$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: 13CpaAtqiE57Qili32JzjPeLdpYbqfpeU7c24AgTTRI= Subject key identifier: 4B:0E:68:93:9F:D2:0F:EB:7F:62:88:F4:46:83:D2:D7:6F:88:81:3B Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 24E8 Signing time: Tue 28 Jul 2026 15:51:42 +0000 Manifest this update: Tue 28 Jul 2026 15:51:42 +0000 Manifest next update: Tue 04 Aug 2026 15:51:42 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: tGHDgQVTlMbYPMbKR6NPTVD0qMtP/wqUewH11MX4cjU=) 2: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=) 3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=) 4: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9476 (0x2504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Jul 28 15:51:42 2026 GMT Not After : Aug 4 15:51:42 2026 GMT Subject: CN=6a68d00e-a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:b6:9b:7d:9b:0e:56:eb:b7:ff:7f:27:8f: 7d:4a:8a:fe:32:8e:86:be:b3:91:36:7b:5c:44:7b: ed:6e:16:b4:93:7d:b2:bd:7a:04:0f:db:11:63:d8: f7:ac:2c:e0:56:bc:02:5d:8e:70:2c:6b:4d:32:8d: 09:de:40:ad:ab:f3:11:c4:bd:a6:cd:08:7f:d0:bb: ae:78:3c:3d:90:2b:ec:d4:20:e4:bc:51:41:a7:f3: bd:56:18:4d:ae:72:28:7f:7e:69:c4:d1:ca:af:13: 18:db:eb:82:1a:de:76:2e:ad:c4:ff:09:ec:13:52: c5:16:8b:4f:11:b6:b4:0b:6f:55:b6:9e:d7:5b:75: fb:f5:c5:f8:1a:5c:74:68:d8:e9:80:f0:6f:41:97: 47:31:ed:4d:1e:d1:f5:1b:20:7a:39:ee:64:19:3f: 5e:11:6c:49:26:ac:35:44:2c:eb:d4:77:28:e5:5c: 8b:9d:a0:5e:13:15:33:46:4a:b2:b4:2b:1a:ec:55: 54:7d:7e:3f:1c:41:80:5a:8a:00:b4:ba:cc:e6:97: 9f:11:98:b3:59:1c:16:59:fd:27:c7:d3:ae:8c:3a: df:b7:7f:8c:69:50:80:79:84:55:0f:1f:c5:96:36: bb:cf:54:f2:04:81:8a:a5:11:65:cc:38:8a:0a:85: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0E:68:93:9F:D2:0F:EB:7F:62:88:F4:46:83:D2:D7:6F:88:81:3B X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7f:59:da:d0:54:34:57:d0:fd:22:38:fa:1c:6c:36:0c:d8: fc:d9:d9:a8:85:3d:f4:2d:4a:dc:28:a1:9c:82:a6:4f:f2:27: ab:14:30:62:4b:93:1f:cd:ef:31:37:ab:65:e2:b0:3b:51:d3: 0e:c4:26:ab:c5:79:2f:5c:24:47:c8:eb:53:a8:b7:92:43:8c: 1b:7c:81:e2:46:21:f7:8f:a0:55:06:ed:81:ec:eb:7b:ee:b4: de:58:53:7c:1e:c9:9b:af:0f:a9:50:78:a8:6c:78:ac:ba:b4: 15:93:d4:21:1e:b2:61:53:3e:70:b3:b5:32:96:41:91:37:8b: 67:9a:56:84:a4:d5:9d:b0:7b:ad:6c:33:c4:9f:84:5d:d1:89: 8b:d3:4c:54:0e:c3:2e:98:5b:f3:b9:7c:9f:35:97:43:7e:1c: a9:bb:96:fa:d3:63:37:b8:b5:ca:1b:ef:33:93:66:78:a2:e6: 34:1f:16:41:16:2d:7b:ff:15:3e:e2:56:29:d9:78:6f:bf:7f: fd:aa:ee:b6:5a:13:49:30:39:cf:ff:75:a0:c3:93:43:c3:bc: e8:80:b7:c4:fe:e8:46:55:69:66:2b:ed:53:53:09:78:c1:6c: c6:35:e1:ea:51:c4:9e:0f:1b:60:1f:53:ae:58:a3:ab:9b:2e: 66:68:ca:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwNzI4MTU1MTQyWhcNMjYwODA0MTU1MTQyWjAYMRYwFAYD VQQDEw02YTY4ZDAwZS1hNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh9i2m32bDlbrt/9/J499Sor+Mo6GvrORNntcRHvtbha0k32yvXoED9sRY9j3 rCzgVrwCXY5wLGtNMo0J3kCtq/MRxL2mzQh/0LuueDw9kCvs1CDkvFFBp/O9VhhN rnIof35pxNHKrxMY2+uCGt52Lq3E/wnsE1LFFotPEba0C29Vtp7XW3X79cX4Glx0 aNjpgPBvQZdHMe1NHtH1GyB6Oe5kGT9eEWxJJqw1RCzr1Hco5VyLnaBeExUzRkqy tCsa7FVUfX4/HEGAWooAtLrM5pefEZizWRwWWf0nx9OujDrft3+MaVCAeYRVDx/F lja7z1TyBIGKpRFlzDiKCoUXDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsOaJOf 0g/rf2KI9EaD0tdviIE7MB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQn9Z2tBUNFfQ/SI4+hxsNgzY/NnZqIU99C1K3CihnIKmT/InqxQwYkuTH83v MTerZeKwO1HTDsQmq8V5L1wkR8jrU6i3kkOMG3yB4kYh94+gVQbtgezre+603lhT fB7Jm68PqVB4qGx4rLq0FZPUIR6yYVM+cLO1MpZBkTeLZ5pWhKTVnbB7rWwzxJ+E XdGJi9NMVA7DLphb87l8nzWXQ34cqbuW+tNjN7i1yhvvM5NmeKLmNB8WQRYte/8V PuJWKdl4b79//arutloTSTA5z/91oMOTQ8O86IC3xP7oRlVpZivtU1MJeMFsxjXh 6lHEng8bYB9Trlijq5suZmjKyg== -----END CERTIFICATE-----Generated at Wed Jul 29 05:42:18 2026 by rpki-client