$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json) Hash identifier: i9Xsk1OChTKW9zb6j6aR9jK4kfBsUCxUiPTL6HgOx9c= Subject key identifier: 2F:EE:66:E5:D1:96:8F:D3:DB:55:58:F2:EB:14:28:34:A2:FE:30:58 Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft Manifest number: 52 Signing time: Tue 21 Apr 2026 08:01:39 +0000 Manifest this update: Tue 21 Apr 2026 08:01:38 +0000 Manifest next update: Tue 28 Apr 2026 08:01:38 +0000 Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: 40eDkl4r6GfgGB0IKaglvhSlmPeKxeQrws9BZ8g7n4o=) 2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Apr 21 08:01:38 2026 GMT Not After : Apr 28 08:01:38 2026 GMT Subject: CN=69e72ee2-9990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:3e:69:70:2a:b6:9f:6f:81:8c:20:c2:ab: 77:85:79:9a:87:fa:d2:38:2d:c5:90:7c:e3:e6:9f: 02:0c:92:c5:22:12:ad:f4:ee:2b:5a:f3:5a:01:90: a8:01:35:8d:a2:91:bd:b7:a4:ce:ad:f5:8a:9b:04: e1:33:ed:71:ac:bc:8d:93:2d:6f:9d:cf:5c:36:3c: 3a:89:56:2e:8a:5f:8e:e5:96:72:8f:99:30:4c:61: da:e2:8a:be:b4:f3:78:12:9f:12:b0:21:82:b9:c9: b7:07:8f:01:23:eb:f2:4b:bb:64:c6:9b:7b:a0:bd: f7:a5:6a:d4:99:b6:46:70:8a:b4:f7:67:f2:7d:ec: 97:2d:af:44:55:72:46:da:89:a1:43:9d:f7:d6:a6: 9a:86:da:d9:ce:31:9d:9c:c1:7f:da:5a:c5:08:72: b7:91:cc:a2:de:6d:9e:9e:63:62:13:be:77:b5:6d: 29:80:89:fb:b8:f4:ac:72:83:1d:e2:e5:02:96:f7: fb:30:d2:22:b6:7c:1b:29:39:25:69:5d:4e:dd:69: 90:9e:43:ac:0f:7c:14:99:ac:9c:ee:96:13:9a:00: f2:e4:5e:53:9b:b5:0a:06:6b:3b:1a:7f:2b:7b:6f: 52:d7:ed:1d:32:a1:46:9c:c2:43:b4:f8:55:64:d9: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EE:66:E5:D1:96:8F:D3:DB:55:58:F2:EB:14:28:34:A2:FE:30:58 X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2f:75:2a:9f:f5:4b:c7:51:1d:60:63:ff:ce:65:fd:de:e6: c1:c9:98:a2:d6:5f:75:35:20:7e:8e:c3:ed:05:44:de:5f:2d: 11:b3:4e:e3:6e:1c:03:1f:19:4c:d4:7b:e5:3c:a4:b6:bd:cd: 6a:95:9d:c3:fa:01:3b:02:36:70:d3:39:c0:95:8e:29:8c:4c: 64:7f:a9:1a:8d:db:55:6f:70:52:79:7d:2e:c8:e3:a6:e4:50: fa:6d:c8:16:92:24:44:86:e0:cb:a4:ec:64:ce:a0:f7:9c:db: 4a:c5:c2:30:9b:04:75:9b:e4:fa:8c:e3:43:f4:eb:2b:92:e9: 6f:e3:3b:7b:39:8e:e5:b3:67:93:82:c7:5e:33:ee:4e:ea:20: c6:8f:d4:0c:4f:9b:da:20:73:2e:5f:27:37:51:bd:ce:c5:cc: d0:bb:32:b5:e4:3b:8e:07:30:7f:fa:96:f9:3a:3f:27:6a:a6: 2e:96:6b:77:6c:93:de:6d:5f:29:33:b6:57:0e:73:a8:89:40: 73:5c:12:ba:f3:7f:f8:93:ae:07:da:90:73:9c:42:0a:d7:e5: ab:c7:09:2b:ff:10:dd:f1:65:c8:80:6f:f4:c7:df:8b:99:90: cb:f2:46:d7:01:7d:17:89:42:da:81:13:c6:7a:81:f8:0d:7b: a3:75:78:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoQTI1Njk3NTEyQUEyNjUyN0NFNEFENjFBQ0MwOUExMEJF RDNDOTcxOTAeFw0yNjA0MjEwODAxMzhaFw0yNjA0MjgwODAxMzhaMBgxFjAUBgNV BAMTDTY5ZTcyZWUyLTk5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTvj5pcCq2n2+BjCDCq3eFeZqH+tI4LcWQfOPmnwIMksUiEq307ita81oBkKgB NY2ikb23pM6t9YqbBOEz7XGsvI2TLW+dz1w2PDqJVi6KX47llnKPmTBMYdriir60 83gSnxKwIYK5ybcHjwEj6/JLu2TGm3ugvfelatSZtkZwirT3Z/J97Jctr0RVckba iaFDnffWppqG2tnOMZ2cwX/aWsUIcreRzKLebZ6eY2ITvne1bSmAifu49Kxygx3i 5QKW9/sw0iK2fBspOSVpXU7daZCeQ6wPfBSZrJzulhOaAPLkXlObtQoGazsafyt7 b1LX7R0yoUacwkO0+FVk2bhRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL+5m5dGW j9PbVVjy6xQoNKL+MFgwHwYDVR0jBBgwFoAUolaXUSqiZSfOStYazAmhC+08lxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0UzOUQ4RTBDQzhF QzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvb2xhWFVTcWlaU2ZPU3RZYXpBbWhDLTA4bHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OThEL0UzOUQ4RTBDQzhFQzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNm T1N0WWF6QW1oQy0wOGx4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOL3Uqn/VLx1EdYGP/zmX93ubByZii1l91NSB+jsPtBUTeXy0Rs07jbhwDHxlM 1HvlPKS2vc1qlZ3D+gE7AjZw0znAlY4pjExkf6kajdtVb3BSeX0uyOOm5FD6bcgW kiREhuDLpOxkzqD3nNtKxcIwmwR1m+T6jOND9Osrkulv4zt7OY7ls2eTgsdeM+5O 6iDGj9QMT5vaIHMuXyc3Ub3OxczQuzK15DuOBzB/+pb5Oj8naqYulmt3bJPebV8p M7ZXDnOoiUBzXBK683/4k64H2pBznEIK1+Wrxwkr/xDd8WXIgG/0x9+LmZDL8kbX AX0XiULagRPGeoH4DXujdXj4 -----END CERTIFICATE-----Generated at Wed Apr 22 01:44:26 2026 by rpki-client