$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json) Hash identifier: Walq/DH6vqIzOThThdfaVgwXIi05pkeodozqzR5kNtg= Subject key identifier: 8B:A1:B2:6D:4A:E0:D1:F1:26:0B:9C:41:EC:23:32:91:94:F0:38:CF Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft Manifest number: 9F Signing time: Mon 21 Sep 2026 07:20:14 +0000 Manifest this update: Mon 21 Sep 2026 07:20:14 +0000 Manifest next update: Mon 28 Sep 2026 07:20:14 +0000 Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: c7mKvJ1jvVxUCelMEWEu0H++vq9kTvsf4CuDgzKhTuA=) 2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Sep 21 07:20:14 2026 GMT Not After : Sep 28 07:20:14 2026 GMT Subject: CN=6ab0daae-a291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:6b:5c:f4:ef:52:67:44:f6:35:1c:01:f7: e9:b5:de:f4:1e:1e:8d:c1:cd:23:aa:bc:02:bf:53: 32:a6:ee:f6:bd:a5:9d:f3:a7:c0:94:f9:2b:65:cd: fd:73:89:70:df:2b:0f:9f:26:24:5f:ee:a6:8b:9e: 76:9f:ca:1e:bb:55:16:26:3b:da:6c:26:ae:67:72: 77:a3:6e:08:dc:54:0c:2b:3f:74:6a:b9:d3:0a:3d: 66:f5:18:87:00:c0:b2:b3:21:0d:a3:ee:05:c5:9c: c5:a7:b0:86:a3:2d:17:02:82:38:65:46:7d:45:9d: 48:45:71:c2:15:c7:a2:a1:30:c7:22:68:80:a1:fc: 59:27:4f:85:85:6a:1f:e2:36:1b:55:57:e7:bd:2b: ad:4b:d7:1c:01:36:93:2f:67:6f:92:a7:cb:89:1b: b5:f5:c3:c5:41:72:e8:8e:79:b1:2f:c7:50:04:3b: c5:d1:d4:2b:d8:60:8e:1e:84:40:df:59:c3:fe:9f: 6f:93:8b:01:d5:7a:fd:2d:19:47:5a:73:60:99:4a: df:31:17:72:86:47:f0:ca:b7:a1:b0:b7:56:53:e0: 4a:8b:bf:38:86:dd:ab:77:f1:99:78:e2:36:98:ad: 26:3f:0a:be:e4:99:94:96:1a:81:40:b0:b8:b6:a3: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A1:B2:6D:4A:E0:D1:F1:26:0B:9C:41:EC:23:32:91:94:F0:38:CF X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:74:d6:84:77:da:18:f9:b0:3d:d6:21:46:51:6d:28:53:68: 2e:fd:40:81:d5:42:61:15:30:02:d2:e0:c7:cf:d0:22:c3:40: ed:90:b5:1b:cd:0c:96:5d:62:4a:e4:d0:89:ae:8b:7e:b6:3c: b6:d2:cc:1a:26:8c:c2:ce:39:42:33:f8:4d:24:05:4b:61:9c: c7:b6:f8:c1:c9:43:b8:9f:82:c8:9f:e4:55:c5:49:51:89:16: 96:b9:93:71:d9:d0:8d:3a:af:94:ba:4c:03:a7:67:7b:c2:bc: fc:67:7a:ca:18:91:e3:2f:8f:4f:4c:8f:e2:40:5f:2e:4a:6a: 32:7a:2a:6c:a2:e7:60:03:10:6a:84:04:f5:ed:d7:3c:f0:ac: 25:54:d5:96:4f:9b:b7:6b:09:c3:9d:92:ef:1c:ff:a1:f8:5d: 93:7f:9a:dc:92:69:1d:7d:e4:1a:b0:ef:dd:46:06:36:8a:80: 29:2b:70:7b:29:c8:e3:5e:00:01:69:5c:1e:18:a8:78:39:b3: 6c:e3:8a:1d:ed:83:b9:94:42:76:84:82:f4:71:a5:79:e4:4c: 19:ce:81:27:fc:dc:b1:fa:58:f9:7a:51:72:54:81:5e:b1:f1: 2b:e3:b1:da:17:cc:41:87:76:9e:fd:dc:6a:8e:9f:74:34:ef: 06:ef:af:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKEEyNTY5NzUxMkFBMjY1MjdDRTRBRDYxQUNDMDlBMTBC RUQzQzk3MTkwHhcNMjYwOTIxMDcyMDE0WhcNMjYwOTI4MDcyMDE0WjAYMRYwFAYD VQQDEw02YWIwZGFhZS1hMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LBrXPTvUmdE9jUcAffptd70Hh6Nwc0jqrwCv1Mypu72vaWd86fAlPkrZc39 c4lw3ysPnyYkX+6mi552n8oeu1UWJjvabCauZ3J3o24I3FQMKz90arnTCj1m9RiH AMCysyENo+4FxZzFp7CGoy0XAoI4ZUZ9RZ1IRXHCFceioTDHImiAofxZJ0+FhWof 4jYbVVfnvSutS9ccATaTL2dvkqfLiRu19cPFQXLojnmxL8dQBDvF0dQr2GCOHoRA 31nD/p9vk4sB1Xr9LRlHWnNgmUrfMRdyhkfwyrehsLdWU+BKi784ht2rd/GZeOI2 mK0mPwq+5JmUlhqBQLC4tqPYmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuhsm1K 4NHxJgucQewjMpGU8DjPMB8GA1UdIwQYMBaAFKJWl1EqomUnzkrWGswJoQvtPJcZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9FMzlEOEUwQ0M4 RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpTZk9TdFlhekFtaEMtMDhs eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9FMzlEOEUwQ0M4RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpT Zk9TdFlhekFtaEMtMDhseGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADXTWhHfaGPmwPdYhRlFtKFNoLv1AgdVCYRUwAtLgx8/QIsNA7ZC1G80Mll1i SuTQia6LfrY8ttLMGiaMws45QjP4TSQFS2Gcx7b4wclDuJ+CyJ/kVcVJUYkWlrmT cdnQjTqvlLpMA6dne8K8/Gd6yhiR4y+PT0yP4kBfLkpqMnoqbKLnYAMQaoQE9e3X PPCsJVTVlk+bt2sJw52S7xz/ofhdk3+a3JJpHX3kGrDv3UYGNoqAKStweynI414A AWlcHhioeDmzbOOKHe2DuZRCdoSC9HGleeRMGc6BJ/zcsfpY+XpRclSBXrHxK+Ox 2hfMQYd2nv3cao6fdDTvBu+vUA== -----END CERTIFICATE-----Generated at Tue Sep 22 17:05:45 2026 by rpki-client