
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft
File: OHvc-OlHoaBOL0OH-99wZUpE0b0.mft (raw, json)
Hash identifier: vEQUqZyV1Nb9iJewJM1r6669WTA9qe34JJSXZyZ1Eps=
Subject key identifier: FE:29:8C:CB:08:DB:A2:B0:B1:FE:1E:50:2F:BA:F6:5D:36:67:8B:47
Authority key identifier: 38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD
Certificate issuer: /CN=A913ACF4/serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD
Certificate serial: 09DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft
Manifest number: 09D4
Signing time: Wed 18 Feb 2026 19:27:57 +0000
Manifest this update: Wed 18 Feb 2026 19:27:56 +0000
Manifest next update: Wed 25 Feb 2026 19:27:56 +0000
Files and hashes: 1: OHvc-OlHoaBOL0OH-99wZUpE0b0.crl (hash: Wk2IWUFhnTmMCcPuW1BLbbv1LKorBFQB73ywLvw3ks4=)
2: 25E6E72899FE11EAB3E30513C4F9AE02.roa (hash: 4BWVgnvRS1hSka6Qhg4Wf4N7URq8ah7iwCcvkt/Guc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl
rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ACF4, serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD
Validity
Not Before: Feb 18 19:27:56 2026 GMT
Not After : Feb 25 19:27:56 2026 GMT
Subject: CN=699612bc-9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:93:91:82:81:a8:e2:1a:46:4e:d7:df:00:
33:94:2f:2f:1b:88:28:9f:3a:6f:26:c7:22:86:51:
5b:5a:be:81:0f:8e:eb:cf:5d:48:aa:4d:e0:b1:23:
2e:30:45:9b:1f:16:27:ab:2d:3d:ee:13:49:4d:ac:
44:64:04:d2:82:26:32:98:6d:4f:f1:f1:95:38:81:
68:a1:1a:bc:b0:9c:54:c2:85:67:c8:7f:7f:16:4b:
95:ea:5c:5d:f6:b2:1c:f7:2e:bd:80:20:46:3b:63:
65:67:ae:6c:ee:18:8b:7e:c8:27:77:d1:48:3e:4f:
a9:2b:3b:3f:b4:3f:d2:a1:a2:8b:ac:9a:22:30:22:
fe:9b:46:0f:60:77:ac:36:52:df:a0:8c:eb:1d:cd:
29:f0:ee:ea:a0:45:d4:4d:30:1e:ee:a8:9b:22:17:
94:de:8a:2c:3d:93:52:0e:87:11:87:15:5b:f8:e8:
d7:35:18:dc:73:4a:87:cd:3a:ef:15:4c:0e:32:bf:
6c:3c:72:61:6f:fb:65:bd:e0:a0:7e:0b:27:cc:83:
89:da:09:09:92:1b:98:ea:eb:dc:80:3a:c8:e0:b4:
51:ce:49:cb:0f:f8:87:1a:ba:cf:ed:45:1b:68:24:
51:30:fd:59:28:a2:fd:50:2b:ea:c1:9d:2f:c9:2d:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:29:8C:CB:08:DB:A2:B0:B1:FE:1E:50:2F:BA:F6:5D:36:67:8B:47
X509v3 Authority Key Identifier:
keyid:38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:19:3e:00:ff:0f:b4:5b:cc:b1:c7:1a:58:6f:de:60:d5:d8:
99:a2:64:5b:d1:fe:aa:c7:ff:af:37:6b:14:47:63:d7:e1:c5:
5c:80:67:4a:3d:8e:36:bc:94:24:de:c0:35:73:ce:66:7f:56:
0d:54:f0:58:0c:c7:ea:a3:c5:4a:af:bb:84:ae:d9:f4:2e:f8:
43:15:72:85:ca:11:d1:60:37:b3:72:d0:87:01:2c:c6:d5:4f:
11:5d:ab:64:f3:53:20:ea:af:c8:d7:27:fa:4b:04:a3:c1:4e:
fc:89:87:e5:8f:ba:48:fc:95:22:5e:39:d9:fc:f8:3e:3b:cf:
45:81:1f:aa:6f:c4:52:3f:d4:41:3e:31:30:0f:c2:37:e6:ea:
e6:57:07:1b:a5:4d:e6:8c:55:91:03:7d:16:76:98:05:d0:ba:
f6:86:c6:62:5b:cf:31:46:f3:15:39:e2:e9:da:69:96:68:b6:
6e:30:0d:aa:8b:fd:5f:c3:a9:82:fd:32:53:f2:67:6f:30:19:
63:60:e5:52:6b:0e:6e:df:56:ff:ed:bd:34:0e:94:f5:b4:47:
22:b7:e8:ea:f3:69:5b:41:53:b9:ea:8e:36:59:04:75:f6:fe:
fe:10:c6:cf:e9:34:5d:d7:c9:dc:35:45:94:8d:5e:e8:a5:5e:
bb:24:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:25 2026 by rpki-client