$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json) Hash identifier: ArRErnOa/RT+aO01V5ucfAinY2DA7laHfFbbMkRfl7w= Subject key identifier: 42:70:70:F0:7C:06:E4:59:43:67:53:A5:D3:FF:7A:1A:A3:A2:D7:2B Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft Manifest number: 4862 Signing time: Sat 04 Apr 2026 15:42:58 +0000 Manifest this update: Sat 04 Apr 2026 15:42:58 +0000 Manifest next update: Sat 11 Apr 2026 15:42:58 +0000 Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: MmTTWSugNk5TVeCnWR49dfNpdYt00fntTnsi/CUQbNA=) 2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: FehOg1jQMA1kFJnWyr7fIuCvYAwffMy7bJWnLWfMfbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Validity Not Before: Apr 4 15:42:58 2026 GMT Not After : Apr 11 15:42:58 2026 GMT Subject: CN=69d13182-e8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:1b:4b:ea:9e:79:5c:22:af:6e:16:8c:99: 73:38:7e:0a:35:dc:d4:45:67:7d:a5:3f:32:d7:8d: 43:d1:91:63:08:d4:1a:b7:89:a5:75:1a:69:fd:0b: 7f:d5:4a:4a:d5:e5:78:f7:00:2d:78:59:9a:93:b7: cd:75:cd:9c:0e:a0:f9:81:e8:d9:16:31:8c:b0:b8: 4c:8d:f6:cb:bd:49:c0:ef:7d:4f:6e:de:62:f3:a8: ba:51:6e:df:12:29:a6:9b:ba:29:31:44:a0:20:e4: a4:5b:21:73:67:01:2a:4b:99:91:ae:df:10:89:ee: ee:ce:a9:6d:2c:b4:26:f2:56:13:1d:2c:ed:ad:ed: 9f:42:de:c6:eb:87:ba:6b:f4:27:b6:41:7b:fb:8a: 9c:52:8a:9a:f3:b4:a3:6c:1d:6b:de:15:85:6c:6d: 06:c7:3e:4c:b2:4b:b1:44:f7:b3:53:fe:dc:74:59: 4f:d4:96:b5:1c:d8:e2:bd:3b:26:12:7b:9c:00:d9: 00:d7:5f:94:70:e0:97:6d:92:e7:ff:2a:e2:09:fc: c2:64:7e:c8:87:ab:82:ba:be:39:d8:0a:76:30:da: 7c:41:ad:c1:f4:05:56:e6:5f:23:f3:9c:ff:42:80: 20:b7:f5:c1:bb:d9:7c:17:31:88:33:1c:e3:4b:23: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:70:70:F0:7C:06:E4:59:43:67:53:A5:D3:FF:7A:1A:A3:A2:D7:2B X509v3 Authority Key Identifier: keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:54:99:03:44:7d:18:69:8a:d2:01:c9:c0:43:e3:27:12:e7: 78:9a:82:76:dd:ca:ba:13:89:3f:2d:ab:30:bb:ac:94:55:8c: 9d:c2:24:93:3c:9f:12:5f:93:49:9b:00:57:98:02:27:15:ca: f1:42:ba:59:29:e3:1c:3f:65:2f:6d:45:d7:19:08:82:85:15: 8c:fa:b6:34:f6:7d:96:e6:e3:a0:5d:c6:ee:25:45:a9:81:3f: c2:76:75:d9:ff:65:fc:ae:18:1e:16:ad:78:fd:b5:48:c2:5a: 97:56:fd:43:b6:e6:3d:3d:04:68:f4:0e:7f:ac:77:0b:38:e5: a2:73:63:10:03:57:4b:ac:8c:1a:e7:93:0d:71:cd:b7:16:d1: 63:b0:dc:8c:c9:cc:a5:66:86:b5:f9:69:bd:af:3d:db:25:38: 3d:9d:48:11:d7:37:ee:4c:13:2d:04:c8:cf:36:da:99:69:38: e8:51:52:d5:6d:9c:bc:fa:e3:9b:5d:24:49:d7:41:74:53:57: 66:fb:65:f9:38:68:de:f1:0c:7c:82:e8:aa:04:ac:3c:10:c0: 99:11:fc:bb:b3:3f:dc:32:94:46:c3:33:ce:d3:f6:bb:b7:53: db:b2:f0:95:b4:6d:d4:25:3d:e5:f5:55:47:bf:2d:ef:2d:e2: 44:0a:b2:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB N0RCMUVEMjgwHhcNMjYwNDA0MTU0MjU4WhcNMjYwNDExMTU0MjU4WjAYMRYwFAYD VQQDEw02OWQxMzE4Mi1lOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjwbS+qeeVwir24WjJlzOH4KNdzURWd9pT8y141D0ZFjCNQat4mldRpp/Qt/ 1UpK1eV49wAteFmak7fNdc2cDqD5gejZFjGMsLhMjfbLvUnA731Pbt5i86i6UW7f Eimmm7opMUSgIOSkWyFzZwEqS5mRrt8Qie7uzqltLLQm8lYTHSztre2fQt7G64e6 a/QntkF7+4qcUoqa87SjbB1r3hWFbG0Gxz5MskuxRPezU/7cdFlP1Ja1HNjivTsm EnucANkA11+UcOCXbZLn/yriCfzCZH7Ih6uCur452Ap2MNp8Qa3B9AVW5l8j85z/ QoAgt/XBu9l8FzGIMxzjSyNNawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJwcPB8 BuRZQ2dTpdP/ehqjotcrMB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNL S2dRTXZuR1pkRnVuMng3U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFVSZA0R9GGmK0gHJwEPjJxLneJqCdt3KuhOJPy2rMLuslFWMncIkkzyfEl+T SZsAV5gCJxXK8UK6WSnjHD9lL21F1xkIgoUVjPq2NPZ9lubjoF3G7iVFqYE/wnZ1 2f9l/K4YHhateP21SMJal1b9Q7bmPT0EaPQOf6x3CzjlonNjEANXS6yMGueTDXHN txbRY7DcjMnMpWaGtflpva892yU4PZ1IEdc37kwTLQTIzzbamWk46FFS1W2cvPrj m10kSddBdFNXZvtl+Tho3vEMfILoqgSsPBDAmRH8u7M/3DKURsMzztP2u7dT27Lw lbRt1CU95fVVR78t7y3iRAqy5w== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:59 2026 by rpki-client