$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft File: okltnZFYW2aRdHCbDN4x_OMbL1o.mft (raw, json) Hash identifier: 2BtvHxfI/pSJG9YxGS31A2GFGghxf87KOypuyTC7U2k= Subject key identifier: 6B:A4:F1:47:73:6F:BE:48:EB:92:D0:87:AF:8F:76:C1:E2:FE:52:16 Authority key identifier: A2:49:6D:9D:91:58:5B:66:91:74:70:9B:0C:DE:31:FC:E3:1B:2F:5A Certificate issuer: /CN=A91B67D6/serialNumber=A2496D9D91585B669174709B0CDE31FCE31B2F5A Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft Manifest number: 23 Signing time: Mon 21 Sep 2026 08:48:26 +0000 Manifest this update: Mon 21 Sep 2026 08:48:26 +0000 Manifest next update: Mon 28 Sep 2026 08:48:26 +0000 Files and hashes: 1: okltnZFYW2aRdHCbDN4x_OMbL1o.crl (hash: eEUJ9ITDirCe92gbanm2Us4pW2Az355eoU12dfbeF7w=) 2: 0385DA1883C711F189BAF24284A30FBC.roa (hash: SWSLd1xBawCW6ENPqMycNBRpduG6/fZvzOANRn5i3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.crl rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D6, serialNumber=A2496D9D91585B669174709B0CDE31FCE31B2F5A Validity Not Before: Sep 21 08:48:26 2026 GMT Not After : Sep 28 08:48:26 2026 GMT Subject: CN=6ab0ef5a-1d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:bb:4a:4c:b0:66:67:e8:84:ac:0f:13:62:53: 63:e7:37:e6:d7:74:00:78:1f:6d:39:a9:66:b5:8d: a4:7e:20:7b:50:64:18:bb:4f:b8:75:a3:50:b6:1a: 05:28:af:d0:2f:0e:60:d9:8c:4d:33:3e:7c:e8:67: 64:51:9a:98:4b:bc:bd:08:ba:70:61:8e:63:c4:05: c6:be:66:72:13:62:16:65:68:0d:f6:8d:fc:c3:64: c6:d5:90:95:e3:36:fe:8e:26:1b:97:f0:df:69:da: 6c:a0:a0:ae:35:ed:dc:15:66:6b:19:df:83:1b:a8: 7f:3e:c3:47:e0:6c:0d:43:6e:c7:ee:f3:1b:ce:f7: ea:cd:ac:6d:dc:33:c6:43:d9:cc:a0:d6:c0:21:96: 57:c3:36:7a:0d:d3:ed:dc:2c:39:97:03:e3:38:15: 81:2b:1c:e8:49:a3:d1:65:64:25:47:56:86:71:d4: aa:94:72:96:db:21:0a:1e:9d:34:82:c7:e4:f1:30: 08:67:18:9e:9f:05:fb:da:ff:88:e4:16:41:6d:db: 93:d2:6a:8b:75:94:61:5a:5c:99:9a:97:59:01:52: f7:34:2b:c9:07:ec:92:55:7f:a6:d1:a8:a4:21:b2: 6d:65:7f:a6:a4:16:29:d9:59:8f:24:52:db:9b:91: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A4:F1:47:73:6F:BE:48:EB:92:D0:87:AF:8F:76:C1:E2:FE:52:16 X509v3 Authority Key Identifier: keyid:A2:49:6D:9D:91:58:5B:66:91:74:70:9B:0C:DE:31:FC:E3:1B:2F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:67:dc:38:89:06:74:18:5a:bf:98:c3:8f:eb:a4:e9:91:1b: 