$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: CRtf1KtLnibI0i9FUxw6Z3uPQlo1p9dUSafaqEGAx4k= Subject key identifier: BF:76:0E:80:3A:A9:83:F0:3B:0E:01:CB:29:B0:65:81:2E:08:19:A9 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 24D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 24B5 Signing time: Sat 18 Apr 2026 15:43:17 +0000 Manifest this update: Sat 18 Apr 2026 15:43:17 +0000 Manifest next update: Sat 25 Apr 2026 15:43:17 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: dxKuXBYPGXz/Q3sLWXjxyq9pnADzg13KBgahzR+dHxQ=) 2: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=) 3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=) 4: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 15:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9425 (0x24d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Apr 18 15:43:17 2026 GMT Not After : Apr 25 15:43:17 2026 GMT Subject: CN=69e3a695-100a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:7f:9d:ae:0f:c1:7d:6f:ed:e7:50:ce:c8: 00:dd:de:de:aa:c4:fd:49:c4:94:08:ee:ac:3a:46: 18:b0:6e:90:3a:fb:e4:16:1a:8b:df:22:f5:1d:65: 65:00:87:d5:88:55:9a:2f:31:d0:01:98:f4:24:7d: ec:79:35:aa:a9:09:6e:fa:24:04:c8:0f:5c:ca:9c: 35:95:82:1d:08:aa:0b:74:ce:f3:3e:f0:3b:37:97: c6:04:42:4c:52:35:28:5c:8b:40:bb:1e:72:89:1c: 78:35:9a:5d:5f:96:eb:7d:8a:7c:95:e4:f0:eb:fc: e7:d4:33:fc:15:42:24:20:70:0f:2d:b3:44:aa:5c: c5:10:c0:d7:4a:d7:fa:74:15:6c:da:be:f5:e8:96: 5a:36:59:77:3f:fe:a0:f4:72:03:ea:55:c0:c3:5d: ef:06:ba:62:7a:ac:5c:89:9f:6a:93:39:5f:c2:55: e5:db:4f:72:41:db:20:4e:b3:83:e0:fd:38:3d:e0: 47:c5:10:3c:9a:84:85:ad:da:5e:b9:95:37:fe:db: 4f:96:e5:bc:f2:1b:7d:86:fd:16:34:8d:2a:8c:00: 0a:c3:66:d9:3b:06:00:25:34:49:4e:9f:09:92:84: 35:ee:1c:29:6a:41:17:d4:da:68:be:46:42:bf:38: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:76:0E:80:3A:A9:83:F0:3B:0E:01:CB:29:B0:65:81:2E:08:19:A9 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d4:fe:9d:ae:1f:55:35:df:59:d8:84:b4:bc:1b:30:8b:81: e9:e5:66:dd:ba:0d:4f:c6:48:f5:f8:bf:05:88:56:21:01:05: 71:4e:e8:c4:49:5f:3f:06:1b:75:3a:c0:3f:d0:6b:a3:9b:4a: 49:b5:a8:9d:6a:bc:5f:26:e1:86:65:e6:82:c9:8c:37:4d:f9: 8a:4e:16:99:7d:0a:7f:b8:4e:be:4b:be:58:0a:8e:5d:a6:41: 2c:b4:b3:df:33:ea:9a:62:d5:70:e0:12:73:92:b3:5d:9e:58: 0a:a6:2b:b0:eb:95:fc:ae:7b:e3:7a:fb:85:a9:42:49:cf:e1: 27:f5:7e:7f:68:a2:ff:bb:00:7a:e2:a9:9c:6d:50:fd:97:a1: 33:80:5f:65:a7:e1:89:da:f3:b4:fb:f2:e6:ea:d5:02:c8:fa: b0:97:1f:62:ba:39:db:11:a2:12:3d:ee:b1:79:d8:11:9b:48: 56:40:6f:2f:1c:b3:a5:74:6b:b8:dd:f0:99:dd:67:e5:43:a9: 19:bb:8e:83:73:e1:cc:44:a6:86:cc:b0:87:72:e4:30:01:12: 50:ec:93:7b:68:e7:e4:99:46:02:ac:bd:50:1e:63:fd:17:60: 5f:e3:cd:ed:e1:a4:5b:48:b9:a2:04:28:ef:d2:66:8c:f9:58: 79:c3:c9:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwNDE4MTU0MzE3WhcNMjYwNDI1MTU0MzE3WjAYMRYwFAYD VQQDEw02OWUzYTY5NS0xMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAJ/na4PwX1v7edQzsgA3d7eqsT9ScSUCO6sOkYYsG6QOvvkFhqL3yL1HWVl AIfViFWaLzHQAZj0JH3seTWqqQlu+iQEyA9cypw1lYIdCKoLdM7zPvA7N5fGBEJM UjUoXItAux5yiRx4NZpdX5brfYp8leTw6/zn1DP8FUIkIHAPLbNEqlzFEMDXStf6 dBVs2r716JZaNll3P/6g9HID6lXAw13vBrpieqxciZ9qkzlfwlXl209yQdsgTrOD 4P04PeBHxRA8moSFrdpeuZU3/ttPluW88ht9hv0WNI0qjAAKw2bZOwYAJTRJTp8J koQ17hwpakEX1NpovkZCvziISwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL92DoA6 qYPwOw4ByymwZYEuCBmpMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO9T+na4fVTXfWdiEtLwbMIuB6eVm3boNT8ZI9fi/BYhWIQEFcU7oxElfPwYb dTrAP9Bro5tKSbWonWq8XybhhmXmgsmMN035ik4WmX0Kf7hOvku+WAqOXaZBLLSz 3zPqmmLVcOASc5KzXZ5YCqYrsOuV/K5743r7halCSc/hJ/V+f2ii/7sAeuKpnG1Q /ZehM4BfZafhidrztPvy5urVAsj6sJcfYro52xGiEj3usXnYEZtIVkBvLxyzpXRr uN3wmd1n5UOpGbuOg3PhzESmhsywh3LkMAESUOyTe2jn5JlGAqy9UB5j/RdgX+PN 7eGkW0i5ogQo79JmjPlYecPJIQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:29 2026 by rpki-client