$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: BerwBTzLMlaDfBUzTuYF2OBbHamAu7EHLBXC/uzQvqM= Subject key identifier: 64:D5:D8:9B:A1:D4:F0:F8:40:83:D1:E0:72:3B:F8:8C:F4:AA:20:B4 Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 98 Signing time: Wed 23 Sep 2026 07:09:07 +0000 Manifest this update: Wed 23 Sep 2026 07:09:06 +0000 Manifest next update: Wed 30 Sep 2026 07:09:06 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: QUXxs5thnc33S0e3s2SXoVgFbegS08R3nJ1RsvOM3Lo=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Sep 23 07:09:06 2026 GMT Not After : Sep 30 07:09:06 2026 GMT Subject: CN=6ab37b12-bbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c5:c5:64:12:0f:8e:67:f9:10:00:42:c4:10: 7d:9d:06:5e:77:f1:c5:30:4c:8e:0e:64:46:9b:14: 06:de:9b:0a:6b:06:7c:a7:f3:f3:de:7b:ea:95:5e: 1a:62:ea:fb:25:ca:4b:b3:9c:6e:fd:28:d0:af:ab: 91:dc:14:c7:6c:f0:23:8a:55:3f:89:70:fc:a3:b3: b6:eb:69:ac:7f:2e:85:77:85:78:ed:ea:52:53:24: dc:25:13:f9:00:bf:6f:da:3a:4e:8b:62:95:6c:6a: da:e4:e3:99:cd:43:21:e8:42:29:34:c6:0f:b7:e2: 49:a0:06:a9:b1:b5:2a:5f:f9:4e:e6:7e:a9:5b:3f: ee:07:83:5a:78:ba:88:ba:25:1d:6a:4c:a1:13:25: a5:b3:a0:b8:28:05:e7:64:f6:2c:25:dc:21:8a:6a: d4:75:f3:45:fa:a3:91:29:7b:28:00:70:3e:1e:64: 52:ff:14:d1:f9:05:d2:c3:7e:34:57:85:9a:a3:9d: 9e:44:aa:d9:f8:9e:72:c9:34:9c:45:5a:03:1f:55: 3a:af:4f:ac:1c:87:b4:0e:5b:a7:56:7a:1f:fe:6b: d7:fc:98:fc:35:13:cb:62:43:19:b1:9b:7b:59:10: 81:2a:d3:04:9f:ad:a5:c4:ca:1e:9f:e7:e2:54:7b: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D5:D8:9B:A1:D4:F0:F8:40:83:D1:E0:72:3B:F8:8C:F4:AA:20:B4 X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:db:7e:bd:a4:d8:e7:cc:01:b7:fd:11:19:1b:78:34:03:67: 59:42:8f:6c:da:1f:4d:9b:dd:83:5b:ef:96:c2:12:bf:6e:92: ee:25:40:1b:46:95:a8:09:d4:f5:f3:78:84:bb:b9:bf:c2:bb: bc:f7:4b:46:f0:58:54:c5:fd:bd:64:c5:36:cb:0d:31:67:16: 19:70:6b:35:be:b2:58:83:35:d1:8c:00:00:0f:f4:db:b9:b6: c2:73:55:16:ad:41:30:30:83:bc:86:a5:8f:3c:04:86:a3:b6: b6:c0:63:84:df:5c:5e:c1:b5:ee:1d:f4:8b:72:1a:4a:94:e4: 92:9d:15:b8:79:21:16:66:4b:0d:71:72:78:7d:de:d2:1e:a7: ec:1c:ed:54:94:03:67:eb:d2:41:31:1b:2e:fd:42:9a:8e:8c: 66:9b:97:be:fa:51:be:3a:10:78:16:7c:da:3a:ef:fe:a5:d6: 6e:45:1d:dd:e4:1d:be:3c:f1:58:4a:72:7e:75:05:9b:48:8d: cb:28:7d:6a:2a:2e:f6:5e:26:b6:1f:91:68:bf:eb:d4:92:00: cc:19:02:7a:01:ce:6a:4d:f1:5e:71:da:98:7a:c0:31:07:77: 08:bc:0a:b8:30:9a:d0:ef:e1:a0:d6:d5:20:ab:1c:80:33:49: 58:c5:a1:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFREYxMTAvBgNVBAUTKDM4QkNENEY5RjgzQTFBRDA5QjY4ODdEQkVEODA0QjE4 MEMzQTE2RkMwHhcNMjYwOTIzMDcwOTA2WhcNMjYwOTMwMDcwOTA2WjAYMRYwFAYD VQQDEw02YWIzN2IxMi1iYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsXFZBIPjmf5EABCxBB9nQZed/HFMEyODmRGmxQG3psKawZ8p/Pz3nvqlV4a Yur7JcpLs5xu/SjQr6uR3BTHbPAjilU/iXD8o7O262msfy6Fd4V47epSUyTcJRP5 AL9v2jpOi2KVbGra5OOZzUMh6EIpNMYPt+JJoAapsbUqX/lO5n6pWz/uB4NaeLqI uiUdakyhEyWls6C4KAXnZPYsJdwhimrUdfNF+qORKXsoAHA+HmRS/xTR+QXSw340 V4Wao52eRKrZ+J5yyTScRVoDH1U6r0+sHIe0DlunVnof/mvX/Jj8NRPLYkMZsZt7 WRCBKtMEn62lxMoen+fiVHszewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTV2Juh 1PD4QIPR4HI7+Iz0qiC0MB8GA1UdIwQYMBaAFDi81Pn4OhrQm2iH2+2ASxgMOhb8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVERi8yNDdCNUNCQUQw MDkxMUYwQkU2MDBFNkJDNEY5QUUwMi9PTHpVLWZnNkd0Q2JhSWZiN1lCTEdBdzZG dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVERi8yNDdCNUNCQUQwMDkxMUYwQkU2MDBFNkJDNEY5QUUwMi9PTHpVLWZnNkd0 Q2JhSWZiN1lCTEdBdzZGdncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjNt+vaTY58wBt/0RGRt4NANnWUKPbNofTZvdg1vvlsISv26S7iVAG0aVqAnU 9fN4hLu5v8K7vPdLRvBYVMX9vWTFNssNMWcWGXBrNb6yWIM10YwAAA/027m2wnNV Fq1BMDCDvIaljzwEhqO2tsBjhN9cXsG17h30i3IaSpTkkp0VuHkhFmZLDXFyeH3e 0h6n7BztVJQDZ+vSQTEbLv1Cmo6MZpuXvvpRvjoQeBZ82jrv/qXWbkUd3eQdvjzx WEpyfnUFm0iNyyh9aiou9l4mth+RaL/r1JIAzBkCegHOak3xXnHamHrAMQd3CLwK uDCa0O/hoNbVIKscgDNJWMWh/w== -----END CERTIFICATE-----Generated at Thu Sep 24 08:42:34 2026 by rpki-client