
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json)
Hash identifier: J3qI3K2E8TIY44QDozxzqRJrG/6x6w7G0ZTsSoEPxnk=
Subject key identifier: C4:0F:7F:51:E5:AE:80:D9:7E:46:EB:8F:F3:9D:A7:E7:DA:61:9B:CD
Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
Manifest number: EC
Signing time: Fri 17 Apr 2026 06:10:35 +0000
Manifest this update: Fri 17 Apr 2026 06:10:34 +0000
Manifest next update: Fri 24 Apr 2026 06:10:34 +0000
Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: tHmGlMidVR/lNI21q1aFEfXidfJroc5i8edkog3jB+U=)
2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: v41aBlF3leOW8tter1KV8agjab7xR5AdoEi5mvmK3SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Validity
Not Before: Apr 17 06:10:34 2026 GMT
Not After : Apr 24 06:10:34 2026 GMT
Subject: CN=69e1cedb-e9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:c9:93:4e:18:54:a1:d4:52:8a:39:9c:28:
b8:de:35:31:d2:c4:ab:0d:97:46:d6:32:ae:46:36:
96:f6:30:8a:81:0e:6e:63:d4:f3:92:f5:ba:69:02:
a1:ff:12:aa:77:3e:82:f7:80:84:fc:87:df:13:c9:
9c:5e:41:e5:83:9d:d7:4d:46:ae:f7:7c:fa:29:24:
bf:5b:3c:c7:d1:99:36:15:dd:3f:1d:92:3f:7a:96:
a5:2b:43:9e:0f:41:1b:5e:72:76:a2:b7:b5:a1:4c:
6f:70:3e:d4:24:83:fa:90:24:d7:bc:93:04:ff:6b:
2e:9a:34:a8:4c:3e:95:1f:86:92:2b:56:d8:22:d6:
2a:1d:5f:31:b0:b4:ca:82:6e:64:14:c4:90:9a:98:
10:84:a6:e1:cc:99:ae:e1:1d:ce:17:38:95:21:3d:
2b:2f:78:16:54:d2:20:15:a3:c4:4c:82:b4:4d:46:
75:8c:ff:f0:e7:ed:7e:5c:ed:4a:4d:f8:ac:9d:b7:
93:3e:84:49:ef:3f:2d:c2:ba:b1:df:85:4d:37:5a:
df:30:45:d7:16:b5:a2:5c:92:c6:d2:9f:ac:c6:bf:
e6:25:d3:03:00:08:29:62:47:6c:2e:3d:bd:e7:5d:
d7:2b:ad:f9:be:d4:cb:a2:c0:e9:19:67:92:f2:c7:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:7F:51:E5:AE:80:D9:7E:46:EB:8F:F3:9D:A7:E7:DA:61:9B:CD
X509v3 Authority Key Identifier:
keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e0:32:d4:a0:1d:af:52:c5:cd:71:59:7a:80:58:cf:2d:e1:
39:b7:2b:68:e4:43:b2:ad:d3:9f:69:a7:13:7c:09:b0:db:2b:
cc:d5:c7:2a:ff:e4:16:d9:de:c7:b4:60:94:c6:e2:bf:99:fc:
64:1d:b1:ff:4c:1b:75:f2:4a:07:78:62:f1:f1:2d:47:23:23:
9a:52:60:c1:00:f2:92:6c:e8:84:68:1d:ce:8d:2c:02:31:4a:
28:60:2c:fa:7d:b9:5c:78:07:58:95:16:d7:16:11:6e:9e:2a:
17:24:84:c0:53:e3:1f:cb:74:d0:65:88:8c:6f:11:31:ae:3e:
a4:65:58:8a:5a:ec:b2:32:0e:c0:cf:98:f8:e9:ac:ff:3a:e5:
40:e0:34:df:b6:d9:2d:90:5b:7f:26:fc:6d:e9:5c:c6:b2:3f:
f7:47:eb:59:3d:bb:12:f0:95:40:b3:ca:c5:bb:4f:38:f4:fd:
25:6b:2a:d3:1a:90:1d:3e:bb:d0:5d:16:94:e3:71:d2:57:68:
89:4f:23:ae:60:4c:dd:b9:ea:05:77:0d:90:98:a8:69:ea:8f:
91:6f:c5:70:99:dd:a7:40:a1:7b:19:62:1b:de:9f:94:e9:92:
b3:af:e9:8e:c5:07:c7:89:97:bc:21:de:4c:f7:d5:fd:87:0b:
5c:09:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:29 2026 by rpki-client