$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json) Hash identifier: zpCQ6WY8MmyMQTS8lgVlOQmT36Hj/0xXDVGzru6NysM= Subject key identifier: 09:A8:DD:63:C2:04:C6:BC:47:E4:70:5B:C3:C6:5D:17:7D:1E:45:CE Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft Manifest number: AF Signing time: Wed 21 Oct 2026 07:42:42 +0000 Manifest this update: Wed 21 Oct 2026 07:42:41 +0000 Manifest next update: Wed 28 Oct 2026 07:42:41 +0000 Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: dsAwPCRMFLcDWlros3xNJEMy74k76NiFZZltmBbY9is=) 2: 78E836FCC15C11F1A32C9D3E5611F970.roa (hash: SAHcV4+v8gjwWofKWjvp14TRAKSVjyzRX4nhcfbztRs=) 3: 797EB474C15C11F1A32C9D3E5611F970.roa (hash: ER1/UdD9v/dxtBgb8kVY6LLz4SFub7fm7YxT6sicMQY=) 4: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Oct 21 07:42:41 2026 GMT Not After : Oct 28 07:42:41 2026 GMT Subject: CN=6ad86cf2-c767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:29:62:c0:9e:95:d8:b0:bf:83:bb:1b:1c: 1b:f9:ac:19:a8:67:2d:56:af:d1:83:67:3f:20:2e: 04:e9:12:b8:c2:b6:7d:82:1e:e6:b3:61:f3:6b:de: 33:ac:7c:0f:a6:00:9b:7a:1c:38:83:bf:18:d6:b9: 10:b4:ef:2a:eb:00:e7:84:7a:01:18:e6:de:cf:0d: f1:01:f0:39:8e:59:54:8a:3f:10:e4:1a:24:47:56: 1e:1d:e4:c8:2e:c3:58:67:88:88:64:e0:c7:81:6e: 46:15:d9:dd:ae:1d:07:7d:4f:c5:e3:6f:c9:04:e5: 01:eb:3c:4d:d8:db:ac:f3:e9:11:d7:56:83:e6:aa: 0c:e0:0d:da:2a:15:a5:0e:0f:36:25:8f:ac:7d:da: 8f:9e:8f:75:0f:bb:f1:f2:c0:be:fc:f9:bd:ee:fb: 7b:e4:c0:6c:8b:f7:aa:e3:7c:6c:be:28:b3:6d:c9: 8e:eb:48:96:99:4e:ef:16:3c:69:37:de:2e:aa:e8: 10:11:8d:33:f7:a1:a1:d0:68:22:d5:da:6c:a3:c2: 3c:e7:87:5c:9f:ea:f1:f2:ac:03:18:7a:95:2e:80: ca:41:5d:3f:83:49:f3:6a:5b:6a:97:b2:73:aa:11: 6a:82:5d:0c:54:35:99:07:7c:44:d4:e6:95:1d:20: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A8:DD:63:C2:04:C6:BC:47:E4:70:5B:C3:C6:5D:17:7D:1E:45:CE X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d4:0f:21:cc:ea:aa:26:df:15:b7:69:b4:7d:22:25:84:53: c2:e0:54:9b:9c:b2:f1:a2:9b:b2:9a:d3:05:f9:9a:fc:b5:fd: 13:5d:16:c6:5b:e5:ac:a3:0a:14:f3:aa:61:a7:1f:ac:ba:dc: e7:9a:30:4c:7b:b6:36:8a:cd:d7:c9:07:74:47:c2:50:42:8e: bc:90:be:8f:0b:8b:21:9d:15:73:f0:23:2f:31:9c:2e:2c:94: e7:cc:94:58:e5:01:1c:53:f3:d9:93:e5:0d:8e:86:8d:1b:16: 14:0f:ff:bc:c7:3b:44:15:1f:dc:07:13:7b:4e:8d:23:52:56: 7c:00:9d:5c:3b:c2:10:1b:72:56:2e:60:5d:e4:92:40:d4:e4: 25:64:64:85:51:81:21:c6:2f:89:0d:b3:f7:ac:be:2e:4a:74: 7b:a6:fe:5a:fd:03:5e:e1:e5:40:f7:bb:a6:23:9d:cc:e7:4b: ff:6c:e0:57:19:30:b2:df:5f:84:30:bc:b7:a7:e9:ad:00:1d: 30:83:b1:0a:cb:6f:f9:b2:ef:38:47:32:cf:b4:44:f4:98:41: dd:e8:65:0d:55:26:f3:29:b3:83:d5:bd:b3:0f:79:db:08:df: fa:9a:a5:8b:34:f5:00:b5:53:61:fa:73:03:4a:8c:d5:2c:4c: 45:af:5b:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKEEyNTY5NzUxMkFBMjY1MjdDRTRBRDYxQUNDMDlBMTBC RUQzQzk3MTkwHhcNMjYxMDIxMDc0MjQxWhcNMjYxMDI4MDc0MjQxWjAYMRYwFAYD VQQDEw02YWQ4NmNmMi1jNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47IpYsCeldiwv4O7Gxwb+awZqGctVq/Rg2c/IC4E6RK4wrZ9gh7ms2Hza94z rHwPpgCbehw4g78Y1rkQtO8q6wDnhHoBGObezw3xAfA5jllUij8Q5BokR1YeHeTI LsNYZ4iIZODHgW5GFdndrh0HfU/F42/JBOUB6zxN2Nus8+kR11aD5qoM4A3aKhWl Dg82JY+sfdqPno91D7vx8sC+/Pm97vt75MBsi/eq43xsviizbcmO60iWmU7vFjxp N94uqugQEY0z96Gh0Ggi1dpso8I854dcn+rx8qwDGHqVLoDKQV0/g0nzaltql7Jz qhFqgl0MVDWZB3xE1OaVHSDzFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmo3WPC BMa8R+RwW8PGXRd9HkXOMB8GA1UdIwQYMBaAFKJWl1EqomUnzkrWGswJoQvtPJcZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9FMzlEOEUwQ0M4 RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpTZk9TdFlhekFtaEMtMDhs eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9FMzlEOEUwQ0M4RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpT Zk9TdFlhekFtaEMtMDhseGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWdQPIczqqibfFbdptH0iJYRTwuBUm5yy8aKbsprTBfma/LX9E10WxlvlrKMK FPOqYacfrLrc55owTHu2NorN18kHdEfCUEKOvJC+jwuLIZ0Vc/AjLzGcLiyU58yU WOUBHFPz2ZPlDY6GjRsWFA//vMc7RBUf3AcTe06NI1JWfACdXDvCEBtyVi5gXeSS QNTkJWRkhVGBIcYviQ2z96y+Lkp0e6b+Wv0DXuHlQPe7piOdzOdL/2zgVxkwst9f hDC8t6fprQAdMIOxCstv+bLvOEcyz7RE9JhB3ehlDVUm8ymzg9W9sw952wjf+pql izT1ALVTYfpzA0qM1SxMRa9blw== -----END CERTIFICATE-----Generated at Thu Oct 22 07:29:04 2026 by rpki-client