$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: BPxvB2sGBu+C7vunUTGpCg0BUUc45ZdTcwh+id9maew= Subject key identifier: 2C:F6:01:46:F3:66:BD:FE:04:8B:04:7F:9E:EC:EA:03:B3:6B:99:2F Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 24BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 24A6 Signing time: Tue 24 Mar 2026 15:43:14 +0000 Manifest this update: Tue 24 Mar 2026 15:43:14 +0000 Manifest next update: Tue 31 Mar 2026 15:43:14 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: 8jvgnFgzNVgOFCy9on+5ifeYvXZKu7JOl6VvU74pqFI=) 2: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: GEYGfhHp17Fn6qCQe2gZ+/51L5wJ5ahCyZcSARhYpHU=) 3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ZR+av6i/mUW7dgXrhBFsLxrkYBXMqmH67RVHZJGRbOE=) 4: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: FfVZPUV5HJquVNsdHZZ+Vm7hU9qAb0wTdcSg4+cVr58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9407 (0x24bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Mar 24 15:43:14 2026 GMT Not After : Mar 31 15:43:14 2026 GMT Subject: CN=69c2b112-22b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:b0:88:a6:2b:ea:d6:e5:08:f5:06:50:7b: 0f:e8:0e:63:c3:67:ae:6f:51:6c:48:53:3a:be:e6: 6a:8f:71:30:d7:ce:d5:e5:8e:a1:68:6a:6e:f1:c5: c3:5d:5a:c4:df:cf:3a:ef:63:0a:2d:04:62:15:d5: 65:b0:41:1d:a3:0e:6a:1d:fb:42:fb:ab:fe:11:b0: d2:3e:dc:a7:b0:11:b9:b4:42:86:8a:e2:6f:2b:35: 11:fd:63:12:6a:ea:03:af:7f:90:98:c8:74:2b:b9: 85:38:9b:79:06:2b:dd:9e:32:f4:8e:8a:11:a9:cc: f2:fa:9a:4e:9f:2e:79:ce:fc:81:ba:ef:99:a4:b5: 68:4c:69:bb:67:a4:87:e9:f7:27:89:08:59:08:ad: 2e:6c:10:09:b0:e3:df:2f:1d:21:1d:d1:05:0f:cd: 91:8f:2e:91:02:ef:d9:46:03:57:f0:7d:ec:65:93: e7:c5:92:b1:ae:a0:0d:75:42:96:9b:cc:a1:61:6f: c0:5a:f4:45:bf:ad:75:ae:98:7f:7c:26:3d:dc:cf: e2:dc:ab:5d:69:6b:24:94:62:a8:af:b3:7f:ad:77: de:ee:0f:13:1e:36:eb:e9:92:54:49:bc:86:df:4c: 7a:0d:b4:00:d2:86:8c:a1:dc:98:f3:e2:d2:24:12: 1a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F6:01:46:F3:66:BD:FE:04:8B:04:7F:9E:EC:EA:03:B3:6B:99:2F X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:61:c8:55:78:ff:3e:a7:e7:62:66:a1:cd:54:26:49:20:69: 34:fe:a8:e3:e0:0d:b0:00:81:6e:0c:37:89:cd:37:3a:76:dc: 34:db:e6:f2:fd:71:e6:0c:c0:a9:4d:c2:aa:e9:8e:60:af:3f: 17:7e:d5:77:29:ec:c7:f1:af:b0:f8:f2:14:d0:40:17:73:f6: b1:26:3d:dd:a4:b7:60:fe:dd:bf:a5:c5:5c:6a:82:64:42:d9: e6:f2:23:96:0a:02:41:cb:29:ca:5e:f4:6a:35:56:ee:88:8c: 99:5d:2a:fe:19:52:2a:58:09:5c:92:74:4e:dc:92:8e:3f:e7: f4:59:ca:ae:41:3d:8d:6c:b9:95:06:6e:05:c7:b4:ba:e4:02: 60:22:b1:42:8d:3b:54:52:1a:14:37:b4:e8:cb:15:67:25:4b: a2:4a:f2:86:54:06:fd:05:5d:13:bd:60:07:5a:c5:fa:34:2b: 43:34:ad:e9:fb:9c:a7:d0:33:9f:28:f8:74:ff:ee:a4:a7:82: 89:96:1d:45:2e:5c:f5:c1:4b:23:ea:ca:6a:f5:0d:c9:d5:e2: 52:d8:33:95:db:25:35:34:66:3d:bc:7e:6a:cf:57:45:67:25: 2e:4a:57:ea:d5:11:a3:a4:fa:ad:66:de:1d:23:5e:a4:e6:a3: f5:93:8c:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwMzI0MTU0MzE0WhcNMjYwMzMxMTU0MzE0WjAYMRYwFAYD VQQDEw02OWMyYjExMi0yMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoWwiKYr6tblCPUGUHsP6A5jw2eub1FsSFM6vuZqj3Ew187V5Y6haGpu8cXD XVrE388672MKLQRiFdVlsEEdow5qHftC+6v+EbDSPtynsBG5tEKGiuJvKzUR/WMS auoDr3+QmMh0K7mFOJt5BivdnjL0jooRqczy+ppOny55zvyBuu+ZpLVoTGm7Z6SH 6fcniQhZCK0ubBAJsOPfLx0hHdEFD82Rjy6RAu/ZRgNX8H3sZZPnxZKxrqANdUKW m8yhYW/AWvRFv611rph/fCY93M/i3KtdaWsklGKor7N/rXfe7g8THjbr6ZJUSbyG 30x6DbQA0oaModyY8+LSJBIa2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCz2AUbz Zr3+BIsEf57s6gOza5kvMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhWHIVXj/PqfnYmahzVQmSSBpNP6o4+ANsACBbgw3ic03OnbcNNvm8v1x5gzA qU3CqumOYK8/F37Vdynsx/GvsPjyFNBAF3P2sSY93aS3YP7dv6XFXGqCZELZ5vIj lgoCQcspyl70ajVW7oiMmV0q/hlSKlgJXJJ0TtySjj/n9FnKrkE9jWy5lQZuBce0 uuQCYCKxQo07VFIaFDe06MsVZyVLokryhlQG/QVdE71gB1rF+jQrQzSt6fucp9Az nyj4dP/upKeCiZYdRS5c9cFLI+rKavUNydXiUtgzldslNTRmPbx+as9XRWclLkpX 6tURo6T6rWbeHSNepOaj9ZOM+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:13 2026 by rpki-client