$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: z0EUsOGpJdP7BGhtKGeQSLjeoXAy6NCuel+ZWCbxPzU= Subject key identifier: E9:0B:3C:BD:EA:76:7C:03:1D:F4:E5:09:1F:B6:7A:72:4E:B1:FE:75 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 24DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 24C1 Signing time: Tue 12 May 2026 15:46:51 +0000 Manifest this update: Tue 12 May 2026 15:46:50 +0000 Manifest next update: Tue 19 May 2026 15:46:50 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: t+b9P9F5idFGry+xospgpoKsmRoGkJ/BNyQZwNkokiE=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=) 3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=) 4: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9437 (0x24dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: May 12 15:46:50 2026 GMT Not After : May 19 15:46:50 2026 GMT Subject: CN=6a034b6b-43ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d8:fd:c3:ca:6b:26:a3:1f:4c:e7:b7:19:73: e2:0c:07:65:06:42:d5:28:8a:bb:32:55:a3:a4:0d: d3:68:b1:c1:ad:20:c4:41:a1:20:7d:12:1d:2e:0a: fb:0d:e6:2a:c7:54:5a:e4:05:82:42:11:de:1e:ec: 63:5e:71:02:84:59:0e:50:85:21:02:f3:62:2d:cb: a9:3b:65:16:66:07:f8:ed:6f:cc:95:96:c7:48:02: 6a:e1:41:b6:94:70:7b:63:37:1a:73:7c:f0:67:63: 85:b8:c1:be:e5:20:d4:d1:32:69:07:c5:39:6c:ec: 01:c8:7c:c5:48:35:8c:7f:50:f0:36:5a:19:c5:b3: ea:f9:2e:0e:04:2f:ee:70:8b:48:ed:28:21:35:26: c3:f4:ec:6a:e7:75:d2:f7:30:cc:c6:97:c3:02:cf: ca:c9:4b:90:74:fe:56:3a:75:03:b8:c5:2c:c1:b7: 35:b9:2f:fe:cd:0d:e3:0a:e9:a7:13:51:8d:b9:38: 08:c1:e6:92:01:ce:22:91:8a:e0:14:01:69:87:88: 7e:60:d0:5a:e7:38:b0:c5:b0:ea:aa:71:81:be:28: a1:1d:ef:80:f2:de:08:cf:8a:78:46:f7:0d:c5:27: 3f:d0:30:dc:bd:72:ed:7e:77:1d:3f:5c:1a:ea:a4: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0B:3C:BD:EA:76:7C:03:1D:F4:E5:09:1F:B6:7A:72:4E:B1:FE:75 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:08:ee:8c:cc:e9:7a:80:fa:e7:6e:bd:f3:ba:8a:a7:75:f6: 61:1c:f0:38:b9:60:a3:50:fa:5a:02:ad:d2:32:13:ef:7f:05: da:7e:d0:f5:df:7c:a9:f8:f7:ac:6f:95:f1:08:50:06:ef:13: 45:ee:f7:98:27:02:cb:c6:93:89:a3:8b:fa:c8:e0:32:12:bc: 51:72:59:b1:b8:54:94:b5:05:f6:c9:40:40:20:44:54:37:5c: d2:25:1d:21:7c:5a:5f:20:86:29:b7:76:8c:02:5d:4a:27:d7: 8b:ac:54:59:91:46:63:81:00:d8:e1:3d:40:20:64:d1:f7:cb: 38:52:69:df:f1:2c:03:c2:3a:cc:37:db:0b:12:d1:8d:b0:13: 00:b8:80:15:b0:bb:15:e5:fd:65:70:ab:46:6b:8e:73:dd:ba: 14:c8:a7:f4:43:3d:49:a9:56:29:9b:50:86:87:33:f6:71:66: ac:20:69:00:cf:b3:82:2d:01:ac:ba:88:a1:ef:8b:2b:9c:cd: 43:94:f2:5a:07:b8:a3:af:7b:88:41:99:d8:5f:2d:50:5b:5e: 00:99:5e:36:a0:ab:5c:06:70:d6:48:2b:3f:48:9a:a5:a2:b6: 89:3f:79:5a:ce:1f:db:6f:3c:ac:21:41:8b:96:00:29:1d:a2: 1b:15:78:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwNTEyMTU0NjUwWhcNMjYwNTE5MTU0NjUwWjAYMRYwFAYD VQQDEw02YTAzNGI2Yi00M2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtj9w8prJqMfTOe3GXPiDAdlBkLVKIq7MlWjpA3TaLHBrSDEQaEgfRIdLgr7 DeYqx1Ra5AWCQhHeHuxjXnEChFkOUIUhAvNiLcupO2UWZgf47W/MlZbHSAJq4UG2 lHB7Yzcac3zwZ2OFuMG+5SDU0TJpB8U5bOwByHzFSDWMf1DwNloZxbPq+S4OBC/u cItI7SghNSbD9Oxq53XS9zDMxpfDAs/KyUuQdP5WOnUDuMUswbc1uS/+zQ3jCumn E1GNuTgIweaSAc4ikYrgFAFph4h+YNBa5ziwxbDqqnGBviihHe+A8t4Iz4p4RvcN xSc/0DDcvXLtfncdP1wa6qSCXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkLPL3q dnwDHfTlCR+2enJOsf51MB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQjujMzpeoD6526987qKp3X2YRzwOLlgo1D6WgKt0jIT738F2n7Q9d98qfj3 rG+V8QhQBu8TRe73mCcCy8aTiaOL+sjgMhK8UXJZsbhUlLUF9slAQCBEVDdc0iUd IXxaXyCGKbd2jAJdSifXi6xUWZFGY4EA2OE9QCBk0ffLOFJp3/EsA8I6zDfbCxLR jbATALiAFbC7FeX9ZXCrRmuOc926FMin9EM9SalWKZtQhocz9nFmrCBpAM+zgi0B rLqIoe+LK5zNQ5TyWge4o697iEGZ2F8tUFteAJleNqCrXAZw1kgrP0iapaK2iT95 Ws4f2288rCFBi5YAKR2iGxV40Q== -----END CERTIFICATE-----Generated at Wed May 13 04:08:13 2026 by rpki-client