$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: 0Yr37ruXj5+9xIrDbeMoafYl7EX6mTxLNfglNO0AZfY= Subject key identifier: 76:28:2B:B5:E0:4A:C7:13:D3:7F:79:85:33:70:35:B0:25:15:ED:FC Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 86 Signing time: Wed 19 Aug 2026 08:18:43 +0000 Manifest this update: Wed 19 Aug 2026 08:18:42 +0000 Manifest next update: Wed 26 Aug 2026 08:18:42 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: b7eLwIq/tQgHT3GBEohleiXIpd5YLEP5Dl+ayZVwxcQ=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Aug 19 08:18:42 2026 GMT Not After : Aug 26 08:18:42 2026 GMT Subject: CN=6a8566e3-4a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:c6:f3:b8:5e:6f:b9:eb:a0:4c:9a:a2:af: ea:44:a3:a6:0c:d9:ce:c6:f1:4f:76:cf:45:7e:a2: d3:5b:9b:11:69:ae:ea:32:58:76:7d:30:cf:ad:60: 66:4a:da:d4:fa:5f:15:1e:c4:10:d1:54:31:4c:52: 61:a6:71:a4:45:03:e8:bb:4d:2b:40:73:d4:ab:32: d0:5c:54:12:1d:e7:61:ac:ec:fb:1e:87:ce:30:2a: a4:19:5d:4e:ee:5c:7a:7d:b5:09:41:6c:00:e7:7a: 3f:e7:7a:a1:7d:01:b5:49:eb:89:57:5b:ce:fe:eb: f8:95:c6:c4:c4:28:b1:3a:71:82:a3:f3:e9:eb:16: 04:2e:f4:9f:8f:56:88:ef:ff:ed:64:0e:ee:50:54: d9:70:f5:4d:28:5c:06:2e:82:15:b1:b8:4a:a9:71: 0e:be:05:5c:1a:36:fc:52:d0:77:4b:05:c2:1a:c8: f0:82:6f:06:5c:cc:25:85:30:af:33:b4:7a:9b:2c: 88:f1:e8:34:17:e6:5b:df:de:df:f4:bd:fd:36:3f: 5a:bb:33:2b:36:26:d5:2f:a7:98:0c:be:63:0e:0a: bb:9c:35:57:23:27:3e:c4:db:60:83:12:95:b9:80: 00:f5:34:36:22:2a:11:94:12:f8:a2:f8:a2:79:c5: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:28:2B:B5:E0:4A:C7:13:D3:7F:79:85:33:70:35:B0:25:15:ED:FC X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:43:e8:3e:b4:ea:77:46:3f:0a:8c:cf:5a:4a:ba:be:18:a4: de:b0:66:f4:8e:23:dc:f2:70:a3:28:ef:18:5b:3c:90:24:30: 49:78:cb:a0:52:3e:b6:4f:53:c3:26:e3:1a:4d:39:43:88:15: 1c:4a:ea:17:2e:14:34:16:f7:c4:d2:83:bb:9a:07:ad:f4:e7: e1:a4:2a:08:1b:46:80:e0:11:81:a8:49:58:82:ee:42:a6:46: 45:01:3b:4f:40:03:20:a5:ce:4a:3b:0e:ab:a2:f0:c4:9e:96: ee:d7:1b:b9:93:b3:df:40:26:0e:db:fa:42:fe:57:f0:e8:03: 6f:3e:82:a0:47:1a:2b:c1:7a:b2:e5:a0:ad:6f:71:c3:c7:7b: e0:62:cb:f2:56:fc:55:4a:5e:da:f1:37:cf:56:65:36:04:f7: 8a:c6:9c:85:5d:85:b9:33:49:ac:69:a2:26:f4:a1:64:f9:d0: e4:31:94:cc:44:ee:fa:3b:ed:88:f0:48:f8:45:2e:d9:9b:ee: 15:bd:8e:44:70:d1:9c:0b:c3:80:9f:ad:96:1a:35:f9:64:88: 57:da:6b:5e:3d:f6:84:d4:5d:11:10:44:22:6f:ef:37:f0:9c: fc:1a:c4:e1:db:a4:7c:4e:a4:ff:74:d3:e4:48:78:33:b7:2f: cd:56:ce:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFREYxMTAvBgNVBAUTKDM4QkNENEY5RjgzQTFBRDA5QjY4ODdEQkVEODA0QjE4 MEMzQTE2RkMwHhcNMjYwODE5MDgxODQyWhcNMjYwODI2MDgxODQyWjAYMRYwFAYD VQQDEw02YTg1NjZlMy00YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCbG87heb7nroEyaoq/qRKOmDNnOxvFPds9FfqLTW5sRaa7qMlh2fTDPrWBm StrU+l8VHsQQ0VQxTFJhpnGkRQPou00rQHPUqzLQXFQSHedhrOz7HofOMCqkGV1O 7lx6fbUJQWwA53o/53qhfQG1SeuJV1vO/uv4lcbExCixOnGCo/Pp6xYELvSfj1aI 7//tZA7uUFTZcPVNKFwGLoIVsbhKqXEOvgVcGjb8UtB3SwXCGsjwgm8GXMwlhTCv M7R6myyI8eg0F+Zb397f9L39Nj9auzMrNibVL6eYDL5jDgq7nDVXIyc+xNtggxKV uYAA9TQ2IioRlBL4oviiecXhnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYoK7Xg SscT0395hTNwNbAlFe38MB8GA1UdIwQYMBaAFDi81Pn4OhrQm2iH2+2ASxgMOhb8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVERi8yNDdCNUNCQUQw MDkxMUYwQkU2MDBFNkJDNEY5QUUwMi9PTHpVLWZnNkd0Q2JhSWZiN1lCTEdBdzZG dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVERi8yNDdCNUNCQUQwMDkxMUYwQkU2MDBFNkJDNEY5QUUwMi9PTHpVLWZnNkd0 Q2JhSWZiN1lCTEdBdzZGdncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARkPoPrTqd0Y/CozPWkq6vhik3rBm9I4j3PJwoyjvGFs8kCQwSXjLoFI+tk9T wybjGk05Q4gVHErqFy4UNBb3xNKDu5oHrfTn4aQqCBtGgOARgahJWILuQqZGRQE7 T0ADIKXOSjsOq6LwxJ6W7tcbuZOz30AmDtv6Qv5X8OgDbz6CoEcaK8F6suWgrW9x w8d74GLL8lb8VUpe2vE3z1ZlNgT3isachV2FuTNJrGmiJvShZPnQ5DGUzETu+jvt iPBI+EUu2ZvuFb2ORHDRnAvDgJ+tlho1+WSIV9prXj32hNRdERBEIm/vN/Cc/BrE 4dukfE6k/3TT5Eh4M7cvzVbOUw== -----END CERTIFICATE-----Generated at Wed Aug 19 16:52:35 2026 by rpki-client