
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json)
Hash identifier: fA2iHBnlzIaHQ/1+F04G3cCZlEjMjqUk4GhgstuZFNY=
Subject key identifier: 12:33:07:72:0D:29:66:EE:9A:10:52:72:44:6A:68:C0:6E:7E:E3:78
Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
Manifest number: 7A
Signing time: Mon 27 Jul 2026 09:59:03 +0000
Manifest this update: Mon 27 Jul 2026 09:59:03 +0000
Manifest next update: Mon 03 Aug 2026 09:59:03 +0000
Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: ox/bV/sLtR5O1CLokogQXJYAahv8QqfJk/rZoqCf+1k=)
2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Validity
Not Before: Jul 27 09:59:03 2026 GMT
Not After : Aug 3 09:59:03 2026 GMT
Subject: CN=6a672be7-18fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:db:82:44:e7:08:bb:a7:a6:b1:3f:54:a5:
77:9b:79:d2:66:a0:5d:30:0d:06:be:fd:61:d6:22:
98:7b:b1:21:37:e7:20:29:7b:c3:4c:46:bb:00:de:
9b:96:52:1b:52:2f:93:e1:b6:cf:a3:4b:99:0e:31:
15:47:fc:f8:19:06:cd:1b:16:86:70:47:94:90:2e:
58:71:c3:4c:90:38:40:b8:7e:fa:32:b6:46:ac:a0:
89:66:fd:9b:92:88:23:56:d0:06:76:ef:69:42:ae:
fe:d5:4b:84:10:a8:eb:40:83:56:4b:ec:ba:87:3f:
4c:34:a1:07:e2:79:dd:3e:61:f9:d8:03:b5:75:0d:
ad:19:7a:c3:12:04:59:a9:58:9c:4b:65:42:ae:6d:
d6:8d:d3:de:77:de:7e:c3:a5:e7:21:c7:0a:47:5d:
d0:19:7b:9b:2c:26:f4:90:44:7a:e3:88:87:67:65:
25:9c:c6:6d:e0:b8:b9:67:d2:1b:f3:99:42:16:84:
ad:4c:eb:81:d7:a6:0e:52:3a:f7:d6:91:6d:49:f3:
7f:ff:c3:f1:69:53:86:f8:1e:86:b4:69:e1:0f:16:
b3:0b:41:5c:1c:03:c5:6f:9c:ec:e4:b4:53:e4:9d:
43:1c:9c:f4:d8:fa:e6:be:a1:51:e4:fb:14:b6:9e:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:07:72:0D:29:66:EE:9A:10:52:72:44:6A:68:C0:6E:7E:E3:78
X509v3 Authority Key Identifier:
keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e8:d3:81:41:90:cb:ae:8f:9f:f6:dc:50:21:cf:f4:09:f1:
95:45:b3:20:8b:9e:bc:48:28:22:9b:dd:06:78:20:04:c8:91:
54:0d:41:a0:4b:67:3b:82:e8:2b:52:b8:25:d0:79:18:19:ee:
85:74:42:a3:31:e0:35:1a:4d:fc:c1:85:b1:5f:5f:8f:13:69:
cb:cd:bd:ae:da:f0:ef:bc:85:7c:6c:d1:55:96:78:c7:67:4f:
62:99:e6:28:12:e7:93:93:de:48:1e:e1:c2:9e:6c:a7:57:4b:
2e:a0:c6:ce:82:de:85:90:e7:cb:bb:63:80:a1:1d:d4:fc:0a:
34:b5:90:45:8b:ea:d6:68:61:4b:be:5f:9c:02:cb:ec:bb:ed:
d5:62:8a:48:09:8f:57:86:74:de:0c:18:b2:d3:da:19:7b:04:
78:fe:e2:c7:cb:c0:18:3c:89:31:5f:4a:91:83:ec:fd:40:7c:
a9:08:b9:12:52:1f:e5:4d:f4:68:cb:f0:e8:88:14:de:e4:25:
4d:46:ed:53:a4:1a:2d:78:01:3b:72:d9:7e:65:98:85:6e:38:
92:dc:50:12:3e:02:1a:36:e0:f2:d3:df:f2:bb:a0:a9:6f:91:
aa:86:09:71:f2:3a:6b:81:52:20:34:93:76:d8:6b:48:16:45:
35:ab:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:41 2026 by rpki-client