
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json)
Hash identifier: 9qNs/+ZZXf6YpqmaVKKFPHO6k4uHOvgqXHZ0gSwm4ug=
Subject key identifier: 8D:AA:43:4F:03:B9:0D:76:04:AD:9B:0B:C0:4D:5D:57:62:1A:9F:10
Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
Manifest number: 47
Signing time: Wed 15 Apr 2026 07:55:51 +0000
Manifest this update: Wed 15 Apr 2026 07:55:50 +0000
Manifest next update: Wed 22 Apr 2026 07:55:50 +0000
Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: 6+ctk8jRjGNf8qSG/XZcGdYOtohkRP5u6eENucnRYpo=)
2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Validity
Not Before: Apr 15 07:55:50 2026 GMT
Not After : Apr 22 07:55:50 2026 GMT
Subject: CN=69df4486-8986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:75:50:43:64:c3:c4:07:91:7b:d6:33:26:fd:
06:0d:ed:18:e8:ad:f9:bd:ac:4f:53:5c:ec:4f:11:
93:e7:cc:61:fa:fa:10:b6:79:59:2a:a8:57:bb:2c:
c9:91:66:a4:5e:b9:82:9e:eb:e1:c1:6a:a0:c9:d9:
55:aa:42:b2:05:d4:aa:28:0d:80:3b:8f:fc:92:74:
aa:c7:44:bb:14:9c:1f:9c:fd:cd:0f:d8:9b:1e:dd:
f8:6c:5d:9b:56:e3:fd:8a:b2:7d:4c:b2:89:29:4a:
d1:98:b4:3d:86:54:38:96:f7:ee:55:03:0a:ab:5d:
18:14:2f:a2:89:7d:e2:7e:84:65:09:ff:96:37:40:
14:52:9f:cc:df:7c:b8:bf:f6:3f:2d:31:50:41:b5:
a0:08:44:81:24:1f:14:ed:e3:37:54:9e:2d:54:8a:
a8:df:a7:a9:c5:8e:e8:18:d2:eb:c7:92:c7:06:18:
7b:40:58:34:c5:35:cc:76:85:98:62:19:87:62:76:
ab:75:31:87:00:c8:c8:af:a3:31:69:e0:96:d3:11:
7a:64:2a:ce:bd:67:2f:92:55:10:a2:8f:8b:ce:ca:
0f:45:59:d7:f9:3a:99:51:ae:12:ac:3b:b3:12:1b:
6b:eb:05:5b:c5:f2:84:de:8e:76:a9:f9:32:eb:d0:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:43:4F:03:B9:0D:76:04:AD:9B:0B:C0:4D:5D:57:62:1A:9F:10
X509v3 Authority Key Identifier:
keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2d:4b:e1:7e:f1:10:df:d5:5c:a6:6d:d5:a0:09:45:59:d8:
33:a7:48:d0:ab:3d:1f:85:e6:a3:3c:2f:18:2d:eb:1a:5c:cf:
f9:95:d6:f5:01:bc:93:08:5a:24:db:f8:0b:23:2e:04:a0:3d:
e8:3e:bd:22:ca:56:52:a8:2f:5e:56:eb:0f:86:00:da:d1:1b:
c0:e7:fe:be:1f:40:30:40:95:58:ba:4b:04:a8:ca:5d:7c:ed:
0d:00:a3:98:bd:68:a1:8d:07:55:4f:99:30:2f:b3:a7:40:77:
24:cb:3c:29:9d:67:9a:5d:bd:2f:f5:60:c1:a0:8d:a2:c0:55:
34:43:43:74:fd:0d:7c:45:63:19:a4:97:89:db:10:89:47:ed:
77:b7:5f:8d:69:e3:3a:f3:c6:0a:fd:ee:53:59:e1:cb:22:d3:
57:bd:00:9a:0a:e3:27:a7:a0:1c:e5:06:d7:6f:bb:ac:bf:66:
c5:20:a6:28:9f:ee:fb:92:36:d7:fc:08:f2:7a:89:47:7e:bd:
84:10:94:25:a8:e2:ab:df:64:91:3d:26:fd:02:d3:57:54:7d:
97:25:eb:02:eb:09:51:bf:16:bd:6a:39:5b:08:11:f8:2d:e0:
61:cb:9e:bc:13:d7:90:43:f1:3d:0c:53:0c:83:46:fd:30:bf:
9a:af:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:52 2026 by rpki-client