
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier: BTltz2i9iiUYf7V6tR/UfGE/+rUnthCQ+lSTzEYW7Xw=
Subject key identifier: 79:02:0F:EA:3B:A8:D3:FF:71:E0:04:EA:67:AD:E0:05:29:A1:E7:49
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number: 83
Signing time: Wed 29 Jul 2026 09:08:49 +0000
Manifest this update: Wed 29 Jul 2026 09:08:48 +0000
Manifest next update: Wed 05 Aug 2026 09:08:48 +0000
Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: Yx9C+ndBHpFe3gQqiIhPRFiEUTWimzLLjkVAOlXVF+Y=)
2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Validity
Not Before: Jul 29 09:08:48 2026 GMT
Not After : Aug 5 09:08:48 2026 GMT
Subject: CN=6a69c321-44a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:0b:6f:06:e7:bb:e8:11:3c:36:9d:89:12:
8c:8b:cf:a4:fb:a7:6d:f2:cc:1d:e4:d0:fd:80:84:
3f:d0:10:8a:5b:77:a7:67:62:03:7b:90:e8:39:55:
b6:02:d1:dd:35:98:fd:fe:88:ce:0a:1a:09:4f:ca:
43:ae:72:4b:76:b7:38:df:11:22:57:b3:11:b3:5e:
c8:55:20:88:e6:55:f4:d2:d1:c3:9f:6e:74:d2:f5:
23:33:41:c7:4b:3d:70:b9:b0:3e:48:62:40:9b:54:
97:a8:c8:b5:bc:8e:2d:4a:07:d2:cf:f8:b8:b6:34:
d3:ed:73:be:77:f7:12:1e:d9:46:d2:45:46:44:d8:
d2:c5:99:3f:41:14:a3:22:81:3d:7d:1f:b4:e5:5f:
a0:18:97:42:49:dc:5e:f0:f6:0f:4c:f6:83:35:b4:
26:30:65:f3:47:93:85:70:fc:8e:de:75:a2:b9:c8:
c3:5f:35:06:ec:ba:b5:13:e0:7b:74:d9:fb:e7:79:
77:02:44:91:ff:e2:74:ff:a2:1e:32:8b:18:dc:1d:
ea:ea:f8:3f:6a:aa:37:13:6e:fe:82:f0:71:39:2c:
e6:fc:9f:89:fa:eb:01:ba:a2:8f:cd:1b:ec:c3:1b:
40:2c:62:ca:52:6f:36:cf:e1:b8:f4:f6:68:7c:9c:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:0F:EA:3B:A8:D3:FF:71:E0:04:EA:67:AD:E0:05:29:A1:E7:49
X509v3 Authority Key Identifier:
keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:c9:b5:7e:6d:80:fa:64:68:2e:05:a3:c8:51:87:6a:4a:e6:
7c:8c:7e:87:b9:f6:d8:06:09:26:39:3d:da:c6:df:e3:d5:66:
2f:84:c6:79:26:c2:10:34:39:39:cb:d3:bf:f8:0e:14:82:5a:
79:ac:4d:b3:fd:0f:a7:b5:08:e4:9c:1c:84:c4:a9:67:d4:93:
58:9e:1f:13:01:72:b6:cf:ba:d3:26:4a:43:47:c1:1f:1c:fd:
64:de:70:e4:41:31:56:c7:29:ce:71:40:e4:d9:69:30:0d:6a:
ea:cb:49:f0:85:78:f8:a2:19:4f:06:ad:1a:7c:aa:a8:7d:2b:
56:b9:7c:30:c4:87:96:e1:3d:3b:f1:33:71:80:4a:c7:da:d7:
b4:76:41:c5:68:cd:da:30:7d:e2:3a:8e:a4:4c:74:8e:1d:ae:
ff:20:6c:e0:0d:8a:d8:d2:86:86:75:ff:e8:88:bc:11:97:fa:
c4:45:06:24:3b:fb:84:f0:83:61:31:8d:55:d5:9f:a0:3f:e2:
c1:a6:1b:da:be:cb:6f:5f:97:3b:05:28:0d:e1:04:5f:ea:1d:
95:c0:da:d3:f5:b9:15:af:2c:fb:54:10:cf:57:f0:bd:5d:df:
ae:24:22:f2:4a:87:8b:7c:a0:7a:95:33:0b:78:d5:45:03:e4:
f3:d2:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:24 2026 by rpki-client