$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json) Hash identifier: mUC95ofdgga0+RMCvYEJ4OpmXIiGDVMKg4wctXHkHsY= Subject key identifier: 79:4B:57:85:06:32:ED:C4:65:40:83:CD:19:B9:A7:E6:B5:0D:43:14 Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Certificate serial: 0A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft Manifest number: 490A Signing time: Fri 24 Jul 2026 15:52:33 +0000 Manifest this update: Fri 24 Jul 2026 15:52:33 +0000 Manifest next update: Fri 31 Jul 2026 15:52:33 +0000 Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: OE5T3xKdx8pASXVJpdP8Z6e+Sm/7JXeaD/1m8opGl+4=) 2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: FehOg1jQMA1kFJnWyr7fIuCvYAwffMy7bJWnLWfMfbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2708 (0xa94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Validity Not Before: Jul 24 15:52:33 2026 GMT Not After : Jul 31 15:52:33 2026 GMT Subject: CN=6a638a41-9ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:9f:69:14:2f:98:6a:da:7d:54:e1:d3:f1: 77:cb:81:4d:f9:e7:15:e8:96:a0:7d:42:97:f6:d7: b2:c7:3e:31:42:58:21:45:de:df:78:3a:21:ec:f3: c4:41:74:47:db:7a:f9:21:9a:64:49:2a:84:aa:89: 7c:f9:81:c4:e6:c6:5e:5e:07:5b:c3:3e:ef:0d:57: 28:76:27:53:5d:64:d4:e4:3f:e9:35:a0:ac:58:84: 48:3a:67:30:8c:5f:f2:5b:0b:ab:e4:45:5c:11:61: 4a:bf:c6:88:2d:60:27:b3:ef:e4:f3:6c:d0:94:68: d4:fc:45:32:47:ca:46:a5:56:68:58:33:ef:c8:ef: 8f:05:42:35:85:dc:95:c9:8c:a6:9a:0d:a3:75:11: 8b:19:5b:4d:0f:0e:f8:d4:71:c6:27:38:24:c6:6b: 4b:3c:47:d6:ab:45:38:13:d1:fd:37:19:dd:9e:4d: 49:8c:32:ae:e9:32:67:87:f4:37:a4:95:18:7f:82: 5e:f0:d4:d8:fa:78:1e:92:5c:11:f9:c9:c6:99:0b: ab:53:23:47:81:9b:a2:22:6c:8e:6d:61:7c:1b:fe: 05:4f:64:4c:f8:5b:df:bb:d6:34:0d:50:34:0f:36: 21:46:96:8e:a6:f2:49:fa:70:32:16:57:cf:b3:6d: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4B:57:85:06:32:ED:C4:65:40:83:CD:19:B9:A7:E6:B5:0D:43:14 X509v3 Authority Key Identifier: keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f9:41:47:9b:7f:a1:35:b3:15:d1:1c:6d:e0:11:9e:95:b2: ee:82:d7:13:98:e0:b0:54:1f:bf:37:6c:2f:83:d6:6d:91:71: 33:09:98:ce:b9:84:3b:3a:e8:8f:4b:64:f7:5c:3f:ec:05:fe: 03:e0:b5:05:fc:c5:96:3d:65:5a:f2:db:78:d5:90:50:b7:20: 52:d7:5a:48:ba:e1:66:a0:55:7c:3e:cc:db:c8:82:a8:ea:5b: c5:b2:4b:69:5d:2f:a3:2f:8d:27:a6:aa:c4:9a:92:b6:59:6a: ca:62:05:76:3b:96:d9:90:0f:a4:9f:a9:34:01:cf:66:11:7c: 68:3f:f5:3b:e6:72:4e:ff:ad:48:37:68:8f:2e:d9:d2:34:dc: 8e:48:fd:7c:42:57:8c:01:35:e5:69:53:56:7f:5a:1d:d6:5f: be:08:42:a1:ab:11:8d:0a:2c:0b:60:2e:26:a8:1e:9c:8d:31: 28:24:4d:ec:7d:a9:c1:37:54:db:b1:02:be:20:7c:60:85:fc: 05:1d:a7:d1:8a:ff:48:30:0a:a7:4c:97:23:03:6a:6e:f1:74: e6:3d:0d:12:94:67:6a:cb:18:11:db:3c:07:12:af:ed:a0:49: fd:52:d5:e0:ef:d0:ba:7e:58:5e:80:88:65:75:ca:8e:8c:f6: 7c:1e:35:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB N0RCMUVEMjgwHhcNMjYwNzI0MTU1MjMzWhcNMjYwNzMxMTU1MjMzWjAYMRYwFAYD VQQDEw02YTYzOGE0MS05Y2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6WfaRQvmGrafVTh0/F3y4FN+ecV6JagfUKX9teyxz4xQlghRd7feDoh7PPE QXRH23r5IZpkSSqEqol8+YHE5sZeXgdbwz7vDVcodidTXWTU5D/pNaCsWIRIOmcw jF/yWwur5EVcEWFKv8aILWAns+/k82zQlGjU/EUyR8pGpVZoWDPvyO+PBUI1hdyV yYymmg2jdRGLGVtNDw741HHGJzgkxmtLPEfWq0U4E9H9Nxndnk1JjDKu6TJnh/Q3 pJUYf4Je8NTY+ngeklwR+cnGmQurUyNHgZuiImyObWF8G/4FT2RM+Fvfu9Y0DVA0 DzYhRpaOpvJJ+nAyFlfPs20zhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlLV4UG Mu3EZUCDzRm5p+a1DUMUMB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNL S2dRTXZuR1pkRnVuMng3U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiflBR5t/oTWzFdEcbeARnpWy7oLXE5jgsFQfvzdsL4PWbZFxMwmYzrmEOzro j0tk91w/7AX+A+C1BfzFlj1lWvLbeNWQULcgUtdaSLrhZqBVfD7M28iCqOpbxbJL aV0voy+NJ6aqxJqStllqymIFdjuW2ZAPpJ+pNAHPZhF8aD/1O+ZyTv+tSDdojy7Z 0jTcjkj9fEJXjAE15WlTVn9aHdZfvghCoasRjQosC2AuJqgenI0xKCRN7H2pwTdU 27ECviB8YIX8BR2n0Yr/SDAKp0yXIwNqbvF05j0NEpRnassYEds8BxKv7aBJ/VLV 4O/Qun5YXoCIZXXKjoz2fB413w== -----END CERTIFICATE-----Generated at Fri Jul 24 18:31:16 2026 by rpki-client