$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: S68SunC7vfhFSRgOaBz226NMvAIDwJPdi8cleip9unU= Subject key identifier: 93:C1:F8:64:8B:F6:92:D5:53:B8:8F:CA:33:0E:85:F5:87:EB:02:13 Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 48 Signing time: Fri 17 Apr 2026 08:03:42 +0000 Manifest this update: Fri 17 Apr 2026 08:03:41 +0000 Manifest next update: Fri 24 Apr 2026 08:03:41 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: bOW07wqGXYkPytDVXna8lu1FRkFBfXBjh5SpUY3wOm4=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Apr 17 08:03:41 2026 GMT Not After : Apr 24 08:03:41 2026 GMT Subject: CN=69e1e95e-4469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:bd:aa:42:54:48:70:bc:49:db:d2:e3:e8: 6f:b3:5f:8c:3a:82:b6:3c:7d:92:27:c3:04:82:27: 20:c4:1e:07:3b:98:0b:76:cf:fd:7d:1f:32:90:d7: 8b:ff:9f:8e:e3:13:b0:8b:1d:76:05:65:ec:32:a7: 46:b3:3e:88:39:4a:db:81:50:a5:29:5d:6b:dd:11: c5:de:47:a2:51:36:51:6a:45:07:66:61:cf:12:0c: 7b:e1:fd:4f:c4:fa:d0:6b:b1:b8:89:54:c6:3e:ee: c5:f0:d9:4b:19:5d:01:3e:01:c6:a2:08:90:95:76: e6:37:28:ed:01:f5:54:50:7b:f2:b4:f1:d0:cd:93: da:0d:f9:b7:4e:3c:09:0c:4f:52:5d:81:c3:90:d8: 32:40:fa:49:44:3e:88:09:b9:b5:be:26:e7:d3:a6: 91:42:a4:8f:f7:f6:18:ab:04:90:e2:7c:ee:17:cd: 2a:8e:9e:3b:5b:f3:9a:05:11:8a:0d:d8:09:c3:7a: a2:e3:f6:3b:6d:2e:4b:de:3a:a6:0f:2d:f1:68:72: 77:22:98:22:c8:5c:48:b8:69:33:38:f6:23:ab:24: a2:49:09:14:7b:3b:36:ae:4f:8c:a8:bb:2d:27:cb: 4f:f4:f3:00:cb:fa:e0:dc:b8:aa:15:01:ff:f7:83: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C1:F8:64:8B:F6:92:D5:53:B8:8F:CA:33:0E:85:F5:87:EB:02:13 X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d0:ad:cc:50:43:97:1e:79:d4:e5:92:0c:01:03:54:67:d7: 6e:e3:70:51:09:a0:93:73:26:ce:0a:72:2d:75:96:45:6a:7b: d2:27:af:67:f1:4a:a5:b1:b0:06:05:4c:47:f5:f5:fe:c9:14: 2c:1c:7a:8f:50:f5:fd:43:c0:5b:6e:05:35:21:bb:43:08:87: c4:0f:51:dc:0a:16:ef:2b:93:96:ee:9c:f4:f3:dc:12:b3:f7: 8d:bf:fd:c7:34:cf:7f:c8:db:1b:a7:a7:15:a9:fe:c2:ce:f9: 33:23:27:ef:65:de:34:13:9c:ee:dd:dd:06:5e:28:db:be:9d: 69:20:46:2c:70:1d:a0:a4:44:a8:9e:93:f7:51:7e:f9:f0:5e: 5d:6d:16:26:75:7a:94:f4:87:6b:cb:37:34:09:12:56:fe:4e: 66:e6:0a:67:4b:1e:a0:32:81:f7:f0:8d:9d:31:94:5c:a0:df: 64:aa:b6:e4:49:8b:7d:66:6a:c1:5e:ff:35:6f:64:ca:db:4c: dc:9c:16:49:7d:b9:70:fd:23:e7:8f:00:b5:a7:9c:a5:55:72: ad:55:b2:a1:8a:bb:4e:0f:04:fd:18:0d:31:19:b9:92:ca:e2: 34:98:fc:59:6f:e6:5a:41:1f:9e:ed:ef:45:e5:53:98:d4:05: 0c:93:4e:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNjA0MTcwODAzNDFaFw0yNjA0MjQwODAzNDFaMBgxFjAUBgNV BAMTDTY5ZTFlOTVlLTQ0NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC03r2qQlRIcLxJ29Lj6G+zX4w6grY8fZInwwSCJyDEHgc7mAt2z/19HzKQ14v/ n47jE7CLHXYFZewyp0azPog5StuBUKUpXWvdEcXeR6JRNlFqRQdmYc8SDHvh/U/E +tBrsbiJVMY+7sXw2UsZXQE+AcaiCJCVduY3KO0B9VRQe/K08dDNk9oN+bdOPAkM T1JdgcOQ2DJA+klEPogJubW+JufTppFCpI/39hirBJDifO4XzSqOnjtb85oFEYoN 2AnDeqLj9jttLkveOqYPLfFocncimCLIXEi4aTM49iOrJKJJCRR7OzauT4youy0n y0/08wDL+uDcuKoVAf/3g+CpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUk8H4ZIv2 ktVTuI/KMw6F9YfrAhMwHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzI0N0I1Q0JBRDAwOTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RD YmFJZmI3WUJMR0F3NkZ2dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCz0K3MUEOXHnnU5ZIMAQNUZ9du43BRCaCTcybOCnItdZZFanvSJ69n8UqlsbAG BUxH9fX+yRQsHHqPUPX9Q8BbbgU1IbtDCIfED1HcChbvK5OW7pz089wSs/eNv/3H NM9/yNsbp6cVqf7CzvkzIyfvZd40E5zu3d0GXijbvp1pIEYscB2gpESonpP3UX75 8F5dbRYmdXqU9Idryzc0CRJW/k5m5gpnSx6gMoH38I2dMZRcoN9kqrbkSYt9ZmrB Xv81b2TK20zcnBZJfblw/SPnjwC1p5ylVXKtVbKhirtODwT9GA0xGbmSyuI0mPxZ b+ZaQR+e7e9F5VOY1AUMk06n -----END CERTIFICATE-----Generated at Sat Apr 18 22:23:54 2026 by rpki-client