$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json) Hash identifier: ca1LsL3m4On4tBXYv7lz5txfxPooxLxbugCvRfDiNkQ= Subject key identifier: 3A:17:AD:90:D0:43:DE:E4:FF:A9:E5:68:AE:53:CC:C5:81:2F:E4:41 Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft Manifest number: 96 Signing time: Thu 03 Sep 2026 07:38:58 +0000 Manifest this update: Thu 03 Sep 2026 07:38:58 +0000 Manifest next update: Thu 10 Sep 2026 07:38:58 +0000 Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: I141YGSOfaXHHEi1tenN6PGZBQiV0yAK62QUuX3arhM=) 2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 07:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Sep 3 07:38:58 2026 GMT Not After : Sep 10 07:38:58 2026 GMT Subject: CN=6a992412-9d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:48:3f:60:f8:f4:bd:ec:24:20:33:e5:80: 2c:35:e4:cf:87:c4:8c:b8:c5:dd:34:b1:9f:64:c7: b2:86:78:7b:09:69:bf:36:31:a3:0f:1e:54:70:96: 29:f6:f9:ac:9b:db:95:bb:1b:2f:7c:e4:f0:ec:0a: 51:1f:46:69:35:11:0a:67:87:f1:a2:98:7c:07:0e: 58:f4:b3:2f:f2:d0:80:af:61:0a:aa:71:a3:1e:14: a6:df:e8:6b:77:8f:02:c4:72:6c:76:7d:a5:55:ff: 96:47:c3:cc:b6:3e:89:c0:75:d1:3c:06:42:e4:3b: 62:33:bd:34:7e:5e:2e:1a:3f:32:85:8a:8c:38:7f: 44:0a:3c:20:38:6c:ed:03:34:0c:d1:fd:ed:20:d2: e3:2b:e6:74:8d:08:26:85:b0:57:a8:e4:f9:d5:87: 03:f3:fd:aa:ac:ab:0b:c9:4d:c8:dd:14:55:e8:f6: b5:c8:bb:27:5b:fd:28:22:bd:34:31:f1:e5:5c:32: 4c:57:5b:8d:42:63:a0:7b:e0:5b:9d:6e:39:65:96: 43:1b:88:7a:51:a1:3e:f8:a4:38:7b:f3:37:67:9a: ab:36:6a:51:29:4c:01:02:3c:8a:7f:89:1d:0b:fb: 32:f1:f1:95:9a:fc:ef:6d:84:3e:ec:21:db:1d:32: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:17:AD:90:D0:43:DE:E4:FF:A9:E5:68:AE:53:CC:C5:81:2F:E4:41 X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:f5:3b:2e:51:86:eb:8b:36:33:2f:73:49:98:c1:26:d2:d7: 1a:9d:17:4c:5f:09:f0:3e:10:bf:6c:cd:ae:35:a8:cc:2f:b7: 10:38:d8:c6:b8:cc:bb:d7:28:25:ee:cc:8b:d7:6c:9d:86:48: d2:2c:6e:dc:39:c6:c2:ab:a6:0b:aa:1e:e4:7a:b2:a9:64:d5: fd:61:1f:54:b2:e2:56:11:12:e9:52:b3:82:b1:e8:5e:d9:20: f1:82:ad:d0:eb:81:ef:50:90:0f:af:4b:b1:91:9e:1f:93:3d: 73:60:52:8d:79:0f:1a:da:3d:35:32:6c:b5:f7:a3:e9:3d:e4: 06:7c:1c:52:26:2f:64:f1:5a:64:0f:8f:09:75:ef:d6:cd:a3: b2:c6:45:c3:8e:5f:8e:e0:e7:ed:27:49:92:ef:eb:5a:35:ef: 65:28:de:aa:2c:da:87:03:78:a5:1c:e4:d6:68:0f:cc:7d:86: 89:1e:94:1c:93:3d:29:d3:0c:6c:63:ac:7d:39:bd:43:f8:8a: a9:77:96:13:1a:67:f3:63:05:9a:2e:77:30:d4:eb:16:60:d5: a4:9b:a3:01:04:6a:c7:f1:d7:38:50:aa:83:5a:35:cd:f1:62: 63:c5:69:62:a7:f2:e7:47:c2:11:c9:b9:44:50:2a:7f:bc:10: 81:73:f6:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKEEyNTY5NzUxMkFBMjY1MjdDRTRBRDYxQUNDMDlBMTBC RUQzQzk3MTkwHhcNMjYwOTAzMDczODU4WhcNMjYwOTEwMDczODU4WjAYMRYwFAYD VQQDEw02YTk5MjQxMi05ZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonJIP2D49L3sJCAz5YAsNeTPh8SMuMXdNLGfZMeyhnh7CWm/NjGjDx5UcJYp 9vmsm9uVuxsvfOTw7ApRH0ZpNREKZ4fxoph8Bw5Y9LMv8tCAr2EKqnGjHhSm3+hr d48CxHJsdn2lVf+WR8PMtj6JwHXRPAZC5DtiM700fl4uGj8yhYqMOH9ECjwgOGzt AzQM0f3tINLjK+Z0jQgmhbBXqOT51YcD8/2qrKsLyU3I3RRV6Pa1yLsnW/0oIr00 MfHlXDJMV1uNQmOge+BbnW45ZZZDG4h6UaE++KQ4e/M3Z5qrNmpRKUwBAjyKf4kd C/sy8fGVmvzvbYQ+7CHbHTLdswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDoXrZDQ Q97k/6nlaK5TzMWBL+RBMB8GA1UdIwQYMBaAFKJWl1EqomUnzkrWGswJoQvtPJcZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9FMzlEOEUwQ0M4 RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpTZk9TdFlhekFtaEMtMDhs eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9FMzlEOEUwQ0M4RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpT Zk9TdFlhekFtaEMtMDhseGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARvU7LlGG64s2My9zSZjBJtLXGp0XTF8J8D4Qv2zNrjWozC+3EDjYxrjMu9co Je7Mi9dsnYZI0ixu3DnGwqumC6oe5HqyqWTV/WEfVLLiVhES6VKzgrHoXtkg8YKt 0OuB71CQD69LsZGeH5M9c2BSjXkPGto9NTJstfej6T3kBnwcUiYvZPFaZA+PCXXv 1s2jssZFw45fjuDn7SdJku/rWjXvZSjeqizahwN4pRzk1mgPzH2GiR6UHJM9KdMM bGOsfTm9Q/iKqXeWExpn82MFmi53MNTrFmDVpJujAQRqx/HXOFCqg1o1zfFiY8Vp Yqfy50fCEcm5RFAqf7wQgXP2KA== -----END CERTIFICATE-----Generated at Sat Sep 5 00:38:45 2026 by rpki-client