$ rpki-client -vvvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: Qarr/oHdDxA7Z/AiO6+Uc05CV/qa1xG45AT+L4wpcLI= Subject key identifier: 5B:0B:FE:84:D3:1A:63:B3:FC:A0:F0:96:5D:44:1F:7A:4D:DE:D4:4E Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2506 Signing time: Thu 24 Sep 2026 15:44:03 +0000 Manifest this update: Thu 24 Sep 2026 15:44:02 +0000 Manifest next update: Thu 01 Oct 2026 15:44:02 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: AsjhlOEGCcwDztJPF7wYrzeDR6XKiQJsKe6hOez0/AQ=) 2: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=) 3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=) 4: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9506 (0x2522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Sep 24 15:44:02 2026 GMT Not After : Oct 1 15:44:02 2026 GMT Subject: CN=6ab54542-41ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:95:cf:cd:b6:f5:b9:77:b1:db:e1:7f:88: 39:98:2c:99:fa:0c:9b:14:19:60:ea:8e:3b:68:67: e1:38:44:1c:c7:08:d3:82:a4:3b:a0:44:a4:6f:d9: db:f0:a2:0c:26:47:e1:2b:f1:d3:92:b6:8f:b9:65: e5:ec:aa:29:3b:df:e5:1f:38:c6:37:80:33:38:86: d7:2a:51:b1:3a:b8:98:7d:70:2f:98:4e:21:ff:90: 2e:86:9c:7b:1d:3d:7f:45:aa:16:0f:f4:a0:83:1c: 79:9f:99:e1:55:63:d6:81:69:74:63:4d:5c:dc:f7: 05:3e:e5:c5:e9:bd:b1:ce:30:6a:3a:42:9b:ed:3f: 4c:16:06:33:46:3c:8c:b9:70:c8:b5:77:94:1c:cc: 72:28:66:e5:26:fa:9a:5d:06:ec:e7:fb:24:62:2f: 52:a3:02:c0:15:4a:a5:d8:65:ad:3b:b1:54:f0:fc: 93:5e:4b:7b:23:ed:d5:b7:3c:3a:e8:b6:dd:d5:b4: 78:54:e8:74:de:99:c7:bf:03:5f:24:99:73:f1:0a: b6:bc:55:b0:f4:f5:78:58:0c:21:e2:06:46:0c:e8: 6c:d6:d5:87:90:47:be:a7:39:24:3d:3c:97:c0:c3: ff:dd:b6:b7:44:76:c1:f6:56:48:ef:ac:45:3d:0c: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:FE:84:D3:1A:63:B3:FC:A0:F0:96:5D:44:1F:7A:4D:DE:D4:4E X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bd:bf:b5:7c:ad:4f:a5:a5:47:75:8b:3f:28:42:ce:0b:33: 42:30:1c:b8:db:5d:c5:db:12:ae:22:8d:62:cd:2f:72:33:e8: e2:73:93:8d:65:a2:9b:d5:46:99:fc:0c:0d:ae:ec:db:1c:1b: 90:e7:28:9d:86:c2:0b:18:77:24:d0:4f:6d:f8:b0:76:d6:e8: 12:1e:95:76:90:bc:5a:06:e8:9a:8f:51:f8:9f:03:a5:e4:41: 0e:b5:17:96:96:34:fa:93:6b:bf:83:e4:5e:0c:dd:47:34:29: cc:eb:d9:00:97:41:d8:dc:07:1a:48:f5:6f:3b:1d:34:67:2b: a5:a3:5c:38:b9:29:16:25:0f:53:59:e5:19:e2:9c:b2:68:8e: 04:6f:75:39:a6:94:8e:d5:1a:b3:95:be:90:76:1f:ac:29:7b: cd:b9:6e:0e:96:d6:7c:c5:77:02:9f:53:e4:bf:05:ff:3a:d7: 5c:c4:72:5d:71:9c:a7:86:2d:6c:9b:f4:d4:2d:6a:bb:e5:31: 5d:23:e2:ee:c5:dd:6f:b7:a4:7e:7d:09:46:c3:cb:c6:39:1e: a9:a0:0b:60:1b:e0:7f:a6:55:12:ca:a5:e5:01:1f:87:f6:81: b0:e6:60:80:31:bf:40:01:c1:4c:51:37:a5:cf:03:5b:c9:4f: 08:fd:4b:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwOTI0MTU0NDAyWhcNMjYxMDAxMTU0NDAyWjAYMRYwFAYD VQQDEw02YWI1NDU0Mi00MWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ceVz8229bl3sdvhf4g5mCyZ+gybFBlg6o47aGfhOEQcxwjTgqQ7oESkb9nb 8KIMJkfhK/HTkraPuWXl7KopO9/lHzjGN4AzOIbXKlGxOriYfXAvmE4h/5Auhpx7 HT1/RaoWD/Sggxx5n5nhVWPWgWl0Y01c3PcFPuXF6b2xzjBqOkKb7T9MFgYzRjyM uXDItXeUHMxyKGblJvqaXQbs5/skYi9SowLAFUql2GWtO7FU8PyTXkt7I+3Vtzw6 6Lbd1bR4VOh03pnHvwNfJJlz8Qq2vFWw9PV4WAwh4gZGDOhs1tWHkEe+pzkkPTyX wMP/3ba3RHbB9lZI76xFPQxQtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsL/oTT GmOz/KDwll1EH3pN3tROMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWL2/tXytT6WlR3WLPyhCzgszQjAcuNtdxdsSriKNYs0vcjPo4nOTjWWim9VG mfwMDa7s2xwbkOconYbCCxh3JNBPbfiwdtboEh6VdpC8Wgbomo9R+J8DpeRBDrUX lpY0+pNrv4PkXgzdRzQpzOvZAJdB2NwHGkj1bzsdNGcrpaNcOLkpFiUPU1nlGeKc smiOBG91OaaUjtUas5W+kHYfrCl7zbluDpbWfMV3Ap9T5L8F/zrXXMRyXXGcp4Yt bJv01C1qu+UxXSPi7sXdb7ekfn0JRsPLxjkeqaALYBvgf6ZVEsql5QEfh/aBsOZg gDG/QAHBTFE3pc8DW8lPCP1LnA== -----END CERTIFICATE-----Generated at Fri Sep 25 07:14:52 2026 by rpki-client