$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft File: Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json) Hash identifier: B1/i/cxyXwbuRsytZDZK93luwuxi/7HznQoajIajUCg= Subject key identifier: F8:1D:43:56:03:2C:64:75:E5:A3:2C:02:9A:55:80:29:77:FF:47:1A Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E Certificate issuer: /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft Manifest number: 38 Signing time: Wed 25 Mar 2026 07:44:53 +0000 Manifest this update: Wed 25 Mar 2026 07:44:53 +0000 Manifest next update: Wed 01 Apr 2026 07:44:53 +0000 Files and hashes: 1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: lZ5C1pTKwbj4USFvGTTg0yhlc3x883tax1R463Pzlbc=) 2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Validity Not Before: Mar 25 07:44:53 2026 GMT Not After : Apr 1 07:44:53 2026 GMT Subject: CN=69c39275-e71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:24:3b:66:c3:23:ee:5a:b0:47:f7:aa:0c: 2d:bf:31:af:24:b9:06:fb:75:6c:32:ba:18:52:ad: 34:16:8c:c5:df:c0:56:09:04:73:68:ea:fd:8c:b9: 97:7d:03:23:ad:f2:5a:31:b0:90:94:40:4b:53:5f: 4d:1a:61:ba:83:90:d3:36:fc:a4:03:f6:56:0d:e2: f4:72:cc:1e:e8:64:8c:18:a8:14:54:8d:f9:93:76: a1:eb:ee:76:ee:4e:7e:3c:be:9a:1b:58:46:d6:7a: 72:94:bb:6a:1c:5d:82:59:c1:84:01:04:56:35:d2: 32:f6:67:61:a2:2a:fd:c7:4a:79:04:1c:60:3a:61: b7:91:6e:4e:a0:f6:57:21:68:fb:95:b2:f7:a6:f0: 2c:cf:f6:38:6c:33:55:03:b1:87:f1:fd:cd:96:74: e9:94:f6:14:8e:07:ca:71:91:f2:a1:ed:cb:bf:09: f3:a5:5c:97:fc:ba:fc:18:de:75:82:4b:0a:3a:e3: a8:95:c0:58:75:d0:5b:20:c2:6a:54:b9:36:8e:9d: 0b:39:bf:fe:b3:9e:ef:83:5a:4e:46:ee:4b:77:f0: 89:ae:5a:87:ef:f9:df:dd:39:cd:b3:a6:eb:0a:49: ba:ec:69:18:12:26:23:82:6a:7a:73:72:b8:80:55: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1D:43:56:03:2C:64:75:E5:A3:2C:02:9A:55:80:29:77:FF:47:1A X509v3 Authority Key Identifier: keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:10:1d:08:1a:9b:5b:7a:d5:e9:1c:21:6a:82:2e:02:71:d1: 07:53:c1:ab:9d:e8:07:bb:e9:1a:46:a1:a4:7b:ef:58:84:b1: f9:55:7b:10:4c:76:6b:23:82:3a:d0:b7:72:f2:a9:99:8d:b6: 96:a1:7e:80:d0:e3:6c:e1:53:78:39:5a:44:53:e4:b1:45:b5: 47:58:f2:6d:72:83:4e:78:d5:f8:27:bc:be:0e:47:13:62:89: 38:3e:75:77:23:ee:c8:f3:9b:06:e7:c4:a6:04:84:25:bd:7f: f6:17:41:5b:ea:10:c9:e9:4c:d1:a4:55:69:6d:e7:b7:96:e2: 6d:10:1a:27:ee:6c:ca:02:17:cb:de:02:6e:ec:0e:03:a9:ef: 4b:13:d7:f8:36:e5:16:9d:b3:01:73:12:ac:7d:d5:1d:ba:a1: 8a:c3:45:8f:13:52:f3:9e:1e:4b:97:32:bd:1e:28:a1:bb:6e: 1e:16:77:17:4f:07:79:5f:1a:ea:cc:a3:76:e4:fc:2a:e7:dc: fb:a8:c7:e2:37:f4:5e:28:07:bd:0c:5c:0a:57:02:b5:de:2c: 1b:1f:43:7a:de:01:81:b6:d3:0a:d4:a5:60:98:14:7f:f2:a6: 0b:8b:78:eb:75:48:8f:0e:8e:85:66:74:b7:43:5c:c2:d2:55: 10:72:35:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkJGMzExMC8GA1UEBRMoM0E1RkI1RTE3MzhFRTA5NEM1QjkwOEIzNzkxQzY5QzA3 NzdEQUUxRTAeFw0yNjAzMjUwNzQ0NTNaFw0yNjA0MDEwNzQ0NTNaMBgxFjAUBgNV BAMTDTY5YzM5Mjc1LWU3MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCASQ7ZsMj7lqwR/eqDC2/Ma8kuQb7dWwyuhhSrTQWjMXfwFYJBHNo6v2MuZd9 AyOt8loxsJCUQEtTX00aYbqDkNM2/KQD9lYN4vRyzB7oZIwYqBRUjfmTdqHr7nbu Tn48vpobWEbWenKUu2ocXYJZwYQBBFY10jL2Z2GiKv3HSnkEHGA6YbeRbk6g9lch aPuVsvem8CzP9jhsM1UDsYfx/c2WdOmU9hSOB8pxkfKh7cu/CfOlXJf8uvwY3nWC Swo646iVwFh10FsgwmpUuTaOnQs5v/6znu+DWk5G7kt38ImuWofv+d/dOc2zpusK SbrsaRgSJiOCanpzcriAVaEDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+B1DVgMs ZHXloywCmlWAKXf/RxowHwYDVR0jBBgwFoAUOl+14XOO4JTFuQizeRxpwHd9rh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGQkYzL0U1MEM5OUI0RDY2 MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9PNEpURnVRaXplUnhwd0hkOXJo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT2wtMTRYT080SlRGdVFpemVSeHB3SGQ5cmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG QkYzL0U1MEM5OUI0RDY2MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9PNEpU RnVRaXplUnhwd0hkOXJoNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASEB0IGptbetXpHCFqgi4CcdEHU8GrnegHu+kaRqGke+9YhLH5VXsQTHZrI4I6 0Ldy8qmZjbaWoX6A0ONs4VN4OVpEU+SxRbVHWPJtcoNOeNX4J7y+DkcTYok4PnV3 I+7I85sG58SmBIQlvX/2F0Fb6hDJ6UzRpFVpbee3luJtEBon7mzKAhfL3gJu7A4D qe9LE9f4NuUWnbMBcxKsfdUduqGKw0WPE1Lznh5LlzK9Hiihu24eFncXTwd5Xxrq zKN25Pwq59z7qMfiN/ReKAe9DFwKVwK13iwbH0N63gGBttMK1KVgmBR/8qYLi3jr dUiPDo6FZnS3Q1zC0lUQcjVb -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:31 2026 by rpki-client