$ rpki-client -vvvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: f3dt8E0Ejt5WCwi29qHBj8sS8IZakzbB86VAzxZzIjU= Subject key identifier: F3:FD:2B:1F:6A:AE:11:B1:C8:0C:72:4A:42:16:C9:08:45:06:B6:A0 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2504 Signing time: Sun 20 Sep 2026 15:43:49 +0000 Manifest this update: Sun 20 Sep 2026 15:43:49 +0000 Manifest next update: Sun 27 Sep 2026 15:43:49 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: H0hqIjfGEZ4SbHEic+5q0IfUicMavtkd/x2F3NDUkYo=) 2: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=) 3: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=) 4: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9504 (0x2520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Sep 20 15:43:49 2026 GMT Not After : Sep 27 15:43:49 2026 GMT Subject: CN=6aafff35-4138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:7e:c9:e9:b2:54:26:97:17:19:01:92:41: 67:ce:b9:2d:59:34:c1:87:eb:99:fe:61:02:23:52: 46:94:6c:21:9e:0a:93:01:4c:f2:76:fd:5e:72:38: 27:63:ed:80:6b:39:ab:c9:73:18:c0:1d:d4:ef:ea: 5a:32:f8:af:a7:0a:aa:67:68:16:8b:81:9e:4d:e1: 17:39:b1:9f:36:89:07:b9:6e:60:3e:5f:67:e0:75: 2f:5c:67:d2:e9:fd:93:aa:93:8b:d7:2a:76:73:1b: 3c:ae:9c:d8:30:f2:93:4d:89:3c:11:9f:9b:d0:e6: 85:fc:90:c0:c9:75:c8:f1:8d:6b:bc:b5:3b:4d:46: 7f:59:59:c4:ad:7b:a3:f7:ef:68:fb:2c:a6:c6:9b: 0b:b2:c5:0f:c0:05:ff:ab:14:6b:df:60:9d:9d:81: d0:b0:2a:b6:8b:6d:9c:14:c7:14:29:3b:7f:1f:05: b8:ae:8c:4e:11:14:c1:e0:73:05:45:45:df:be:73: f2:3d:46:d8:8d:4f:8a:f9:4f:a9:1b:65:a7:8b:c7: 36:70:ac:68:69:e4:24:12:e6:28:6f:52:64:7d:ad: 90:64:c3:78:56:47:9f:52:60:27:26:d3:0e:34:fd: 54:b2:a1:85:2c:ef:b6:45:75:c2:d3:72:4f:e8:bb: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FD:2B:1F:6A:AE:11:B1:C8:0C:72:4A:42:16:C9:08:45:06:B6:A0 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d0:6d:36:16:4c:cb:84:ef:49:46:c4:bf:d8:34:09:e4:5a: f1:0f:f6:b4:77:a7:41:ea:8f:00:ce:86:00:20:74:38:d7:57: 79:78:58:bb:96:7b:4a:25:20:cf:6a:26:a9:5e:5f:9f:6b:61: 49:bb:ad:76:75:d0:43:23:f4:c0:9f:ca:6f:20:9f:b4:4c:d9: 1a:21:c7:15:17:1f:81:05:04:5e:83:3f:a9:e4:60:b8:d7:37: 95:11:92:87:2a:5d:1d:1e:8d:7e:4f:02:8b:21:ed:f8:55:e0: af:84:21:0b:4a:2e:09:d4:53:40:e0:19:40:86:bf:a4:fb:61: b3:77:7c:0c:de:79:db:df:3c:db:ba:ab:dc:d1:3f:42:1e:a9: ab:0c:9b:12:2a:b1:a1:63:8a:b6:52:75:5b:1a:b7:67:b5:2a: 00:9a:e5:82:98:ae:47:7e:81:6d:20:51:03:81:da:d8:b8:f5: db:7a:e5:d8:be:6e:4b:a9:b3:88:f8:4f:79:47:ee:3c:98:de: b0:ee:3d:c2:cd:ca:ad:5b:e0:4d:93:8f:75:4a:97:37:e1:9a: da:e8:cf:aa:70:6c:8b:3b:63:59:c6:24:92:e4:ba:cc:50:78: 4b:25:b7:d1:11:79:9d:38:10:a4:89:04:0d:b8:46:a2:32:8a: 00:bf:fa:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwOTIwMTU0MzQ5WhcNMjYwOTI3MTU0MzQ5WjAYMRYwFAYD VQQDEw02YWFmZmYzNS00MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgZ+yemyVCaXFxkBkkFnzrktWTTBh+uZ/mECI1JGlGwhngqTAUzydv1ecjgn Y+2AazmryXMYwB3U7+paMvivpwqqZ2gWi4GeTeEXObGfNokHuW5gPl9n4HUvXGfS 6f2TqpOL1yp2cxs8rpzYMPKTTYk8EZ+b0OaF/JDAyXXI8Y1rvLU7TUZ/WVnErXuj 9+9o+yymxpsLssUPwAX/qxRr32CdnYHQsCq2i22cFMcUKTt/HwW4roxOERTB4HMF RUXfvnPyPUbYjU+K+U+pG2Wni8c2cKxoaeQkEuYob1Jkfa2QZMN4VkefUmAnJtMO NP1UsqGFLO+2RXXC03JP6Lvg0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPP9Kx9q rhGxyAxySkIWyQhFBragMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU9BtNhZMy4TvSUbEv9g0CeRa8Q/2tHenQeqPAM6GACB0ONdXeXhYu5Z7SiUg z2omqV5fn2thSbutdnXQQyP0wJ/KbyCftEzZGiHHFRcfgQUEXoM/qeRguNc3lRGS hypdHR6Nfk8CiyHt+FXgr4QhC0ouCdRTQOAZQIa/pPths3d8DN55298827qr3NE/ Qh6pqwybEiqxoWOKtlJ1Wxq3Z7UqAJrlgpiuR36BbSBRA4Ha2Lj123rl2L5uS6mz iPhPeUfuPJjesO49ws3KrVvgTZOPdUqXN+Ga2ujPqnBsiztjWcYkkuS6zFB4SyW3 0RF5nTgQpIkEDbhGojKKAL/6Pw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:58:49 2026 by rpki-client