
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json)
Hash identifier: xjaQbe8UCcHMuLgO7arWD4GBuS2N+N9pkMEeMiYVn64=
Subject key identifier: D6:33:38:C0:08:B7:14:C2:8C:0A:C1:09:F6:38:F7:D8:AD:AF:27:0F
Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB
Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
Certificate serial: 0AAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
Manifest number: 0A96
Signing time: Wed 18 Feb 2026 19:08:55 +0000
Manifest this update: Wed 18 Feb 2026 19:08:55 +0000
Manifest next update: Wed 25 Feb 2026 19:08:55 +0000
Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: LzOtcam/GZ40XdIgibyDCT5IrhvmsxK+KtIZ0rSyQQw=)
2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: +OxVgsTFeHXtInD93OSVx4VoDwnGKpFnWPCaCB5ImQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl
rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
Validity
Not Before: Feb 18 19:08:55 2026 GMT
Not After : Feb 25 19:08:55 2026 GMT
Subject: CN=69960e47-716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:8e:ce:41:dc:cc:14:13:5e:9e:ec:2c:a2:
25:ea:21:62:d6:1d:55:2a:63:c2:d3:09:82:d1:2f:
70:80:18:cf:ca:cd:46:16:43:9e:d4:26:2b:a7:3d:
45:fa:5f:55:e2:3c:eb:19:c7:f9:2f:59:57:a0:65:
17:79:f4:53:64:ef:15:be:3a:c9:06:ef:93:5d:d3:
37:fe:7e:70:77:b7:3f:2e:e9:08:77:95:c7:92:04:
b5:da:03:9c:ae:78:a0:0d:cc:e5:70:67:be:c3:3c:
75:0e:0c:14:46:5c:f1:7c:aa:6c:f6:0c:fa:00:e4:
7c:c6:35:b0:26:be:42:57:0d:43:d0:74:5a:56:90:
07:00:28:cc:c8:0b:28:96:03:91:b1:2a:e0:61:1c:
a0:b2:19:6b:67:01:78:8d:9b:4e:14:4d:ad:e2:79:
cb:66:89:ff:3e:88:67:7e:8a:08:01:95:3d:15:ee:
cd:51:cf:a1:2a:73:03:9a:88:c6:3c:de:32:c8:b4:
07:13:44:3e:07:f6:48:a7:28:27:9d:8f:f6:ff:c9:
0d:43:50:07:38:07:67:32:aa:fc:ac:2c:d8:41:ee:
0e:ad:89:82:35:8e:84:92:85:d7:08:78:cf:4e:d5:
f5:57:ca:c9:5b:75:e6:b1:80:9e:5d:38:21:c9:63:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:33:38:C0:08:B7:14:C2:8C:0A:C1:09:F6:38:F7:D8:AD:AF:27:0F
X509v3 Authority Key Identifier:
keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:43:c0:4a:76:83:75:25:be:a6:6e:b3:e6:7d:d2:7e:a9:8b:
bf:e5:1f:7e:ce:aa:bf:7a:75:59:74:e5:b5:4b:74:9e:47:fe:
41:40:ad:c4:59:46:98:00:6e:48:08:80:36:1b:70:56:da:34:
90:3b:5f:6e:4a:b7:5e:b9:77:98:34:27:55:e1:e2:87:41:70:
c8:0b:1a:bd:18:85:44:50:d5:d0:0a:7d:37:52:18:94:ae:7d:
ea:c9:bd:63:40:91:cb:9f:b5:f0:94:a1:64:d3:ca:0c:46:de:
01:53:b3:33:bc:48:31:f9:0a:a7:ba:75:43:74:f9:fc:6a:88:
82:46:2f:52:75:0a:9b:f9:d8:d2:e1:37:06:aa:e8:be:cb:36:
9c:a3:52:86:59:58:60:bd:80:ce:e6:e8:3f:29:bd:f9:55:a6:
f4:fe:ae:c6:da:3a:8a:d7:44:13:39:5e:1e:83:ee:9e:76:f4:
bb:79:b8:43:26:55:bc:1b:f4:13:07:c3:19:9a:3c:df:61:b3:
32:5a:fa:bd:e6:2f:d6:46:cf:30:9f:9c:7e:69:b0:62:98:35:
a3:42:7a:d1:3a:80:1b:20:6a:56:56:e9:85:c6:e4:16:f6:47:
42:29:58:7d:46:19:c6:ee:32:c6:d6:7d:25:a8:68:56:9f:be:
70:e2:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:47:21 2026 by rpki-client