$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: fKI69ODr+huoSdQfabM3trJQbO1FZZfqLX68W1yvgFo= Subject key identifier: FE:22:BA:68:42:15:B5:C9:31:73:27:81:60:37:74:F0:DA:A4:75:25 Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 3C Signing time: Wed 25 Mar 2026 07:42:04 +0000 Manifest this update: Wed 25 Mar 2026 07:42:04 +0000 Manifest next update: Wed 01 Apr 2026 07:42:04 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: NVpjhDtoiNJk8Eon+jYBxGKkW3turC1dgANngBMNmDI=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Mar 25 07:42:04 2026 GMT Not After : Apr 1 07:42:04 2026 GMT Subject: CN=69c391cc-72a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:dc:a3:84:71:b0:e8:22:2c:7b:d0:79:0a: 85:44:a9:16:d3:a8:dc:f8:61:7d:36:ab:93:b1:76: 71:a1:5c:22:5b:2f:c4:24:a9:45:3f:7f:c0:c0:c1: d3:7e:ce:3d:22:6d:ef:89:75:b4:84:1b:b2:f6:1f: 75:60:22:ea:dc:19:d1:02:6f:e5:6f:aa:96:90:c1: f1:47:69:6d:9f:be:4f:f2:7f:c5:d7:28:15:2d:be: 91:99:98:49:78:9a:33:f5:8a:be:fe:88:3c:3c:41: 0a:a9:08:6f:be:0b:5b:c8:5e:48:dd:af:e2:90:f1: 52:a7:bc:28:01:86:f4:89:4e:79:e7:09:bf:0b:ae: b4:dc:e7:93:f5:14:0a:07:e1:cc:ab:d0:66:66:c2: 9f:1a:5d:34:b9:02:4d:29:34:df:c8:ca:1e:91:01: 7f:28:70:12:e1:60:12:13:76:8b:9b:b3:6f:bb:67: 70:2d:41:5b:be:44:67:0b:ee:40:a9:c1:45:b1:94: 2e:ab:f4:d8:07:1f:b4:36:31:b5:0a:40:9d:b0:aa: 2b:57:8c:be:c7:a1:85:1d:73:e5:8e:11:69:3a:51: c4:49:e5:35:ea:de:b8:8c:a1:1d:56:3b:9e:b8:1a: f1:1d:5a:db:aa:d6:a9:df:40:a6:68:a4:ed:2e:d1: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:22:BA:68:42:15:B5:C9:31:73:27:81:60:37:74:F0:DA:A4:75:25 X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:55:4c:4b:d2:e6:32:5b:f5:36:3c:04:95:34:6d:b5:75:de: 43:8d:45:41:8d:34:22:b4:cc:e2:ac:2c:ba:66:5f:7b:c7:c1: f1:a7:0c:fa:f6:6f:5e:b6:78:24:36:c1:ca:1b:77:47:4c:91: 8d:ef:f2:29:c4:12:e8:f2:4f:8f:ad:5b:3b:cb:d3:cb:5e:a6: 2e:63:42:9c:7e:c0:be:a5:88:05:37:67:50:79:58:e5:4c:0a: 26:8c:f6:a5:b5:45:3a:ea:cc:45:a8:d8:fa:8c:7c:7a:cd:0b: d1:15:13:87:86:2a:28:35:66:4a:98:e7:e4:c3:5a:f1:e0:3f: 85:e8:1f:8d:4d:cb:8c:92:c1:9d:3c:4e:0c:e3:30:a8:38:1f: 73:e7:c1:84:1b:20:0a:bf:f0:82:93:8b:52:20:3a:bc:91:01: 3b:df:00:0d:61:d5:e3:1b:3f:94:a6:b4:07:06:81:c7:fb:e0: 3e:7b:b3:3f:95:25:66:3e:e0:b6:7a:64:ed:4b:33:00:e1:7f: b2:28:fe:cb:cb:80:6a:a3:8a:b5:2d:24:29:5d:0f:89:60:40: bf:0d:94:7d:88:03:17:8e:ed:9b:86:f5:ff:af:dd:4a:b3:b3: 03:5e:35:5d:d7:cc:45:4b:a5:7a:36:05:a9:04:3b:b4:bd:dc: d1:bc:39:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNjAzMjUwNzQyMDRaFw0yNjA0MDEwNzQyMDRaMBgxFjAUBgNV BAMTDTY5YzM5MWNjLTcyYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1CNyjhHGw6CIse9B5CoVEqRbTqNz4YX02q5OxdnGhXCJbL8QkqUU/f8DAwdN+ zj0ibe+JdbSEG7L2H3VgIurcGdECb+VvqpaQwfFHaW2fvk/yf8XXKBUtvpGZmEl4 mjP1ir7+iDw8QQqpCG++C1vIXkjdr+KQ8VKnvCgBhvSJTnnnCb8LrrTc55P1FAoH 4cyr0GZmwp8aXTS5Ak0pNN/Iyh6RAX8ocBLhYBITdoubs2+7Z3AtQVu+RGcL7kCp wUWxlC6r9NgHH7Q2MbUKQJ2wqitXjL7HoYUdc+WOEWk6UcRJ5TXq3riMoR1WO564 GvEdWtuq1qnfQKZopO0u0dfhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/iK6aEIV tckxcyeBYDd08NqkdSUwHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzI0N0I1Q0JBRDAwOTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RD YmFJZmI3WUJMR0F3NkZ2dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWVUxL0uYyW/U2PASVNG21dd5DjUVBjTQitMzirCy6Zl97x8Hxpwz69m9etngk NsHKG3dHTJGN7/IpxBLo8k+PrVs7y9PLXqYuY0KcfsC+pYgFN2dQeVjlTAomjPal tUU66sxFqNj6jHx6zQvRFROHhiooNWZKmOfkw1rx4D+F6B+NTcuMksGdPE4M4zCo OB9z58GEGyAKv/CCk4tSIDq8kQE73wANYdXjGz+UprQHBoHH++A+e7M/lSVmPuC2 emTtSzMA4X+yKP7Ly4Bqo4q1LSQpXQ+JYEC/DZR9iAMXju2bhvX/r91Ks7MDXjVd 18xFS6V6NgWpBDu0vdzRvDmd -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:56 2026 by rpki-client