
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json)
Hash identifier: tMv55ADOz8dwZb2GK9GyjjQK+kj/SoMIKn+IvKPUV9Y=
Subject key identifier: 83:0D:42:D8:CD:C8:C3:BC:2C:E9:EF:C8:68:12:31:6C:24:E1:19:DA
Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
Manifest number: 0108
Signing time: Sat 13 Jun 2026 06:13:57 +0000
Manifest this update: Sat 13 Jun 2026 06:13:57 +0000
Manifest next update: Sat 20 Jun 2026 06:13:57 +0000
Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: oeGqzkc1tJy34CiBGeZ3n3x30iXrLD0AiDz6LQy0nyU=)
2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: v41aBlF3leOW8tter1KV8agjab7xR5AdoEi5mvmK3SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Validity
Not Before: Jun 13 06:13:57 2026 GMT
Not After : Jun 20 06:13:57 2026 GMT
Subject: CN=6a2cf525-fb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:c1:99:a6:76:3b:18:24:98:35:1d:6f:c1:
d3:29:a4:33:0b:f8:05:1b:26:7d:83:21:ed:52:41:
0c:57:41:d9:e9:5f:08:88:40:dc:83:75:93:61:c1:
6a:e3:29:51:ac:04:43:a5:9a:63:bf:6a:17:e7:2d:
05:2a:78:42:aa:16:63:98:d7:63:9f:59:17:42:e7:
7b:03:c9:34:44:1a:28:9d:96:15:77:53:ea:6e:63:
30:54:52:b6:ba:ac:16:92:e9:92:5c:e0:de:4b:d2:
96:08:fb:84:f7:9c:62:49:f9:d3:60:e1:54:0d:d2:
dd:4c:2b:37:55:64:ba:df:e5:50:18:48:df:62:dc:
5d:c0:41:b8:ab:eb:bb:37:da:24:8a:ab:9e:d9:6c:
b1:98:db:57:39:ab:55:62:ef:b0:d0:1d:e7:a6:ee:
4a:2e:e7:ae:5e:1e:89:be:e5:3c:b6:ea:ba:e5:6b:
d9:3c:b1:cf:84:e7:82:8d:d6:93:55:43:6f:eb:d7:
b9:1b:0b:18:e0:82:b7:00:a4:f0:32:25:7f:b0:2c:
2a:f6:86:3f:f5:d1:03:25:eb:cc:01:1e:b5:ca:14:
f1:fd:b9:bf:06:a3:05:e5:86:03:80:35:ea:3c:0e:
e1:b8:4e:7a:df:c7:07:c1:ef:8f:d0:9c:e9:0f:b5:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0D:42:D8:CD:C8:C3:BC:2C:E9:EF:C8:68:12:31:6C:24:E1:19:DA
X509v3 Authority Key Identifier:
keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e9:94:1e:7a:87:bf:08:39:fd:05:eb:ae:58:1b:ae:dd:ca:
a1:50:e5:cf:d6:51:c0:d6:3f:1c:a7:dd:36:d5:9c:ff:dd:cd:
f2:3c:11:dc:16:07:2b:26:2d:a0:d3:a7:d1:51:1f:26:1f:69:
3c:46:be:ac:af:ac:2d:d6:51:0e:23:e9:fe:4c:8e:c8:35:d0:
8b:5c:03:46:60:1e:77:d0:87:66:12:66:d2:ed:85:36:a7:39:
03:ca:95:0d:91:dc:11:6d:1d:00:77:d2:24:15:91:24:93:84:
33:f2:56:dd:4a:14:1b:da:7b:92:6f:89:ec:32:ec:75:10:15:
88:e8:72:1f:75:e5:94:34:3e:ed:ae:fc:65:32:6a:17:21:9b:
c9:67:1c:45:25:65:a4:37:a7:ab:10:da:ef:f6:3d:eb:f1:de:
cc:cf:f9:1c:a4:41:b3:80:3b:f0:d1:7c:f5:88:42:4f:93:7a:
41:5d:b9:af:79:ef:82:88:87:2f:56:f0:c5:c4:96:e9:c9:c2:
e0:39:aa:21:a5:4b:16:4b:79:5c:06:81:8f:c3:bb:36:74:20:
11:bf:cf:dc:fa:e7:f1:4d:7d:4d:91:4d:94:21:47:18:92:ea:
ad:33:4a:9d:c1:f2:0d:81:68:c1:36:ae:c9:5b:cb:ac:17:a6:
a8:d8:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:33 2026 by rpki-client