$ rpki-client -vvvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: /Djc3DgGPDsu/2DBntoqGRwJWyalFGazrxWponvchuk= Subject key identifier: EA:23:C0:C0:3D:D8:95:26:80:D7:53:A1:79:A6:3D:02:58:73:66:BF Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 250C Signing time: Tue 06 Oct 2026 15:46:39 +0000 Manifest this update: Tue 06 Oct 2026 15:46:39 +0000 Manifest next update: Tue 13 Oct 2026 15:46:39 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: UIWo/cKzP4tgY3A464Y+JoRsbyZOkVTx1cllugFsKDw=) 2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=) 4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9512 (0x2528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Oct 6 15:46:39 2026 GMT Not After : Oct 13 15:46:39 2026 GMT Subject: CN=6ac517df-df07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:ac:79:7b:99:51:d9:c3:d8:9c:d9:d2:73: 5f:e7:8c:58:0c:77:ad:cf:6a:e0:bf:3c:29:81:5c: 12:28:5e:6e:a5:df:ae:69:fb:b1:4e:8a:fd:95:34: 62:e8:90:46:a5:fa:67:72:34:31:7a:6c:44:63:e9: 58:3f:5a:14:a7:b0:22:b8:16:cb:5c:99:26:1b:10: 31:7b:b1:b4:63:d1:78:ef:7b:d1:ff:ad:ab:cc:3f: 0b:fd:97:44:ce:ed:eb:de:66:0a:1c:eb:46:ef:1f: 97:05:84:c1:22:10:68:cf:69:58:2c:a5:34:c4:8b: 9a:23:09:04:1e:7b:d6:a1:56:c1:13:a2:17:fd:7c: 9b:6c:14:1a:4a:91:76:31:b7:26:99:11:1f:1a:a7: bb:54:3d:0d:ec:e3:a3:6e:d8:52:0a:f9:d2:3c:bc: f0:f4:00:ad:b4:ce:9e:8d:5d:13:99:1a:c9:39:71: 56:ad:01:ed:82:70:40:45:db:27:4d:fb:c5:4f:c2: 85:05:9f:b6:62:16:b3:aa:77:b9:41:85:45:45:0d: 59:d1:11:27:c2:51:2d:ed:b4:9d:31:d0:13:49:8a: fe:26:7a:71:c0:d9:7c:3a:97:cc:7f:70:b8:38:99: 80:68:38:54:73:8e:a5:3b:e2:6e:94:4b:f9:ce:1e: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:C0:C0:3D:D8:95:26:80:D7:53:A1:79:A6:3D:02:58:73:66:BF X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1e:58:28:31:43:3d:2f:05:50:a8:0c:d5:ff:1e:c8:13:64: 94:69:9e:5a:5a:ad:55:44:68:a3:a3:3d:23:1f:26:58:54:d5: c8:cc:cf:55:f3:0a:87:9f:5d:e1:0c:b8:10:62:7c:99:5b:1c: 8d:73:6b:c7:4f:09:a1:9b:6e:ed:b2:6f:9d:b1:ae:40:f4:87: 55:69:bd:3f:a8:b7:0f:53:29:09:5d:c7:1c:da:ff:ff:a0:7e: e5:ad:4c:0e:22:48:b9:20:c9:dd:ac:50:c8:4c:de:33:8f:a0: f7:87:9d:84:19:9d:1a:b3:01:2f:63:32:45:0a:d1:8f:74:80: ea:c3:ec:2f:1d:e8:9e:de:11:3e:00:87:76:7b:d5:0d:51:27: 07:ed:ff:34:76:62:af:f4:f4:d3:1b:b7:d1:0d:1c:cf:ca:05: b2:f4:ef:75:17:4e:24:09:07:c1:f5:eb:ce:25:56:f1:39:8c: aa:2f:f0:03:75:e0:c7:7e:15:8f:e7:a2:5d:c2:f8:9e:e1:83: dd:be:95:23:27:b6:b0:36:8a:d9:0f:bc:61:d6:7f:7e:80:43: e1:ef:81:09:e2:c3:1a:ed:d6:27:60:18:50:17:65:0e:8e:e7: de:3a:6f:72:56:88:e4:25:99:48:36:43:f8:c8:cc:f0:dd:1a: 22:b0:f6:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYxMDA2MTU0NjM5WhcNMjYxMDEzMTU0NjM5WjAYMRYwFAYD VQQDEw02YWM1MTdkZi1kZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUmseXuZUdnD2JzZ0nNf54xYDHetz2rgvzwpgVwSKF5upd+uafuxTor9lTRi 6JBGpfpncjQxemxEY+lYP1oUp7AiuBbLXJkmGxAxe7G0Y9F473vR/62rzD8L/ZdE zu3r3mYKHOtG7x+XBYTBIhBoz2lYLKU0xIuaIwkEHnvWoVbBE6IX/XybbBQaSpF2 MbcmmREfGqe7VD0N7OOjbthSCvnSPLzw9ACttM6ejV0TmRrJOXFWrQHtgnBARdsn TfvFT8KFBZ+2Yhazqne5QYVFRQ1Z0REnwlEt7bSdMdATSYr+JnpxwNl8OpfMf3C4 OJmAaDhUc46lO+JulEv5zh5UVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOojwMA9 2JUmgNdToXmmPQJYc2a/MB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQR5YKDFDPS8FUKgM1f8eyBNklGmeWlqtVURoo6M9Ix8mWFTVyMzPVfMKh59d 4Qy4EGJ8mVscjXNrx08JoZtu7bJvnbGuQPSHVWm9P6i3D1MpCV3HHNr//6B+5a1M DiJIuSDJ3axQyEzeM4+g94edhBmdGrMBL2MyRQrRj3SA6sPsLx3ont4RPgCHdnvV DVEnB+3/NHZir/T00xu30Q0cz8oFsvTvdRdOJAkHwfXrziVW8TmMqi/wA3Xgx34V j+eiXcL4nuGD3b6VIye2sDaK2Q+8YdZ/foBD4e+BCeLDGu3WJ2AYUBdlDo7n3jpv claI5CWZSDZD+MjM8N0aIrD2SA== -----END CERTIFICATE-----Generated at Wed Oct 7 01:06:45 2026 by rpki-client