$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: 2xJTL5cx3k0GOc1DSyhzTRIdUn2+PgXR5PYljvGfoLg= Subject key identifier: 78:86:2F:54:05:EA:FB:E8:23:DA:B8:5E:2F:F4:00:43:7B:09:AA:E9 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 24E5 Signing time: Wed 22 Jul 2026 15:50:37 +0000 Manifest this update: Wed 22 Jul 2026 15:50:36 +0000 Manifest next update: Wed 29 Jul 2026 15:50:36 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: ote7+M8NKM5xQjtg1LSLU/h4zShyHXXZgzt8QJaNSnA=) 2: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=) 3: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9473 (0x2501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Jul 22 15:50:36 2026 GMT Not After : Jul 29 15:50:36 2026 GMT Subject: CN=6a60e6cc-23c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6a:4a:bf:ec:8a:44:93:b3:c0:22:06:13:da: 6d:34:95:04:49:72:bf:90:ad:d3:47:94:db:44:81: ee:ca:08:02:3a:f6:ad:38:67:ee:21:72:e4:27:e5: d4:2e:0d:e6:56:5d:2a:03:7b:81:9d:e5:30:54:9e: 05:d3:93:e4:ca:fb:57:52:52:8b:20:6f:cc:98:05: d6:37:75:b9:ed:b8:3c:fa:5e:24:b6:26:16:30:c1: 80:28:a3:a6:ab:eb:74:c0:56:db:be:50:37:60:f4: 01:2b:e7:67:fe:09:bd:74:88:64:07:a2:a7:c3:0d: 7e:a7:04:6a:81:78:8b:4d:e4:4d:81:ab:02:12:8c: b2:7a:96:20:28:93:82:a6:2d:89:63:82:3b:ca:81: a1:39:fd:56:b7:6a:8f:b1:9d:d1:10:51:b4:9a:b6: 06:ed:c1:b4:97:86:19:7f:8d:a1:4f:03:2a:9a:84: f4:19:33:3c:d8:91:4a:f2:e2:23:35:0c:22:14:6f: 16:04:b8:74:7d:c4:83:92:d9:6c:a2:d8:88:7d:6a: 55:36:67:99:a5:18:fe:9c:02:d4:9f:ee:7f:b2:d9: a9:76:37:fe:d3:3a:eb:8c:6d:3e:91:61:7d:47:5c: ec:7b:0d:d0:ca:b9:d9:16:ba:42:06:6e:02:af:0d: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:86:2F:54:05:EA:FB:E8:23:DA:B8:5E:2F:F4:00:43:7B:09:AA:E9 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:64:ab:3a:76:6a:8f:76:74:ff:e5:51:dd:fb:6d:9c:0e:3b: 18:71:0c:c1:03:b4:e9:fc:4a:c4:36:90:57:62:6b:f4:98:b9: 63:25:14:73:44:5a:6b:69:79:d7:96:b2:22:67:b2:96:5f:c8: 61:5c:37:ad:7f:4c:f7:ed:24:ba:56:04:4e:00:d2:7a:e5:d8: 91:29:d9:4a:78:90:61:19:2e:1a:45:db:38:01:76:8b:2c:2c: 7a:7a:7b:9e:39:81:ac:d1:73:e8:cc:f1:8e:df:41:86:7f:0b: f9:b7:19:18:bb:65:77:ef:17:4c:4c:47:34:7a:48:5c:4a:8c: 64:a0:d6:ad:7c:c2:67:a4:bf:ee:ee:6d:ce:1d:f3:9c:ae:3f: 48:c6:cf:c0:1c:df:22:7b:4f:56:c5:63:7a:95:c5:1c:48:24: 01:9f:55:59:82:f1:5e:4b:b8:ce:14:7c:44:34:be:a8:f6:2f: 41:fd:b5:32:85:ea:80:a3:b3:1d:ef:79:25:57:a8:94:e3:15: b4:d4:2d:f1:8e:84:e3:cb:d6:55:31:14:fe:81:5e:f6:f9:80: b5:f8:48:7d:d0:29:8d:ab:2b:8a:61:fa:c3:e6:0e:71:b1:72: 02:bd:70:4b:c1:06:06:70:2a:fb:0e:07:d9:af:41:66:ff:92: 5b:60:c9:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwNzIyMTU1MDM2WhcNMjYwNzI5MTU1MDM2WjAYMRYwFAYD VQQDEw02YTYwZTZjYy0yM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg2pKv+yKRJOzwCIGE9ptNJUESXK/kK3TR5TbRIHuyggCOvatOGfuIXLkJ+XU Lg3mVl0qA3uBneUwVJ4F05PkyvtXUlKLIG/MmAXWN3W57bg8+l4ktiYWMMGAKKOm q+t0wFbbvlA3YPQBK+dn/gm9dIhkB6Knww1+pwRqgXiLTeRNgasCEoyyepYgKJOC pi2JY4I7yoGhOf1Wt2qPsZ3REFG0mrYG7cG0l4YZf42hTwMqmoT0GTM82JFK8uIj NQwiFG8WBLh0fcSDktlsotiIfWpVNmeZpRj+nALUn+5/stmpdjf+0zrrjG0+kWF9 R1zsew3QyrnZFrpCBm4Crw3tGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiGL1QF 6vvoI9q4Xi/0AEN7CarpMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnGSrOnZqj3Z0/+VR3fttnA47GHEMwQO06fxKxDaQV2Jr9Ji5YyUUc0Raa2l5 15ayImeyll/IYVw3rX9M9+0kulYETgDSeuXYkSnZSniQYRkuGkXbOAF2iywsenp7 njmBrNFz6Mzxjt9Bhn8L+bcZGLtld+8XTExHNHpIXEqMZKDWrXzCZ6S/7u5tzh3z nK4/SMbPwBzfIntPVsVjepXFHEgkAZ9VWYLxXku4zhR8RDS+qPYvQf21MoXqgKOz He95JVeolOMVtNQt8Y6E48vWVTEU/oFe9vmAtfhIfdApjasrimH6w+YOcbFyAr1w S8EGBnAq+w4H2a9BZv+SW2DJIw== -----END CERTIFICATE-----Generated at Wed Jul 22 22:40:41 2026 by rpki-client