$ rpki-client -vvvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: MwIUfT0B/NwoyXRR0GeqKa07xDsvafwvy+EzYoDBe3Q= Subject key identifier: CE:F2:AC:E6:4B:70:E0:92:D8:8B:4E:07:25:15:A6:14:47:97:CF:87 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 253C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2520 Signing time: Sat 14 Nov 2026 15:42:29 +0000 Manifest this update: Sat 14 Nov 2026 15:42:28 +0000 Manifest next update: Sat 21 Nov 2026 15:42:28 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: RvK2BIDdWuUqqlvAYDWIV+P9i67f6QUBvQkvGvaJGfQ=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=) 3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=) 4: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 15:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9532 (0x253c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Nov 14 15:42:28 2026 GMT Not After : Nov 21 15:42:28 2026 GMT Subject: CN=6af88164-e784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:85:1f:3e:f7:cb:c7:f0:42:d6:f0:5a:f9: 59:9c:bc:50:a4:54:14:1c:99:a3:28:c4:42:e8:0b: 88:94:da:c9:f4:5d:2c:9c:c0:1b:43:9a:e9:3e:fd: 33:03:16:d2:37:24:88:92:1b:f6:91:6e:7a:e0:2d: af:de:e9:74:86:1d:c8:a2:05:48:3a:04:2b:54:41: 5e:85:d0:07:00:d9:69:fa:c7:a9:df:29:5c:a3:76: e6:a3:e9:69:8b:61:b7:9f:29:66:0f:ac:2e:26:f9: c8:f3:7b:65:bd:ac:88:e0:da:a4:a9:ee:29:18:46: fa:f8:16:7b:1d:85:0d:8e:c3:62:89:52:9b:5a:7d: 4a:dd:9b:cb:fd:23:73:de:59:30:fd:33:be:26:9a: 97:da:94:20:52:6b:1a:f9:dc:ae:9f:11:5f:44:75: 31:ce:ae:c8:94:ff:29:0b:d8:fa:cc:d9:32:e0:db: 09:5d:13:ce:92:9d:7e:26:49:60:64:d3:21:a0:10: 5c:1a:1e:bf:cf:ba:86:a2:3e:d6:39:55:13:4d:c4: 88:99:87:6f:70:aa:be:44:04:70:bc:28:0f:7a:00: c2:cf:43:44:71:2e:6c:30:bd:ab:b6:45:ed:2f:08: 95:a3:3d:cf:fc:18:44:2f:21:26:88:0e:ee:1f:05: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F2:AC:E6:4B:70:E0:92:D8:8B:4E:07:25:15:A6:14:47:97:CF:87 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0a:b3:8b:d4:fb:20:64:e8:50:4d:33:41:38:28:6e:6a:f9: e0:d6:47:a0:69:da:22:53:f8:fd:fc:23:7c:d0:6f:29:2a:bb: 9c:c4:99:e3:5d:be:65:e7:a6:46:c9:d1:be:0a:de:d3:34:2b: ce:41:16:39:04:05:c1:51:d4:61:fb:4c:ba:21:10:d1:a9:16: b4:34:80:d7:e9:ed:e9:4c:f2:f2:7f:0b:5d:37:06:a3:79:3b: 83:4a:c0:af:b2:29:9e:07:6d:e9:5f:1f:b3:da:25:cd:83:19: b9:79:bb:3e:18:cd:e5:b2:f1:ac:e0:98:b9:98:26:7c:3a:e7: d9:9b:4e:59:2b:3f:39:66:ff:65:cf:80:0a:1d:f5:0c:e5:47: 39:d3:20:51:af:96:c7:54:b2:ce:7b:9d:50:81:61:c7:3d:40: e7:3d:66:72:58:43:33:14:85:e7:16:49:69:48:4d:3a:c8:14: 00:71:6f:87:35:d2:43:ea:b3:e1:41:4d:a2:2f:c9:bf:ae:3e: 77:38:7d:c5:a7:e7:2b:85:c5:44:d3:53:45:65:ff:d2:22:fc: 02:cd:41:ae:59:35:12:1f:88:42:f5:03:1c:ed:68:2c:d4:56: fd:95:6e:bb:a4:cc:7c:1f:da:5f:32:7e:0c:ee:57:3b:aa:4e: 86:bc:53:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYxMTE0MTU0MjI4WhcNMjYxMTIxMTU0MjI4WjAYMRYwFAYD VQQDEw02YWY4ODE2NC1lNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8mFHz73y8fwQtbwWvlZnLxQpFQUHJmjKMRC6AuIlNrJ9F0snMAbQ5rpPv0z AxbSNySIkhv2kW564C2v3ul0hh3IogVIOgQrVEFehdAHANlp+sep3ylco3bmo+lp i2G3nylmD6wuJvnI83tlvayI4Nqkqe4pGEb6+BZ7HYUNjsNiiVKbWn1K3ZvL/SNz 3lkw/TO+JpqX2pQgUmsa+dyunxFfRHUxzq7IlP8pC9j6zNky4NsJXRPOkp1+Jklg ZNMhoBBcGh6/z7qGoj7WOVUTTcSImYdvcKq+RARwvCgPegDCz0NEcS5sML2rtkXt LwiVoz3P/BhELyEmiA7uHwVd4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7yrOZL cOCS2ItOByUVphRHl8+HMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMwqzi9T7IGToUE0zQTgobmr54NZHoGnaIlP4/fwjfNBvKSq7nMSZ412+Zeem RsnRvgre0zQrzkEWOQQFwVHUYftMuiEQ0akWtDSA1+nt6Uzy8n8LXTcGo3k7g0rA r7Ipngdt6V8fs9olzYMZuXm7PhjN5bLxrOCYuZgmfDrn2ZtOWSs/OWb/Zc+ACh31 DOVHOdMgUa+Wx1SyznudUIFhxz1A5z1mclhDMxSF5xZJaUhNOsgUAHFvhzXSQ+qz 4UFNoi/Jv64+dzh9xafnK4XFRNNTRWX/0iL8As1Brlk1Eh+IQvUDHO1oLNRW/ZVu u6TMfB/aXzJ+DO5XO6pOhrxTbA== -----END CERTIFICATE-----Generated at Sun Nov 15 12:12:13 2026 by rpki-client