNMjYxMDAxMTYzNTM1WjAYMRYwFAYD VQQDEw02YWI1NTE1Ny1jZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/9hPh7b2MmxTbFEeBkBpYsEPVhJYRCD/IWIzIjF69gf16Xx26KcxU+eDJ0i SqeNxMVXQ7rXSiDcfNe3nCS5RPZeGjAIUxFb71vO5pzDR+hGZTT/vk9xTg1Dd2tU 4GLYUR2dPFP73V2bZXsLIAavNMnidRW/Wsh1jiOD7NX86EMQS1V+HfzbIu/Mu95O wJmGhd/Nva1Wc+PYCNKMY4ZtBAMp83fqzbLm36Ns+iu4tOXlhEIdXOh9S2uFN0fq 9+xgP5CphyvUa9hmBgFZ5ROTASWhsZbi4ARpDGHoHbeiGNec+2q8/Z77y+BtoPLv kprtAm6dhlhbA0JTiGp+VNhJrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHShEIGu NthdhqRmqmHIVFxq1VqBMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU5Oj9bgO5xVWKYJN8Mp5l/y/f+VeJeGM4GAXICSsPwKUA8IPDueJ2K0ePMN1 DM+/xGjffyga5iq2nXAnVmT9fUDTEqVbNh2nHF5yhFD+aPA5hqDbCoWZNYEXqBg7 WgDYCtkS/YmW4sTemJDK423eiB7mNOW/Spl45xqC1SK/tDGGWeD2SRXWz32JceYc D/ILRc1zwpXbpcJcMT6LHnB6RRpjeweOKHsoF6HvnnB60gdb79aaycej9g+NKMn4 ibqlAJd2w3b6tIv/4fIMsIVg4v0EyhS1AnkZnqKrue47cUqtsytqxYsEQ5sMCRQG 0PTwrYIt40uU0yRm60+bAlMEcw== -----END CERTIFICATE-----Generated at Sat Sep 26 11:42:58 2026 by rpki-client