
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json)
Hash identifier: S6GRNuQcvjA+IGESKnyL6y2oJs7hNpwaT4zJyd36ujU=
Subject key identifier: A6:7C:14:13:9E:36:D9:10:5E:D4:54:88:36:5F:78:80:F5:3C:24:90
Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Certificate serial: 0A81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
Manifest number: 48D1
Signing time: Tue 16 Jun 2026 15:46:32 +0000
Manifest this update: Tue 16 Jun 2026 15:46:32 +0000
Manifest next update: Tue 23 Jun 2026 15:46:32 +0000
Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: bGcUVJP5BVXMRuOjODDVbqG6zOQmV9Qz/aXiJxqQN+M=)
2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: FehOg1jQMA1kFJnWyr7fIuCvYAwffMy7bJWnLWfMfbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2689 (0xa81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Validity
Not Before: Jun 16 15:46:32 2026 GMT
Not After : Jun 23 15:46:32 2026 GMT
Subject: CN=6a316fd8-b740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:24:d4:43:d9:1e:8a:17:c0:f3:81:57:8a:
3c:87:05:ac:83:60:e8:0d:86:1a:ce:2f:32:2c:e1:
ee:b0:a2:9b:8f:51:31:3d:20:c6:d8:09:a2:79:3f:
3e:cc:62:e9:8c:b7:21:72:7d:43:5b:f0:e0:32:69:
f9:3f:ac:ff:5b:c2:cd:16:6c:2d:db:1c:3d:bc:5d:
a8:f0:df:df:41:cf:2d:a9:61:7b:9e:5f:ae:b8:db:
24:41:da:4a:f0:76:1e:54:ac:0f:a2:7e:80:c3:0e:
94:03:53:ea:b5:b9:36:88:3e:4d:18:08:10:92:67:
a2:54:63:ad:09:f5:f1:a4:9b:97:74:0e:98:a9:d1:
e4:a6:31:8b:8a:33:31:5c:9c:90:9d:66:4c:eb:6e:
9a:93:6d:b7:29:08:e2:22:ab:92:1e:53:cc:9a:27:
42:8c:0a:49:dc:1a:37:64:3c:d6:9b:67:0d:de:5c:
2e:59:d7:e7:13:93:53:b0:bb:50:01:30:49:c7:e2:
72:1f:ce:b3:9b:58:3b:e0:bd:47:57:23:63:bf:01:
0a:e2:eb:06:63:45:4d:1f:e5:36:31:0e:1a:2b:5b:
07:e9:e5:dc:d0:5c:ac:56:35:99:4e:96:aa:2c:ec:
13:9e:c1:ff:de:50:e6:c2:f4:fa:50:5b:6f:94:5f:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:14:13:9E:36:D9:10:5E:D4:54:88:36:5F:78:80:F5:3C:24:90
X509v3 Authority Key Identifier:
keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:78:60:51:14:a0:c1:26:48:16:ef:9b:bf:cb:22:5b:a1:7e:
a9:45:45:e6:19:60:71:bd:8e:29:6a:b6:71:7f:06:f6:3b:0a:
14:20:b6:23:e8:6e:6e:73:53:02:84:e1:65:63:e9:6f:a5:98:
3e:8c:91:25:e3:a5:89:b0:49:bf:30:b4:aa:40:11:a9:71:b5:
81:c3:5f:c7:30:30:54:f8:83:d7:5c:1e:ba:39:dd:b6:71:37:
82:ac:40:b1:f4:88:79:db:48:b2:ee:5f:85:e9:57:ef:d3:47:
9d:5c:94:6a:e2:3b:93:43:85:10:b8:81:ed:4c:43:00:76:ac:
31:b6:d0:ed:91:f8:2a:a8:92:cf:e2:a0:16:5b:ae:36:18:a6:
68:5e:81:d9:4a:70:31:44:90:bc:01:af:3d:38:3e:1a:0d:b0:
b9:f3:fb:83:93:ab:fe:00:ce:78:be:37:81:a2:e5:90:e9:46:
0b:8b:c1:49:ae:b8:32:a0:c8:45:55:b2:09:b9:97:1f:36:81:
c0:e4:8b:96:b0:07:12:f6:7d:71:be:60:5c:92:cf:94:cc:fa:
5f:0d:de:9f:4c:4b:6e:e2:9d:a4:66:e5:4b:91:03:f5:78:a1:
50:aa:0a:af:f7:44:01:62:57:8b:ed:1e:c2:0f:a4:a3:24:56:
14:ba:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:38 2026 by rpki-client