$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: BLMLCvtmpADOGYDpkV8bcg+CAUIQAW9T9Z5neLJWTL8= Subject key identifier: F9:BB:C4:DB:CB:52:30:8F:0A:C8:75:EB:6A:EC:0E:D0:70:39:AD:15 Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0C7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0C60 Signing time: Sun 26 Apr 2026 18:37:56 +0000 Manifest this update: Sun 26 Apr 2026 18:37:55 +0000 Manifest next update: Sun 03 May 2026 18:37:55 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: Xi9cSQWw/Rmotn7zaIDeWlELMFX3nnS1JGjHCnj8vSM=) 2: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 2A0LGFbTxJM1CyVE/zh4gUOdkdA5g554p/UKkKfLEQk=) 3: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: TTxeq1OMdbgzaP7dTYMc6Fs5lQ+8FxgwD7ohl1EhyQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 18:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Apr 26 18:37:55 2026 GMT Not After : May 3 18:37:55 2026 GMT Subject: CN=69ee5b83-5c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c7:c1:47:fb:d8:bb:8c:5a:3f:97:fb:eb:aa: 3b:7a:74:99:fa:33:0a:b0:c8:3d:60:e3:06:91:23: 43:60:c2:86:13:e4:21:86:92:fc:e4:c9:29:91:2d: 74:e1:12:90:79:e3:46:bc:e1:46:d5:80:74:ca:c5: 22:5a:ef:66:1c:3e:e0:14:5d:d2:92:82:88:a5:6f: 21:a4:48:d2:3f:75:56:3b:3b:75:ac:12:a5:05:4c: 64:9f:3f:97:19:a4:6d:76:bb:e7:2b:1e:c0:f7:46: e7:ec:a0:41:bc:d1:ad:90:d8:9d:72:7d:6e:8d:b9: cc:53:27:fe:8e:27:da:83:72:b4:91:5e:e0:dd:14: 56:1f:04:65:5c:f6:a3:5a:e7:a0:27:07:e0:a4:e6: 3c:50:83:86:00:1f:48:da:0a:d1:50:4d:6e:87:3d: 7b:28:ae:34:a2:c0:ce:c5:7e:7c:40:34:f3:b6:f6: 19:5a:26:c0:d4:ba:89:de:b5:00:9f:05:0b:0f:f3: 3c:86:52:31:79:d4:f4:81:54:cf:3c:1f:50:93:2b: fd:e7:3c:8a:21:f2:17:46:1c:cb:6c:43:6e:5d:f1: c1:b9:eb:bc:4a:6b:97:aa:47:1c:3c:e5:e5:65:ff: 6b:5e:c4:62:b4:c2:24:51:8d:b2:00:ba:ca:87:8a: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BB:C4:DB:CB:52:30:8F:0A:C8:75:EB:6A:EC:0E:D0:70:39:AD:15 X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5f:7c:69:bb:c4:c9:ce:8c:68:4e:b3:99:c0:b2:1b:d4:0c: c6:e7:5c:59:5b:fb:2e:1c:9d:86:d6:67:68:8d:39:38:54:2b: ec:00:48:8d:3e:28:a5:5d:af:38:28:cd:5f:82:51:c7:fe:4a: e5:69:82:8b:e9:42:a8:ed:99:a7:02:bc:7f:a0:d3:9e:61:5b: 85:0c:a5:0a:12:f1:b2:48:09:55:4d:2a:da:4e:d6:ae:e0:8c: 1f:00:c4:f5:46:8f:84:f6:f1:7f:dc:00:0a:51:7b:04:01:91: c9:14:e5:21:4c:7c:df:9f:38:dc:19:67:b4:d1:21:91:be:95: 6e:be:7d:eb:77:a9:19:8d:fa:de:3d:cd:d7:b0:8c:77:43:ab: 3d:86:dd:36:86:23:0a:69:48:c7:8d:b5:1a:76:19:c8:b8:40: 3b:9f:12:2b:92:80:c0:52:a2:ad:32:77:b9:ce:1d:f8:bb:70: a6:2c:99:95:60:c2:ea:90:1d:ec:59:fc:50:76:89:53:2e:68: 90:26:8c:9c:fc:f9:da:58:01:c2:ed:2c:9b:4b:73:e2:87:77: d9:4e:c3:69:e5:03:84:df:1a:f3:11:7f:3a:ff:f5:09:dc:eb: a3:80:0b:6a:d7:f5:ae:36:a4:e4:35:ef:1c:00:71:42:f5:e4: a4:8b:b4:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjYwNDI2MTgzNzU1WhcNMjYwNTAzMTgzNzU1WjAYMRYwFAYD VQQDEw02OWVlNWI4My01YzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MfBR/vYu4xaP5f766o7enSZ+jMKsMg9YOMGkSNDYMKGE+QhhpL85MkpkS10 4RKQeeNGvOFG1YB0ysUiWu9mHD7gFF3SkoKIpW8hpEjSP3VWOzt1rBKlBUxknz+X GaRtdrvnKx7A90bn7KBBvNGtkNidcn1ujbnMUyf+jifag3K0kV7g3RRWHwRlXPaj WuegJwfgpOY8UIOGAB9I2grRUE1uhz17KK40osDOxX58QDTztvYZWibA1LqJ3rUA nwULD/M8hlIxedT0gVTPPB9Qkyv95zyKIfIXRhzLbENuXfHBueu8SmuXqkccPOXl Zf9rXsRitMIkUY2yALrKh4rUoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPm7xNvL UjCPCsh162rsDtBwOa0VMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI198abvEyc6MaE6zmcCyG9QMxudcWVv7LhydhtZnaI05OFQr7ABIjT4opV2v OCjNX4JRx/5K5WmCi+lCqO2ZpwK8f6DTnmFbhQylChLxskgJVU0q2k7WruCMHwDE 9UaPhPbxf9wAClF7BAGRyRTlIUx835843BlntNEhkb6Vbr5963epGY363j3N17CM d0OrPYbdNoYjCmlIx421GnYZyLhAO58SK5KAwFKirTJ3uc4d+LtwpiyZlWDC6pAd 7Fn8UHaJUy5okCaMnPz52lgBwu0sm0tz4od32U7DaeUDhN8a8xF/Ov/1Cdzro4AL atf1rjak5DXvHABxQvXkpIu0ag== -----END CERTIFICATE-----Generated at Tue Apr 28 12:47:22 2026 by rpki-client