
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json)
Hash identifier: aXbh/ZKeifLsFYcUcEDr6I6i/oslJQUfI3KkbV2FIUc=
Subject key identifier: C2:EF:44:0A:26:CB:DF:9B:5A:55:D6:47:1D:EB:43:D7:CF:16:C7:25
Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
Certificate serial: 0F74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
Manifest number: 0F6A
Signing time: Fri 12 Jun 2026 17:30:25 +0000
Manifest this update: Fri 12 Jun 2026 17:30:25 +0000
Manifest next update: Fri 19 Jun 2026 17:30:25 +0000
Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: tUsR95RZR45CT/UzD1ilHNyNkXRfyw9P/rNoYxDyGn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl
rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3956 (0xf74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
Validity
Not Before: Jun 12 17:30:25 2026 GMT
Not After : Jun 19 17:30:25 2026 GMT
Subject: CN=6a2c4231-25e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:98:8d:68:b0:38:dc:b6:84:b4:10:7b:a1:69:
2c:b5:59:4f:b3:25:6e:18:7c:fb:65:d5:73:5c:ce:
b0:7c:6f:3b:0a:2d:75:e8:7a:31:eb:3e:56:f9:ed:
cb:d2:c6:fc:3b:73:3a:70:2c:b2:20:85:9c:20:83:
9d:ff:98:f1:b1:48:a6:9f:a7:ca:a1:54:ea:68:25:
54:54:3c:f2:1c:48:98:82:97:ce:25:14:ae:11:33:
d7:64:1b:77:9c:0b:04:b9:e9:0d:40:41:42:4d:e5:
c7:26:ab:3a:a8:18:d9:11:95:9c:74:37:d8:1e:8d:
7e:c5:7c:df:7c:a5:33:2b:2a:d7:55:5c:a8:de:89:
62:f7:87:b7:f0:7d:40:64:9b:dc:a8:68:99:ad:89:
46:17:ff:f1:35:c1:01:9f:8b:d9:79:c2:31:83:c7:
74:db:dc:b6:39:90:c3:17:0c:f9:4b:18:4f:4d:81:
5c:96:49:a0:25:23:d2:8b:9d:c6:49:5d:d9:ac:d0:
82:b1:0c:73:65:3e:b3:3f:a5:4a:18:90:c2:fd:1c:
76:60:61:47:6e:4d:1a:65:05:2d:84:2c:04:9d:ad:
d2:b8:69:a2:29:e7:da:ca:00:62:65:7d:95:41:30:
d0:89:97:97:ca:6d:fd:ee:6b:50:4f:ab:f7:5e:8b:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:44:0A:26:CB:DF:9B:5A:55:D6:47:1D:EB:43:D7:CF:16:C7:25
X509v3 Authority Key Identifier:
keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:17:35:35:41:50:c5:ee:cb:a1:53:62:08:c5:23:69:67:ea:
b0:78:b2:89:6c:d0:fc:1f:73:09:fb:b0:3f:ec:30:07:a0:5e:
c5:e7:b8:54:63:bc:a8:74:c7:76:70:3e:e2:1f:f9:c1:79:21:
66:37:2c:41:63:96:d7:a9:b7:bc:34:46:ef:72:a5:31:4a:dd:
d6:ee:4d:19:98:7f:3b:14:b3:6e:4d:46:80:b9:83:cd:f3:7d:
73:f1:48:0c:8b:33:9c:0d:45:2b:bb:ae:6d:b2:27:b0:5c:11:
a4:e8:54:25:cb:ad:8b:69:44:53:a2:92:b2:6a:ff:f2:33:8a:
d0:00:59:55:98:74:e8:e5:37:08:e3:fe:3e:15:ba:72:f0:37:
78:63:a2:ce:01:33:5d:60:60:42:0a:f8:21:4d:e4:1a:62:da:
5f:15:33:50:1b:90:25:29:46:05:d6:b8:b6:b4:6f:1f:50:78:
bb:36:41:c3:e2:e6:18:ad:00:21:f4:c5:c5:12:e3:e2:39:63:
ce:e8:1b:4e:50:9d:e7:3a:76:fa:23:67:ad:a6:b6:8c:f9:03:
b7:6e:cc:28:05:15:e9:6d:7c:49:65:02:23:f0:0e:b8:3e:bf:
2d:c0:d0:08:09:12:55:c9:83:cd:25:8c:40:b3:4f:11:28:bb:
1d:39:7f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:54:10 2026 by rpki-client