
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier: AoxgLh0ZLLr8KBHQ6X/Gfe0BKrubWp4KIDyXdRxtyi0=
Subject key identifier: C8:F8:B6:94:D6:EC:C5:97:08:8A:C2:CC:4C:EA:22:F9:1C:E1:C4:CE
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number: 50
Signing time: Fri 17 Apr 2026 07:58:32 +0000
Manifest this update: Fri 17 Apr 2026 07:58:31 +0000
Manifest next update: Fri 24 Apr 2026 07:58:31 +0000
Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: HDoWhxwduoWhwS/spuXjFA4MGQ3Rj9nYhSOqc083BQg=)
2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Validity
Not Before: Apr 17 07:58:31 2026 GMT
Not After : Apr 24 07:58:31 2026 GMT
Subject: CN=69e1e828-7947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:5f:6e:47:c2:7f:bf:4a:37:4f:ca:b8:ad:
c1:37:9b:63:94:a3:94:20:19:7c:e8:7a:34:c3:23:
8f:88:eb:1a:1b:e2:2b:e1:81:4e:8b:24:1e:97:52:
45:fb:6b:dd:5a:16:80:d5:f7:73:0e:bf:50:3a:42:
34:cb:27:2d:7f:0c:31:29:f9:9a:71:aa:8f:f1:6b:
26:f5:63:e0:f8:b4:7f:9e:a4:f3:11:7f:fd:e0:50:
9c:15:d9:48:31:49:6c:3b:89:51:b0:1c:c4:04:07:
1a:1b:63:ec:50:a7:89:d9:32:0f:72:08:ba:3f:dd:
af:05:7d:d7:e4:9e:85:20:2b:26:36:12:bc:bc:3e:
7d:34:c9:dd:df:0b:a7:90:a3:3f:77:33:c7:da:79:
e5:65:c2:40:47:59:9d:6e:10:f4:9c:72:bc:9e:2f:
f8:03:56:f2:27:70:76:2a:db:97:d0:05:b0:52:dc:
87:21:83:3f:ba:53:40:f4:4a:c4:a3:38:25:2b:3b:
16:94:c6:0e:a9:85:4b:7e:e1:8c:ff:3e:95:92:d9:
1a:ab:6d:bc:44:aa:da:8d:f9:fa:bf:fe:51:e5:48:
f7:6c:d8:09:c9:18:ac:23:ec:90:5f:9a:b1:a6:3f:
05:99:66:14:00:68:7e:f0:af:12:da:52:d2:3b:ae:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F8:B6:94:D6:EC:C5:97:08:8A:C2:CC:4C:EA:22:F9:1C:E1:C4:CE
X509v3 Authority Key Identifier:
keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ec:a9:24:88:7a:5a:8f:7e:fb:c9:a5:08:e4:4d:d8:92:f9:
dc:99:69:7f:49:be:30:aa:ea:ed:0a:17:c7:06:58:35:07:6b:
b9:70:a1:ea:08:08:6e:8f:ca:40:b8:19:fd:62:7d:ef:a7:1d:
97:ef:ee:5e:53:37:23:06:df:90:f8:f1:4a:5b:33:36:e6:b4:
be:39:0b:2b:98:60:20:bc:aa:44:e6:5a:86:fa:64:84:fd:05:
69:74:fb:ee:85:48:e8:82:5a:5e:cc:1a:1c:66:09:19:50:ee:
5e:ec:e6:5e:12:17:51:ac:12:4d:49:b4:21:9e:0d:15:dd:b1:
e3:ef:12:fc:4f:34:63:b8:d8:03:17:0b:d7:a3:9c:ba:f0:7c:
e2:a1:73:c9:d9:58:9d:9c:de:f7:a6:e1:42:30:7f:8f:21:5f:
4d:76:90:27:02:f4:dc:f3:5f:7d:56:96:de:4e:60:9a:a7:12:
cf:cd:cd:1b:9e:61:5d:5b:de:f6:c7:b3:2a:80:81:94:ab:ea:
b6:3c:1e:8c:72:7f:3b:cf:d6:7b:2a:aa:23:31:13:52:e5:9c:
db:61:ab:0f:f0:89:0e:89:d2:a3:73:21:ef:9b:40:d3:14:c7:
65:5c:4e:28:96:b7:b7:b1:12:74:cb:64:38:96:b8:62:fb:5b:
62:a9:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:25 2026 by rpki-client