$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json) Hash identifier: GKeQPPWaFoUxEVc0WqaTusNVK70OuasnLIoBqt2Ez48= Subject key identifier: A1:F9:23:67:FC:EE:1E:0E:84:DD:7C:25:DF:61:36:61:F9:89:27:14 Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft Manifest number: 44 Signing time: Wed 25 Mar 2026 07:37:02 +0000 Manifest this update: Wed 25 Mar 2026 07:37:01 +0000 Manifest next update: Wed 01 Apr 2026 07:37:01 +0000 Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: v+Owt6q7sWda+RDJ/wy4Rec5TrbXT83Lpls7PxHWMks=) 2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Mar 25 07:37:01 2026 GMT Not After : Apr 1 07:37:01 2026 GMT Subject: CN=69c3909e-29c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:6f:43:bb:cd:97:0d:9f:3e:aa:f2:c7:7c: 2c:81:58:6f:87:f7:d4:c8:76:ef:6f:31:08:04:2b: 8c:54:28:5f:9f:e7:51:29:09:14:95:67:29:e5:7a: 08:ef:ec:e6:d5:29:08:2a:3b:3b:53:7c:ee:d1:6a: 72:cd:ca:94:9f:e3:18:cc:74:74:78:5d:be:c3:27: 74:7e:32:ce:02:e1:b0:bd:c0:2c:53:fc:79:07:15: 05:3e:0a:18:e7:81:30:2c:12:c5:5c:a1:76:ae:90: 93:25:64:1a:5f:19:71:5f:b5:ce:d7:6d:ed:e2:88: fd:74:7f:31:e9:25:0e:de:a8:9e:92:79:cf:40:cf: 08:cd:b8:18:30:6b:05:bd:83:12:36:50:30:e3:f5: 12:0d:d4:8d:da:eb:55:a2:bd:63:31:0d:d9:25:c2: 78:94:81:c2:24:2a:e3:85:36:f4:d3:7d:70:74:90: 0e:57:a4:43:d5:1f:71:24:bc:6c:9d:ce:5d:d5:d7: 58:b3:d7:0f:4c:b5:1b:a9:2f:da:fc:3e:21:6e:7b: d4:c0:e6:2c:dc:80:97:bb:fc:4a:f4:ce:68:b0:df: 13:81:1b:58:df:6b:fb:2c:11:9f:3b:3f:f6:dd:32: e9:d1:51:5e:51:dd:d0:f1:f3:96:09:8b:7c:5f:c6: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:23:67:FC:EE:1E:0E:84:DD:7C:25:DF:61:36:61:F9:89:27:14 X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4b:62:7e:e2:4c:1e:51:44:12:38:b3:df:73:b0:e8:65:10: a4:80:e2:8a:b6:78:9a:c6:d5:c1:fd:e5:b8:b8:26:60:45:b6: 8d:1e:39:46:2e:55:83:c4:0f:30:0e:dc:8e:16:46:9a:54:c1: e7:cc:02:3a:64:51:81:c5:20:40:ed:f0:cb:29:65:36:7e:1e: a6:c2:4c:4c:ff:aa:58:5d:44:68:c9:21:a7:35:a3:b8:42:35: c2:e8:cc:db:f4:c1:9d:ae:d0:58:14:83:28:a6:cf:a7:10:e8: 1a:2d:48:d5:23:95:8e:f5:13:22:c5:6b:58:2b:1d:7f:b1:f5: 8a:e1:da:0e:9e:6d:61:67:f4:5e:8b:ec:7c:2c:7e:16:33:22: 32:2a:38:97:9e:a6:c7:41:de:4f:08:81:9d:2b:5b:4d:c3:64: 36:af:dc:3e:60:93:4e:ef:fe:65:0a:94:ec:3e:55:8d:2b:75: b9:4b:30:f3:f6:a0:f2:70:d0:2e:48:49:22:2b:d5:62:5e:f1: 83:53:18:a5:84:16:95:e8:a9:4f:7d:e1:86:70:b9:bf:93:47: f0:a1:8d:9d:39:d0:e3:db:90:3b:f7:d1:28:d9:4d:99:39:f7: 3a:38:41:bd:8d:c1:ec:00:c9:f9:56:39:d3:e9:ca:74:6e:54: bf:33:f0:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoQTI1Njk3NTEyQUEyNjUyN0NFNEFENjFBQ0MwOUExMEJF RDNDOTcxOTAeFw0yNjAzMjUwNzM3MDFaFw0yNjA0MDEwNzM3MDFaMBgxFjAUBgNV BAMTDTY5YzM5MDllLTI5YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAeW9Du82XDZ8+qvLHfCyBWG+H99TIdu9vMQgEK4xUKF+f51EpCRSVZynlegjv 7ObVKQgqOztTfO7RanLNypSf4xjMdHR4Xb7DJ3R+Ms4C4bC9wCxT/HkHFQU+Chjn gTAsEsVcoXaukJMlZBpfGXFftc7Xbe3iiP10fzHpJQ7eqJ6Sec9AzwjNuBgwawW9 gxI2UDDj9RIN1I3a61WivWMxDdklwniUgcIkKuOFNvTTfXB0kA5XpEPVH3EkvGyd zl3V11iz1w9MtRupL9r8PiFue9TA5izcgJe7/Er0zmiw3xOBG1jfa/ssEZ87P/bd MunRUV5R3dDx85YJi3xfxkp/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUofkjZ/zu Hg6E3Xwl32E2YfmJJxQwHwYDVR0jBBgwFoAUolaXUSqiZSfOStYazAmhC+08lxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0UzOUQ4RTBDQzhF QzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvb2xhWFVTcWlaU2ZPU3RZYXpBbWhDLTA4bHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OThEL0UzOUQ4RTBDQzhFQzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNm T1N0WWF6QW1oQy0wOGx4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZS2J+4kweUUQSOLPfc7DoZRCkgOKKtniaxtXB/eW4uCZgRbaNHjlGLlWDxA8w DtyOFkaaVMHnzAI6ZFGBxSBA7fDLKWU2fh6mwkxM/6pYXURoySGnNaO4QjXC6Mzb 9MGdrtBYFIMops+nEOgaLUjVI5WO9RMixWtYKx1/sfWK4doOnm1hZ/Rei+x8LH4W MyIyKjiXnqbHQd5PCIGdK1tNw2Q2r9w+YJNO7/5lCpTsPlWNK3W5SzDz9qDycNAu SEkiK9ViXvGDUxilhBaV6KlPfeGGcLm/k0fwoY2dOdDj25A799Eo2U2ZOfc6OEG9 jcHsAMn5VjnT6cp0blS/M/C6 -----END CERTIFICATE-----Generated at Thu Mar 26 04:43:48 2026 by rpki-client