
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json)
Hash identifier: x8rql/HohCIveLg6HaCRchMhKofBWKrJytzNcEQ0bTs=
Subject key identifier: C9:A2:0F:F1:33:47:35:39:50:AB:E8:9F:95:ED:5B:67:5E:BA:A3:56
Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Certificate serial: 0A45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
Manifest number: 4828
Signing time: Sat 28 Feb 2026 15:48:04 +0000
Manifest this update: Sat 28 Feb 2026 15:48:04 +0000
Manifest next update: Sat 07 Mar 2026 15:48:04 +0000
Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: T08WgyGc7qOLe30utb+yFELEtVL8HrcfOq63ma08wSY=)
2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: 1Xe1cmvJhp+1uOgf9drz3lA2Kuch55N2lYYnYgzX/Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629 (0xa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Validity
Not Before: Feb 28 15:48:04 2026 GMT
Not After : Mar 7 15:48:04 2026 GMT
Subject: CN=69a30e34-d87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:90:0e:4e:cf:a7:66:98:1f:47:2d:20:a7:
9e:11:3a:2b:97:89:c2:6a:a4:fc:a7:85:02:5f:57:
3e:33:78:78:08:86:29:02:9c:cb:9a:11:e5:31:8d:
30:75:f3:6f:90:74:ec:9f:29:80:89:93:96:82:26:
0e:12:e7:e6:28:8f:e1:4c:51:39:ac:08:fd:df:17:
29:c0:9d:d2:29:57:ca:ed:74:7d:bd:2f:5d:b8:2a:
dc:02:d4:13:39:2f:82:63:e1:90:32:d4:17:73:d9:
ad:00:9b:09:40:f6:dc:85:6b:f0:b6:3b:fc:7f:f2:
75:f1:1d:95:71:fa:b4:c2:e4:9f:aa:e7:b6:c5:85:
04:df:c2:f3:96:f4:e9:c6:65:1f:e6:e1:f3:ae:d6:
bc:55:3b:c0:4c:8d:94:cd:81:8a:9a:13:83:c4:b1:
e2:af:73:82:eb:e9:36:28:29:ab:13:3c:33:79:90:
25:dd:c7:1d:88:42:75:e7:30:21:79:f2:50:39:ed:
21:ca:2a:c5:4d:a8:81:d3:f2:06:03:01:06:61:dc:
7b:26:bb:00:70:3a:78:70:d1:d5:51:31:ed:82:f1:
88:4a:24:ea:40:a5:06:9e:38:1d:e5:3b:98:da:4b:
28:97:7b:cd:1b:99:60:eb:bb:02:6c:28:05:ca:af:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A2:0F:F1:33:47:35:39:50:AB:E8:9F:95:ED:5B:67:5E:BA:A3:56
X509v3 Authority Key Identifier:
keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bd:bf:75:7e:1d:1a:b5:a4:cb:64:ae:c0:60:a5:e8:00:01:
92:dc:50:da:86:01:2a:90:58:a5:b0:59:c6:2d:df:f0:77:2e:
98:92:5e:fe:1c:29:2f:cb:27:69:99:6b:62:f8:bd:34:81:46:
bf:49:b0:52:1b:6c:bd:b8:a9:a9:cc:b5:f0:4d:bd:54:d6:17:
d6:4a:76:c8:b6:87:93:41:67:03:5c:c2:e9:f6:8b:78:8c:b1:
c7:62:a4:98:4d:c7:9b:69:59:72:c1:6f:1b:a8:73:6a:22:23:
ab:6d:3d:32:26:36:69:77:cb:d4:7d:98:6b:06:f2:78:09:e5:
bc:ab:1c:b9:d4:4e:e6:75:c5:8d:88:4f:d6:76:fd:34:b3:78:
6e:b8:34:08:ea:a2:43:25:17:f7:1f:84:33:68:8b:ac:26:f1:
2d:90:b7:e3:40:cc:b2:2f:c9:a9:12:e8:ca:56:0e:53:85:44:
f1:83:0e:24:c0:33:7b:26:e2:08:11:7a:4e:2c:71:ce:8a:05:
70:0b:7c:17:74:99:a3:0b:2d:74:54:29:6b:29:fd:f8:a3:1d:
b2:17:27:d1:c5:d1:d8:66:a2:28:ad:97:aa:67:a3:35:14:1d:
85:97:17:f1:ca:0e:65:d3:5c:fa:60:40:28:ff:a9:af:15:ac:
29:7d:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:23 2026 by rpki-client