
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier: krLCwAJP+WLx9LbGAAAIum5gif8SSCxcn5agN/hAua8=
Subject key identifier: 2F:56:D2:7E:38:25:23:6F:F2:CC:52:F2:19:F2:9E:CD:10:D1:3C:A4
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial: 0653
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number: 0653
Signing time: Thu 16 Apr 2026 22:34:50 +0000
Manifest this update: Thu 16 Apr 2026 22:34:50 +0000
Manifest next update: Thu 23 Apr 2026 22:34:50 +0000
Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: L0OgLw7sq4odcXUa2lIVX7I3YT+sgIhBgjh9o9MLVsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Validity
Not Before: Apr 16 22:34:50 2026 GMT
Not After : Apr 23 22:34:50 2026 GMT
Subject: CN=69e1640a-7452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:20:95:aa:a2:8c:71:ad:f1:44:71:75:29:
e1:02:3e:a3:d9:d8:33:bd:7b:40:07:f7:a2:61:de:
ec:35:b5:7d:36:89:11:d4:44:76:75:23:d3:06:51:
ec:11:e7:1d:42:22:cf:9f:dd:87:15:19:4e:36:5d:
41:93:c1:ff:d8:75:2a:d6:1d:6b:cb:5e:f9:92:ed:
de:06:ec:38:25:7c:33:fb:4d:b2:1e:76:29:6e:ce:
eb:64:b7:d6:f2:08:7b:c0:a2:e6:26:93:23:91:57:
36:e4:2d:1c:14:f5:61:e7:ef:f4:20:12:9e:07:f0:
4c:4e:e6:2f:67:b5:e8:e2:16:8a:71:97:2d:e1:17:
48:bb:d1:39:4b:b8:52:2e:4e:62:e3:7f:19:41:38:
cc:39:14:e4:b2:5f:d8:d6:80:95:01:41:5b:a7:c8:
1d:b0:a6:a2:13:56:d1:72:dc:ab:2e:a8:f8:a8:d0:
16:7b:9b:79:7c:70:0f:56:38:05:21:2b:55:ef:23:
59:08:5d:4e:df:94:fb:5a:47:ec:43:cd:ee:78:b4:
5e:f3:34:e9:63:0e:c9:63:87:4a:50:ed:01:88:01:
85:4f:ed:1b:43:d1:0c:80:0c:0f:36:a5:bc:a8:54:
0f:2c:7e:7d:44:87:d6:62:49:83:60:b8:15:59:8b:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:D2:7E:38:25:23:6F:F2:CC:52:F2:19:F2:9E:CD:10:D1:3C:A4
X509v3 Authority Key Identifier:
keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:12:df:d0:d8:fc:d7:39:20:1e:4d:19:66:53:8c:92:f2:
2e:9d:c7:28:47:c1:ef:e7:8b:8b:bf:a1:98:4c:2d:07:38:22:
4b:31:dc:fc:f3:40:6a:d3:26:c5:b4:96:ba:8e:23:32:9c:71:
ac:76:0a:5c:29:74:6d:f3:5b:44:a6:72:b2:c0:7b:1b:a6:6e:
74:86:65:3c:40:78:92:c3:6d:07:18:5b:d9:06:2a:9b:4a:81:
ef:8a:73:86:0a:b2:02:8c:6c:f8:e7:84:74:e4:2f:ce:3f:f4:
9b:dd:5b:8c:b7:f4:16:b2:af:b6:ee:de:6f:f1:79:d5:25:05:
0a:5f:6c:ba:5c:e7:03:51:63:df:f0:1e:1e:66:f1:b7:cf:47:
3a:2f:e8:be:47:10:91:48:d1:d2:70:8d:ff:a2:05:03:61:d1:
b7:5f:b6:82:99:0d:66:1d:00:61:e0:b3:ac:07:72:14:8e:3b:
5c:10:5b:95:ad:1a:41:11:af:80:4a:c1:2e:76:3b:64:71:13:
4d:14:5e:1f:08:d2:fc:db:16:bb:36:5a:c9:aa:db:29:f6:fb:
ee:b5:c7:fe:94:1e:17:56:4a:62:13:1a:95:1d:c1:72:4d:fc:
f3:a6:54:d9:92:b1:51:81:3d:68:39:55:e8:ca:b1:dd:c5:72:
ad:6f:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:19 2026 by rpki-client