$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json) Hash identifier: EWC41If1gxZtgFlqZ4jR9vKjPsAe3Aw6HfuNjQfHBkY= Subject key identifier: F8:AF:4E:2D:34:DB:56:71:9E:C2:FB:B0:0D:B2:FE:C2:56:FF:C5:F5 Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft Manifest number: 0AAD Signing time: Thu 26 Mar 2026 19:26:08 +0000 Manifest this update: Thu 26 Mar 2026 19:26:07 +0000 Manifest next update: Thu 02 Apr 2026 19:26:07 +0000 Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: 87PAhz7PL5DWF5HA/qLVIOizGZUrHrwZ6XgInCQwd5Q=) 2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: K/JHB0kgGnMjgxfsLnjs8wPyOdjkoMvMD7QLqxSgLT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Mar 26 19:26:07 2026 GMT Not After : Apr 2 19:26:07 2026 GMT Subject: CN=69c58850-b62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:f1:2f:be:ee:8b:46:01:b7:e6:12:7f:6d: 2a:14:30:bb:89:73:f6:a1:83:8d:8e:ff:36:ee:26: 7b:f2:61:b5:28:c8:93:cb:50:97:a9:bf:97:c1:39: 80:32:34:b2:57:ee:7e:13:89:5c:9a:ff:ca:56:8d: ef:5a:2a:74:3e:bb:ae:09:d3:b8:0e:6b:4a:5d:9b: ba:dc:23:e6:f2:01:a7:66:18:9c:bb:88:15:6a:3a: 61:62:08:83:e1:ea:b7:99:6a:07:a4:0e:b6:3c:c2: d6:a2:7a:41:91:de:ef:0a:8b:f2:dd:b7:b0:fa:b4: 04:3f:ff:da:92:ef:5c:b2:0a:31:65:f3:db:bf:9f: 6f:f5:60:7d:44:1e:ca:7f:16:63:c3:ea:a6:6c:1a: 39:da:aa:14:7e:73:45:9b:d1:12:dd:b7:c8:fa:69: 01:ab:c3:76:df:ac:9c:e5:66:70:fa:4f:01:62:8b: db:5f:ea:3a:93:37:5f:8d:0b:bc:ef:ea:71:3b:0c: 1a:51:98:ee:07:1a:ab:49:8d:92:d0:60:e1:62:bd: 89:ab:b9:ac:83:a3:31:a4:92:7a:9b:74:7b:f5:11: 9a:64:dc:a6:d7:c0:bb:54:95:22:75:1d:68:43:f4: 40:28:01:3d:74:c0:f1:e4:e6:73:aa:3c:d3:c5:c1: 65:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AF:4E:2D:34:DB:56:71:9E:C2:FB:B0:0D:B2:FE:C2:56:FF:C5:F5 X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:db:99:a1:cb:ae:bb:8a:14:11:4f:6c:fc:18:13:2f:b9:a1: 14:5c:6d:ec:d6:bf:2a:5d:3e:53:d0:21:4b:84:26:f5:9b:4d: 00:a3:95:e2:1b:af:e1:16:22:88:34:bb:4f:cf:d5:de:5b:37: b9:ea:9a:2a:3c:61:39:00:5e:ff:55:58:63:5b:d3:39:e6:61: 38:4a:69:f7:ca:13:04:e4:7d:4a:5d:69:b9:49:b2:8d:90:dc: 45:e2:76:eb:50:40:82:7c:f5:9f:94:c2:8e:17:1e:50:b2:1f: 93:88:23:f4:72:3c:9d:07:76:08:1b:1f:0f:29:92:ff:f4:db: 29:a0:87:77:10:85:e4:65:1b:f3:9e:50:3f:0e:c7:7f:2b:03: ff:53:a6:24:a9:56:d7:b0:42:85:2c:4d:79:77:10:4a:c7:9c: 36:71:20:2f:fe:1d:3c:3b:4e:47:81:7b:5a:f6:3a:04:07:75: 45:3f:3f:e8:e4:c2:5b:78:e6:bf:db:b9:47:25:15:d2:db:ab: 5d:35:c1:a9:28:ed:8e:93:77:79:7d:62:0b:d8:16:5e:d3:8f: ef:1c:c8:b3:d0:cf:66:91:a4:e2:16:bd:c0:0a:69:d7:0f:b4: 41:c0:c8:cb:25:03:b7:19:9b:cb:52:b5:d6:36:14:74:02:a7: 1e:7e:17:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjYwMzI2MTkyNjA3WhcNMjYwNDAyMTkyNjA3WjAYMRYwFAYD VQQDEw02OWM1ODg1MC1iNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqA7xL77ui0YBt+YSf20qFDC7iXP2oYONjv827iZ78mG1KMiTy1CXqb+XwTmA MjSyV+5+E4lcmv/KVo3vWip0PruuCdO4DmtKXZu63CPm8gGnZhicu4gVajphYgiD 4eq3mWoHpA62PMLWonpBkd7vCovy3bew+rQEP//aku9csgoxZfPbv59v9WB9RB7K fxZjw+qmbBo52qoUfnNFm9ES3bfI+mkBq8N236yc5WZw+k8BYovbX+o6kzdfjQu8 7+pxOwwaUZjuBxqrSY2S0GDhYr2Jq7msg6MxpJJ6m3R79RGaZNym18C7VJUidR1o Q/RAKAE9dMDx5OZzqjzTxcFlhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPivTi00 21ZxnsL7sA2y/sJW/8X1MB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzAzOS9DMjVEMDJGRTc4OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdO SlloZmkwZFlVQzRqMm9PTHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt9uZocuuu4oUEU9s/BgTL7mhFFxt7Na/Kl0+U9AhS4Qm9ZtNAKOV4huv4RYi iDS7T8/V3ls3ueqaKjxhOQBe/1VYY1vTOeZhOEpp98oTBOR9Sl1puUmyjZDcReJ2 61BAgnz1n5TCjhceULIfk4gj9HI8nQd2CBsfDymS//TbKaCHdxCF5GUb855QPw7H fysD/1OmJKlW17BChSxNeXcQSsecNnEgL/4dPDtOR4F7WvY6BAd1RT8/6OTCW3jm v9u5RyUV0turXTXBqSjtjpN3eX1iC9gWXtOP7xzIs9DPZpGk4ha9wApp1w+0QcDI yyUDtxmby1K11jYUdAKnHn4XUg== -----END CERTIFICATE-----Generated at Sat Mar 28 11:47:42 2026 by rpki-client