$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: csy9EStTZIC2A2BoQFK29LXDSvnW4lNaBkTxvNCRmk4= Subject key identifier: 7D:31:42:27:8D:C2:11:32:E2:29:40:B3:AC:F9:1F:B8:4C:8B:BA:CB Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0C68 Signing time: Tue 12 May 2026 18:45:21 +0000 Manifest this update: Tue 12 May 2026 18:45:20 +0000 Manifest next update: Tue 19 May 2026 18:45:20 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: 9Y7uWjsBx4Exb4iaktxpbFZxaJsgV0fOsiS5n6qdVHg=) 2: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 2A0LGFbTxJM1CyVE/zh4gUOdkdA5g554p/UKkKfLEQk=) 3: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: TTxeq1OMdbgzaP7dTYMc6Fs5lQ+8FxgwD7ohl1EhyQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: May 12 18:45:20 2026 GMT Not After : May 19 18:45:20 2026 GMT Subject: CN=6a037541-c065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:fe:e3:b1:16:ff:ad:b0:29:74:f6:1f:3a: 64:54:79:d6:d5:89:ef:5c:7c:01:a4:90:6e:ce:ac: 4f:f7:51:c8:9d:da:0a:c5:bb:ce:ed:6d:5c:0d:27: 76:2f:e1:f0:8b:ce:85:24:fc:7a:9c:ad:f9:39:54: 01:74:4b:40:bf:18:31:3b:bf:6c:c2:65:b8:3d:49: 4a:da:4a:07:cc:84:69:29:ac:2e:62:7a:8f:4e:ff: a5:fe:f4:51:93:af:b9:9d:e3:5b:95:6a:70:28:57: a6:b6:fc:66:0a:40:c5:b2:f6:1b:8a:3b:54:43:73: 10:72:54:2d:54:5f:c2:4f:5c:ae:94:2a:9b:de:98: ae:74:e9:b4:9a:d1:cf:45:03:6e:84:5b:38:ae:a5: bf:e8:5d:fd:70:28:be:d6:32:54:d6:bc:61:47:e3: f1:bd:06:99:8e:7e:54:c5:d9:61:34:ac:1f:6d:02: 72:c9:9a:ae:68:3d:9b:4a:ff:46:30:d1:a1:a4:b3: 32:fc:89:ee:7e:06:03:f7:6a:ce:7e:fe:c4:0f:5e: b9:8a:fe:65:04:f9:85:27:d6:69:b6:d2:d3:1f:09: 0d:4b:81:63:4c:e5:57:c2:11:fd:87:ec:a9:c3:8a: 84:be:74:c1:e7:78:1a:eb:20:71:ff:90:7f:f6:62: 7e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:31:42:27:8D:C2:11:32:E2:29:40:B3:AC:F9:1F:B8:4C:8B:BA:CB X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:07:2b:ee:e8:56:fa:64:9a:13:a1:5f:dc:6e:da:63:5c:b1: 62:39:b7:fc:4e:f5:c6:a6:cf:32:84:76:68:79:79:7c:b8:52: 66:d6:64:d2:3b:be:96:3e:a3:63:8d:61:ad:c7:55:9e:7a:65: 6d:47:3b:c0:c5:52:4e:f1:4f:36:7b:bc:80:e2:c3:a4:07:9b: e4:39:eb:41:4d:08:49:b7:ed:f1:46:b5:9b:8e:93:fe:4e:3d: ff:a3:70:eb:98:fc:a8:95:8e:c0:39:de:be:2a:1c:e3:21:60: bd:b8:b3:42:0c:4d:4d:09:85:b4:56:2a:fa:8c:de:b0:8f:6b: 60:ec:26:1e:f3:86:2c:43:b8:f1:02:60:9e:44:3b:83:3c:a3: 78:bf:39:42:cd:e7:37:47:0e:12:17:8c:06:bc:af:e3:98:3c: 48:8e:4a:76:48:0c:e0:a3:59:1e:13:67:63:1f:31:c5:bc:34: ac:0e:b6:01:bf:2b:41:71:c4:c0:8f:0c:a0:a2:09:b5:97:1e: 16:c9:9a:6b:2a:34:6d:0e:5d:7e:0e:52:2e:7e:ad:ad:02:76: 61:bf:02:d8:5f:9e:92:a5:a2:63:68:ec:0e:65:90:bb:4f:cd: 52:0d:f6:71:07:5c:52:51:12:9c:d1:32:87:3a:71:cf:9d:af: 8e:7a:89:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjYwNTEyMTg0NTIwWhcNMjYwNTE5MTg0NTIwWjAYMRYwFAYD VQQDEw02YTAzNzU0MS1jMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04b+47EW/62wKXT2HzpkVHnW1YnvXHwBpJBuzqxP91HIndoKxbvO7W1cDSd2 L+Hwi86FJPx6nK35OVQBdEtAvxgxO79swmW4PUlK2koHzIRpKawuYnqPTv+l/vRR k6+5neNblWpwKFemtvxmCkDFsvYbijtUQ3MQclQtVF/CT1yulCqb3piudOm0mtHP RQNuhFs4rqW/6F39cCi+1jJU1rxhR+PxvQaZjn5UxdlhNKwfbQJyyZquaD2bSv9G MNGhpLMy/InufgYD92rOfv7ED165iv5lBPmFJ9ZpttLTHwkNS4FjTOVXwhH9h+yp w4qEvnTB53ga6yBx/5B/9mJ+WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0xQieN whEy4ilAs6z5H7hMi7rLMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALQcr7uhW+mSaE6Ff3G7aY1yxYjm3/E71xqbPMoR2aHl5fLhSZtZk0ju+lj6j Y41hrcdVnnplbUc7wMVSTvFPNnu8gOLDpAeb5DnrQU0ISbft8Ua1m46T/k49/6Nw 65j8qJWOwDnevioc4yFgvbizQgxNTQmFtFYq+ozesI9rYOwmHvOGLEO48QJgnkQ7 gzyjeL85Qs3nN0cOEheMBryv45g8SI5KdkgM4KNZHhNnYx8xxbw0rA62Ab8rQXHE wI8MoKIJtZceFsmaayo0bQ5dfg5SLn6trQJ2Yb8C2F+ekqWiY2jsDmWQu0/NUg32 cQdcUlESnNEyhzpxz52vjnqJzw== -----END CERTIFICATE-----Generated at Wed May 13 16:38:23 2026 by rpki-client