$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft File: Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json) Hash identifier: ypqiPGPaIca8DXkLlzfbWPqhe2D7L1jGi1GVcn6tl9Q= Subject key identifier: 3D:DD:A7:42:54:89:FC:86:95:CD:6B:47:BC:9F:82:73:BF:43:10:A8 Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E Certificate issuer: /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft Manifest number: 2C Signing time: Sun 01 Mar 2026 10:09:46 +0000 Manifest this update: Sun 01 Mar 2026 10:09:45 +0000 Manifest next update: Sun 08 Mar 2026 10:09:45 +0000 Files and hashes: 1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: +An5PKkNtNxQubhQGNNK3gjbffA2FomU0dvecvo+cUg=) 2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Validity Not Before: Mar 1 10:09:45 2026 GMT Not After : Mar 8 10:09:45 2026 GMT Subject: CN=69a41069-8703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:1f:29:6f:ce:3f:81:60:ce:b9:0a:a1:a3: c9:27:8b:b1:eb:a2:52:74:4c:58:a8:7c:e8:39:5b: 58:84:dd:f8:da:49:85:09:4b:02:28:ff:ba:29:12: ce:0a:1a:d6:ed:3b:40:25:a8:67:05:2e:e1:13:f8: d9:2b:05:d3:db:d4:5a:83:ec:a9:53:fe:80:37:79: 00:5c:06:7a:02:37:e3:1c:13:a4:9b:40:a4:d9:c4: 6e:19:96:c8:c2:2c:2f:fc:fa:3d:e5:c5:c0:5f:a9: fa:2f:1e:fa:7f:a9:9d:e4:bd:d6:14:8c:4f:69:f6: 49:48:9f:1b:89:9f:67:80:dc:ba:21:42:32:c0:b0: 78:28:f9:81:1b:09:18:e7:74:85:42:d0:6e:9d:8d: 8f:f6:0c:40:08:90:e4:fc:a3:d3:e0:5b:05:95:b3: c0:ff:11:dd:7f:32:c5:21:bf:8d:e5:2a:83:e9:4c: ec:77:e9:88:18:2d:e9:61:53:f8:06:50:c5:7e:d7: 38:e3:eb:72:07:37:08:30:41:40:14:0a:73:d8:e6: 87:5d:61:0e:67:03:b2:5b:ec:79:2a:30:6c:26:94: e4:76:b2:48:03:dc:0c:d6:b2:29:dd:61:ad:a2:44: 76:29:83:6c:69:a6:bf:1e:21:ea:b1:99:71:88:8f: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DD:A7:42:54:89:FC:86:95:CD:6B:47:BC:9F:82:73:BF:43:10:A8 X509v3 Authority Key Identifier: keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ac:f9:c4:36:0b:b0:9e:17:83:4a:52:62:f4:fa:f8:38:e1: 66:00:94:96:ae:1f:5a:65:da:54:d3:62:b7:0e:07:e2:8c:89: 27:53:2b:86:7c:e1:8b:b9:d0:83:1e:d3:28:a8:1b:67:77:fa: e5:9e:21:99:8c:1c:71:4e:87:34:9f:3c:bb:e6:02:e6:b2:b1: 1d:60:78:13:67:c7:e2:81:90:d6:cb:4b:85:ac:5c:19:d5:18: b7:d6:4f:2c:5b:a4:24:8f:61:80:e5:a3:9a:3e:7e:42:b4:55: 96:bd:1c:b6:3b:a2:1d:a1:32:0f:6d:51:41:60:3c:3b:f2:36: f0:73:b6:fa:a9:98:e7:a6:67:e1:d6:2f:f6:f0:02:56:cc:2f: 06:aa:a5:fa:14:08:61:97:60:4b:b5:fe:c7:fb:3c:b1:8f:bd: 17:4a:76:e3:cf:91:97:61:dd:ed:df:28:da:6b:eb:3a:3e:fd: 57:58:30:01:17:cc:66:a4:f8:83:b8:9d:08:b2:9c:d7:af:f1: fd:a6:05:1a:49:b5:5e:7d:ab:e4:fe:56:fb:ef:78:da:be:f3: 2f:92:65:95:e5:d1:b4:1f:5a:90:87:a9:8e:a8:46:c7:fc:db: 48:cc:1e:df:65:0f:f5:b6:c9:76:16:99:df:b9:5b:8d:fa:34: d8:2c:f7:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkJGMzExMC8GA1UEBRMoM0E1RkI1RTE3MzhFRTA5NEM1QjkwOEIzNzkxQzY5QzA3 NzdEQUUxRTAeFw0yNjAzMDExMDA5NDVaFw0yNjAzMDgxMDA5NDVaMBgxFjAUBgNV BAMTDTY5YTQxMDY5LTg3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCW1R8pb84/gWDOuQqho8kni7HrolJ0TFiofOg5W1iE3fjaSYUJSwIo/7opEs4K GtbtO0AlqGcFLuET+NkrBdPb1FqD7KlT/oA3eQBcBnoCN+McE6SbQKTZxG4ZlsjC LC/8+j3lxcBfqfovHvp/qZ3kvdYUjE9p9klInxuJn2eA3LohQjLAsHgo+YEbCRjn dIVC0G6djY/2DEAIkOT8o9PgWwWVs8D/Ed1/MsUhv43lKoPpTOx36YgYLelhU/gG UMV+1zjj63IHNwgwQUAUCnPY5oddYQ5nA7Jb7HkqMGwmlOR2skgD3AzWsindYa2i RHYpg2xppr8eIeqxmXGIjzP1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPd2nQlSJ /IaVzWtHvJ+Cc79DEKgwHwYDVR0jBBgwFoAUOl+14XOO4JTFuQizeRxpwHd9rh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGQkYzL0U1MEM5OUI0RDY2 MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9PNEpURnVRaXplUnhwd0hkOXJo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT2wtMTRYT080SlRGdVFpemVSeHB3SGQ5cmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG QkYzL0U1MEM5OUI0RDY2MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9PNEpU RnVRaXplUnhwd0hkOXJoNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKrPnENguwnheDSlJi9Pr4OOFmAJSWrh9aZdpU02K3DgfijIknUyuGfOGLudCD HtMoqBtnd/rlniGZjBxxToc0nzy75gLmsrEdYHgTZ8figZDWy0uFrFwZ1Ri31k8s W6Qkj2GA5aOaPn5CtFWWvRy2O6IdoTIPbVFBYDw78jbwc7b6qZjnpmfh1i/28AJW zC8GqqX6FAhhl2BLtf7H+zyxj70XSnbjz5GXYd3t3yjaa+s6Pv1XWDABF8xmpPiD uJ0IspzXr/H9pgUaSbVefavk/lb773javvMvkmWV5dG0H1qQh6mOqEbH/NtIzB7f ZQ/1tsl2FpnfuVuN+jTYLPc2 -----END CERTIFICATE-----Generated at Mon Mar 2 10:40:03 2026 by rpki-client