$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: YMCRXe9AgtBdgegraxAtizWFKvtk0yz07cJygYgxlQc= Subject key identifier: 59:1F:EF:02:61:8B:CC:58:9F:E1:CB:18:2C:19:A7:87:9A:F4:DB:79 Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 97 Signing time: Mon 21 Sep 2026 07:25:16 +0000 Manifest this update: Mon 21 Sep 2026 07:25:15 +0000 Manifest next update: Mon 28 Sep 2026 07:25:15 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: VPMTo9yVB36quBJW9AbdTUHnbSLTIqUVmUzQfJabG+A=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Sep 21 07:25:15 2026 GMT Not After : Sep 28 07:25:15 2026 GMT Subject: CN=6ab0dbdb-2422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:66:4d:62:a7:13:17:d2:7f:96:23:8a:45: 31:93:06:fc:e1:20:ad:6d:a5:0b:ab:65:26:5b:12: ba:64:61:07:39:47:7a:70:d2:e7:7e:f4:ca:df:f0: 8e:81:2f:9e:6c:68:b9:96:40:08:d3:d1:87:b3:33: 05:34:8f:ef:66:b0:40:ea:e1:26:f4:9a:5a:ea:35: 35:cb:e3:fc:e5:26:5c:7f:cb:54:f8:98:20:38:f0: fd:56:02:9e:45:59:26:0f:75:58:ac:5e:98:aa:ce: 8c:9f:a8:05:c2:f0:26:ea:7f:79:08:33:cf:60:7c: c2:0a:31:3c:99:cd:61:bb:fd:6f:54:4a:9d:d7:35: e7:9e:26:f7:44:d1:dd:87:63:d6:1e:2f:c4:e2:18: de:87:4f:16:7b:6d:95:f2:07:89:9a:3c:aa:fe:00: 37:ce:a4:45:bb:13:03:c0:c4:08:d3:15:82:0b:49: 7f:d8:6f:19:3d:de:e3:56:9b:23:1b:69:43:e7:40: 7e:09:2a:d3:22:37:6d:6f:c2:d8:a2:f0:ba:90:49: ca:77:8c:6b:be:6c:04:87:f8:5f:48:7d:fa:8f:2e: 55:2c:2b:8d:f0:f0:35:82:8e:61:69:cb:67:a5:22: 36:8b:b3:48:2a:16:ec:82:92:1d:66:90:9e:8c:cf: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1F:EF:02:61:8B:CC:58:9F:E1:CB:18:2C:19:A7:87:9A:F4:DB:79 X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d6:d2:5d:87:1a:97:ea:75:f2:37:96:0d:da:56:20:1b:4c: fb:1f:3c:f8:e8:1c:68:99:35:a8:4e:49:e4:a0:e4:86:73:d8: cb:c0:dc:b3:de:df:83:d2:d5:78:3d:a4:e2:f5:e9:8f:54:83: 28:63:d6:55:39:2a:60:b8:4b:fc:83:4c:bb:ad:8c:02:88:ab: 8a:4c:9a:d4:88:64:4c:46:87:53:c3:ae:64:a7:95:9c:e2:a8: 2f:57:fe:7f:99:b8:e6:a8:ba:c3:7e:0d:50:66:e3:aa:37:f4: de:2a:40:4e:e6:9f:0f:37:0a:65:a0:9a:84:0b:c1:8c:8a:4a: cb:0d:ae:d4:4e:d8:d4:f9:27:76:a7:75:1a:88:b9:1a:bb:12: f5:3f:b8:fa:2b:0e:99:c6:5b:0c:85:c9:15:f3:48:6e:11:45: ec:a5:97:49:a5:9d:f8:29:a1:9b:1c:9b:0e:83:66:5a:5b:f8: eb:3d:fa:37:96:d2:32:46:e7:25:35:86:ec:df:78:5b:c1:73: ac:58:83:0e:df:c9:b1:49:44:86:9f:65:70:64:c3:13:7a:b5: fa:c5:26:6a:c4:05:36:5b:09:c1:8c:62:17:07:80:74:1b:0f: 51:36:ce:0a:0a:e7:57:19:34:2a:0e:05:96:de:82:70:cd:9f: 3c:84:d0:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFREYxMTAvBgNVBAUTKDM4QkNENEY5RjgzQTFBRDA5QjY4ODdEQkVEODA0QjE4 MEMzQTE2RkMwHhcNMjYwOTIxMDcyNTE1WhcNMjYwOTI4MDcyNTE1WjAYMRYwFAYD VQQDEw02YWIwZGJkYi0yNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeJmTWKnExfSf5YjikUxkwb84SCtbaULq2UmWxK6ZGEHOUd6cNLnfvTK3/CO gS+ebGi5lkAI09GHszMFNI/vZrBA6uEm9Jpa6jU1y+P85SZcf8tU+JggOPD9VgKe RVkmD3VYrF6Yqs6Mn6gFwvAm6n95CDPPYHzCCjE8mc1hu/1vVEqd1zXnnib3RNHd h2PWHi/E4hjeh08We22V8geJmjyq/gA3zqRFuxMDwMQI0xWCC0l/2G8ZPd7jVpsj G2lD50B+CSrTIjdtb8LYovC6kEnKd4xrvmwEh/hfSH36jy5VLCuN8PA1go5hactn pSI2i7NIKhbsgpIdZpCejM8YkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkf7wJh i8xYn+HLGCwZp4ea9Nt5MB8GA1UdIwQYMBaAFDi81Pn4OhrQm2iH2+2ASxgMOhb8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVERi8yNDdCNUNCQUQw MDkxMUYwQkU2MDBFNkJDNEY5QUUwMi9PTHpVLWZnNkd0Q2JhSWZiN1lCTEdBdzZG dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVERi8yNDdCNUNCQUQwMDkxMUYwQkU2MDBFNkJDNEY5QUUwMi9PTHpVLWZnNkd0 Q2JhSWZiN1lCTEdBdzZGdncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM9bSXYcal+p18jeWDdpWIBtM+x88+OgcaJk1qE5J5KDkhnPYy8Dcs97fg9LV eD2k4vXpj1SDKGPWVTkqYLhL/INMu62MAoirikya1IhkTEaHU8OuZKeVnOKoL1f+ f5m45qi6w34NUGbjqjf03ipATuafDzcKZaCahAvBjIpKyw2u1E7Y1Pkndqd1Goi5 GrsS9T+4+isOmcZbDIXJFfNIbhFF7KWXSaWd+CmhmxybDoNmWlv46z36N5bSMkbn JTWG7N94W8FzrFiDDt/JsUlEhp9lcGTDE3q1+sUmasQFNlsJwYxiFweAdBsPUTbO CgrnVxk0Kg4Flt6CcM2fPITQDg== -----END CERTIFICATE-----Generated at Mon Sep 21 22:22:48 2026 by rpki-client