06:e9:8e:d5:17:b1:30:ff:78:fc:7d:9f:b2:b6:55:ee:68:d8: ac:f4:c3:49:d3:95:fa:ab:41:85:46:3d:9e:8c:4b:93:0a:25: ea:75:75:11:ea:ba:0c:31:f8:0f:b7:76:35:a3:53:1d:75:4c: c9:32:e6:99:26:d6:84:d5:78:f7:15:3b:a3:8c:69:21:67:cb: 37:84:59:28:3e:46:f2:68:3e:4e:f5:06:0e:5f:99:9c:e6:90: f1:73:1d:92:e3:73:33:0a:91:ce:d0:04:e9:50:82:39:e2:2a: 2e:ea:1e:14:03:25:fa:06:8a:18:dd:97:d4:92:18:5f:ce:97: 05:16:6f:4f:40:b2:23:9e:82:ea:e3:44:90:6d:c5:3f:81:2a: 7c:49:e1:d1:80:fb:c9:3f:60:e4:00:1c:59:4d:7c:1c:0c:64: 69:7b:c9:67:7a:ee:58:25:50:85:5c:d3:e1:3d:c7:3f:f9:52: b8:2f:61:0e:af:db:31:80:fd:92:e5:1c:06:51:24:b6:d9:18: c9:30:45:b1:d2:0e:bc:a5:79:28:cc:96:8b:3a:8b:a3:61:85: 81:37:86:44:d6:bf:06:c7:58:b6:15:83:05:0c:dd:25:4f:54: dc:e2:9b:bf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjdENjExMC8GA1UEBRMoQTI0OTZEOUQ5MTU4NUI2NjkxNzQ3MDlCMENERTMxRkNF MzFCMkY1QTAeFw0yNjA5MjEwODQ4MjZaFw0yNjA5MjgwODQ4MjZaMBgxFjAUBgNV BAMTDTZhYjBlZjVhLTFkNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7u0pMsGZn6ISsDxNiU2PnN+bXdAB4H205qWa1jaR+IHtQZBi7T7h1o1C2GgUo r9AvDmDZjE0zPnzoZ2RRmphLvL0IunBhjmPEBca+ZnITYhZlaA32jfzDZMbVkJXj Nv6OJhuX8N9p2mygoK417dwVZmsZ34MbqH8+w0fgbA1Dbsfu8xvO9+rNrG3cM8ZD 2cyg1sAhllfDNnoN0+3cLDmXA+M4FYErHOhJo9FlZCVHVoZx1KqUcpbbIQoenTSC x+TxMAhnGJ6fBfva/4jkFkFt25PSaot1lGFaXJmal1kBUvc0K8kH7JJVf6bRqKQh sm1lf6akFinZWY8kUtubkcfLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUa6TxR3Nv vkjrktCHr492weL+UhYwHwYDVR0jBBgwFoAUokltnZFYW2aRdHCbDN4x/OMbL1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2N0Q2LzgyNkQ1OTkwODND MzExRjFCQzg4NUIzRjgzQTMwRkJDL29rbHRuWkZZVzJhUmRIQ2JETjR4X09NYkwx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2tsdG5aRllXMmFSZEhDYkRONHhfT01iTDFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 N0Q2LzgyNkQ1OTkwODNDMzExRjFCQzg4NUIzRjgzQTMwRkJDL29rbHRuWkZZVzJh UmRIQ2JETjR4X09NYkwxby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAHZ9w4iQZ0GFq/mMOP66TpkRsG6Y7VF7Ew/3j8fZ+ytlXuaNis9MNJ05X6q0GF Rj2ejEuTCiXqdXUR6roMMfgPt3Y1o1MddUzJMuaZJtaE1Xj3FTujjGkhZ8s3hFko PkbyaD5O9QYOX5mc5pDxcx2S43MzCpHO0ATpUII54iou6h4UAyX6BooY3ZfUkhhf zpcFFm9PQLIjnoLq40SQbcU/gSp8SeHRgPvJP2DkABxZTXwcDGRpe8lneu5YJVCF XNPhPcc/+VK4L2EOr9sxgP2S5RwGUSS22RjJMEWx0g68pXkozJaLOoujYYWBN4ZE 1r8Gx1i2FYMFDN0lT1Tc4pu/ -----END CERTIFICATE-----Generated at Mon Sep 21 13:50:57 2026 by rpki-client