$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: qr4p3nttSf+ReBFa1dDFiWsGybfdiG1MdTVveydKQb8= Subject key identifier: 42:BB:0A:BA:33:60:F2:AF:09:52:71:57:97:E4:58:6E:0F:41:BC:2E Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 30 Signing time: Sun 01 Mar 2026 10:06:41 +0000 Manifest this update: Sun 01 Mar 2026 10:06:41 +0000 Manifest next update: Sun 08 Mar 2026 10:06:41 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: wgCkmKhF70VxAL3tHOxbdPJjhT0bff2+cNGp+17E0D8=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Mar 1 10:06:41 2026 GMT Not After : Mar 8 10:06:41 2026 GMT Subject: CN=69a40fb1-b770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:2c:4a:7e:26:76:34:fd:b4:82:4d:45:7b: c4:53:df:c8:a8:3d:3b:1e:f6:3d:8e:1e:40:d8:b8: 5b:1d:d0:d9:3e:28:9a:40:75:36:1c:04:46:67:63: e3:e5:bb:3d:05:26:d7:40:af:74:ce:45:fd:98:41: 23:ca:9b:30:76:f4:8b:87:f7:a0:b7:72:11:70:06: 65:bc:f6:75:6e:b6:a9:5d:fc:0f:c0:8a:8d:12:de: d3:15:69:f0:a7:fa:70:6c:10:eb:3f:61:36:22:e2: fe:62:5e:c5:8f:6b:84:ac:94:a8:6b:07:ad:9e:b0: 54:f2:32:e3:31:cd:eb:32:03:6b:50:57:85:7a:4b: f3:31:e0:a0:a9:59:4b:25:78:52:b5:a7:1a:0f:d6: cb:4d:2b:b4:dc:58:f8:c4:72:4b:94:0c:b6:54:80: fc:3d:6e:ae:80:f8:25:f0:cf:85:25:2b:77:a4:a9: 9b:44:b6:47:69:f4:35:24:8e:67:e5:2c:a4:ea:48: 4d:52:09:e8:37:b8:16:73:cd:f4:06:b5:b6:4c:36: f4:82:4b:2b:03:bd:60:8f:95:79:74:98:1e:15:f6: d2:c8:af:87:30:94:e0:11:6f:59:30:50:af:97:0a: 12:59:56:d1:b7:55:f8:0a:4e:00:27:6d:14:b4:73: 1d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BB:0A:BA:33:60:F2:AF:09:52:71:57:97:E4:58:6E:0F:41:BC:2E X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ab:93:6b:4c:dc:75:48:bb:db:66:24:51:ec:b5:3a:4c:42: 9d:0a:68:75:a0:69:ab:12:30:c3:b5:f3:d4:78:20:3e:7e:c5: b3:d8:9c:86:e2:0f:86:eb:82:9c:53:35:f0:55:f0:13:42:ff: 16:fe:97:30:e5:12:fb:db:be:e0:a1:fc:0f:e3:ad:78:9a:ee: 23:56:da:12:21:23:26:9c:7f:13:e2:a5:7a:ca:b6:97:76:72: 1f:6e:d2:67:18:35:88:e8:81:5e:f3:17:c9:7a:40:d6:e5:c6: b9:9c:d3:e2:99:56:1e:97:71:3d:4a:99:69:96:fd:8a:41:2c: 64:a0:67:c6:3d:79:5d:2b:3d:dd:8e:49:bf:e1:34:6a:8e:ad: 95:21:2d:96:44:fc:0d:50:2f:74:00:0b:14:ab:06:6a:44:99: 93:27:c7:38:d7:cf:98:ae:ff:46:7f:50:b7:f7:6a:88:c7:ba: b8:9f:ce:28:9b:55:89:70:d7:7c:60:22:67:5c:59:60:b9:0d: 10:de:dc:67:e3:3d:c5:b0:6d:a2:43:06:7f:f9:b0:e4:75:71: cf:e8:2b:d9:c8:cd:78:e5:33:af:e3:1b:c2:55:8f:88:0b:c2: 3e:e9:58:bd:b6:0d:7a:dd:b5:ae:c3:fc:64:b3:3b:e5:b7:f4: b4:e5:a4:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNjAzMDExMDA2NDFaFw0yNjAzMDgxMDA2NDFaMBgxFjAUBgNV BAMTDTY5YTQwZmIxLWI3NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDnyxKfiZ2NP20gk1Fe8RT38ioPTse9j2OHkDYuFsd0Nk+KJpAdTYcBEZnY+Pl uz0FJtdAr3TORf2YQSPKmzB29IuH96C3chFwBmW89nVutqld/A/Aio0S3tMVafCn +nBsEOs/YTYi4v5iXsWPa4SslKhrB62esFTyMuMxzesyA2tQV4V6S/Mx4KCpWUsl eFK1pxoP1stNK7TcWPjEckuUDLZUgPw9bq6A+CXwz4UlK3ekqZtEtkdp9DUkjmfl LKTqSE1SCeg3uBZzzfQGtbZMNvSCSysDvWCPlXl0mB4V9tLIr4cwlOARb1kwUK+X ChJZVtG3VfgKTgAnbRS0cx0jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQrsKujNg 8q8JUnFXl+RYbg9BvC4wHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzI0N0I1Q0JBRDAwOTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RD YmFJZmI3WUJMR0F3NkZ2dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBIq5NrTNx1SLvbZiRR7LU6TEKdCmh1oGmrEjDDtfPUeCA+fsWz2JyG4g+G64Kc UzXwVfATQv8W/pcw5RL7277gofwP4614mu4jVtoSISMmnH8T4qV6yraXdnIfbtJn GDWI6IFe8xfJekDW5ca5nNPimVYel3E9Splplv2KQSxkoGfGPXldKz3djkm/4TRq jq2VIS2WRPwNUC90AAsUqwZqRJmTJ8c418+Yrv9Gf1C392qIx7q4n84om1WJcNd8 YCJnXFlguQ0Q3txn4z3FsG2iQwZ/+bDkdXHP6CvZyM145TOv4xvCVY+IC8I+6Vi9 tg163bWuw/xkszvlt/S05aTH -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:03 2026 by rpki-client