$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: ISOTEr+QLaFgwEtn4Mt2JqO4U/ZpkgzXqbcm9qdIo6I= Subject key identifier: E3:53:B8:A5:F8:8E:03:C2:DD:1A:DA:C1:07:47:42:95:6E:C8:1D:F9 Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 31 Signing time: Tue 03 Mar 2026 08:18:49 +0000 Manifest this update: Tue 03 Mar 2026 08:18:49 +0000 Manifest next update: Tue 10 Mar 2026 08:18:49 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: zPSpMDc14gwdG4JstYHt71sRE5gKK6X/uqVL4dhqPm8=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Mar 3 08:18:49 2026 GMT Not After : Mar 10 08:18:49 2026 GMT Subject: CN=69a69969-56ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:57:20:ba:e6:1f:72:50:0c:27:ac:a3:f9: f7:d0:bd:4b:6a:3c:50:1c:59:7d:75:3c:70:d1:a0: 81:23:1e:c2:57:1e:41:52:f5:72:f8:49:3b:c1:de: 34:27:30:ce:64:1b:bb:fc:7f:e6:cc:99:ae:9a:04: df:3b:f5:13:ed:d6:8d:20:6f:bb:cb:36:69:7f:9b: b2:02:d3:ec:ba:a5:f4:42:19:5f:f2:10:d9:7e:14: ca:b3:e4:50:c4:22:ad:1d:c8:d7:94:5d:b5:86:1f: 64:23:df:6f:88:35:02:cf:ea:2d:22:f1:0a:eb:97: cb:4d:aa:13:39:00:a4:db:b7:16:55:c3:05:83:2d: 98:8e:03:bf:d7:a4:8d:7d:0a:21:6f:0b:4a:00:74: 76:26:4b:0f:09:2c:ef:df:e2:96:65:9d:5b:ed:61: 88:ad:b2:c7:3e:ba:62:3f:8d:5e:6d:09:26:d9:a3: 5b:1e:c8:8b:d2:ff:69:ec:82:bc:ad:9a:0b:bc:07: 50:04:fd:c3:38:5d:67:90:d4:6d:01:9b:f4:9d:9e: 9e:99:43:f4:33:0f:8b:64:51:98:33:ae:5c:3f:85: 32:bf:1d:29:87:28:aa:94:83:d6:c9:7f:5b:15:11: 45:32:1b:59:2f:d3:6a:30:39:f4:5c:6a:5c:87:85: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:53:B8:A5:F8:8E:03:C2:DD:1A:DA:C1:07:47:42:95:6E:C8:1D:F9 X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a5:e9:28:f3:d6:24:c2:1d:57:f4:93:ca:ff:7a:c9:17:87: da:f9:ff:21:7e:c1:8c:33:14:6e:46:e2:45:67:ca:2c:1b:20: c4:cf:3a:14:88:cb:e6:07:8e:6d:5c:13:6f:74:b4:f3:2d:0a: 47:45:96:7e:97:5d:74:75:36:6b:5b:b0:18:fb:63:17:dc:bc: 78:c2:77:6f:68:29:6a:89:be:48:56:05:d0:15:70:60:68:7e: 59:09:0e:af:8d:4b:cd:f4:c6:e2:79:35:ba:ee:5d:4e:93:4a: b8:57:ed:d6:28:7a:d3:0c:43:f3:36:3c:46:c6:24:1a:4b:3d: 87:b3:0b:51:cc:44:d2:70:ac:45:23:16:4a:23:7e:c9:4a:3f: 97:bf:92:79:c7:f4:b5:97:1b:15:7d:63:2d:f6:42:12:67:24: dd:ba:f0:76:0f:70:27:e7:a8:1b:c1:a6:ee:1c:90:6b:97:a9: 2d:a0:2a:2b:da:52:f6:e5:24:98:75:55:b4:09:5d:3e:38:fb: 51:ea:1b:d9:61:dc:81:47:71:25:79:8d:8f:08:39:82:e0:3d: 74:fb:a3:5d:4f:de:f8:d0:51:20:05:22:a9:d9:22:d6:58:36: 9b:45:b3:8d:82:53:ca:9f:9a:d7:a3:89:88:82:30:01:90:bb: 1f:5d:0c:13 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNjAzMDMwODE4NDlaFw0yNjAzMTAwODE4NDlaMBgxFjAUBgNV BAMTDTY5YTY5OTY5LTU2ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJlVcguuYfclAMJ6yj+ffQvUtqPFAcWX11PHDRoIEjHsJXHkFS9XL4STvB3jQn MM5kG7v8f+bMma6aBN879RPt1o0gb7vLNml/m7IC0+y6pfRCGV/yENl+FMqz5FDE Iq0dyNeUXbWGH2Qj32+INQLP6i0i8Qrrl8tNqhM5AKTbtxZVwwWDLZiOA7/XpI19 CiFvC0oAdHYmSw8JLO/f4pZlnVvtYYitssc+umI/jV5tCSbZo1seyIvS/2nsgryt mgu8B1AE/cM4XWeQ1G0Bm/Sdnp6ZQ/QzD4tkUZgzrlw/hTK/HSmHKKqUg9bJf1sV EUUyG1kv02owOfRcalyHhT//AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU41O4pfiO A8LdGtrBB0dClW7IHfkwHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzI0N0I1Q0JBRDAwOTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RD YmFJZmI3WUJMR0F3NkZ2dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnpeko89Ykwh1X9JPK/3rJF4fa+f8hfsGMMxRuRuJFZ8osGyDEzzoUiMvmB45t XBNvdLTzLQpHRZZ+l110dTZrW7AY+2MX3Lx4wndvaClqib5IVgXQFXBgaH5ZCQ6v jUvN9MbieTW67l1Ok0q4V+3WKHrTDEPzNjxGxiQaSz2HswtRzETScKxFIxZKI37J Sj+Xv5J5x/S1lxsVfWMt9kISZyTduvB2D3An56gbwabuHJBrl6ktoCor2lL25SSY dVW0CV0+OPtR6hvZYdyBR3EleY2PCDmC4D10+6NdT9740FEgBSKp2SLWWDabRbON glPKn5rXo4mIgjABkLsfXQwT -----END CERTIFICATE-----Generated at Wed Mar 4 08:20:03 2026 by rpki-client