
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier: /OHkgbCnhjbqt6P/Us9v9bUvf2PMPTNU4BC6XaEAfQQ=
Subject key identifier: 8B:26:19:CB:58:53:B2:BC:18:45:87:49:DB:85:A4:29:00:EC:96:E4
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number: 68
Signing time: Fri 05 Jun 2026 08:22:31 +0000
Manifest this update: Fri 05 Jun 2026 08:22:31 +0000
Manifest next update: Fri 12 Jun 2026 08:22:31 +0000
Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: JXwVShsOi7yo8HvIMm4ua9r9Va7tCBI5Y71ngGJWTs8=)
2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Validity
Not Before: Jun 5 08:22:31 2026 GMT
Not After : Jun 12 08:22:31 2026 GMT
Subject: CN=6a228747-5b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:29:6e:ec:35:c9:21:d2:8f:b2:3f:44:05:
7f:78:d3:e7:8a:db:dc:3c:c6:bb:c7:3c:15:73:61:
11:9e:63:86:c5:43:66:ca:68:0d:77:fb:6f:2b:ae:
7f:71:48:91:34:21:0a:ea:11:7e:be:5a:5b:97:a6:
b5:bf:db:df:42:18:7b:dc:57:6b:39:b2:87:20:e1:
6e:09:d8:74:33:90:f0:1d:c2:d2:62:27:c6:23:90:
d0:c6:f2:8c:bc:ac:d8:fd:5f:07:2b:cd:00:c8:18:
2f:b1:15:79:5e:fb:7d:3b:96:95:10:09:ea:b2:35:
0c:02:55:96:c2:50:82:2f:f7:49:9f:29:76:28:e3:
b0:38:71:32:b5:c0:c8:9a:a3:e2:3b:20:21:9b:06:
ed:c3:66:20:85:ba:fe:e4:1f:fe:32:63:8b:f5:23:
40:52:a1:94:7f:84:e4:e9:ff:a7:a3:f7:10:ef:1b:
ca:ec:45:c0:40:c7:6e:96:f9:48:68:60:a6:d5:61:
61:20:4e:f5:3b:4a:37:bf:04:bd:06:12:9a:eb:ed:
8e:15:c4:aa:dd:85:1b:c8:d4:99:4f:f4:1c:cb:4b:
4a:3d:66:09:e7:67:28:fb:03:54:7f:ff:9f:b7:e6:
52:be:75:9f:ab:44:5b:dc:0b:72:c8:21:b3:90:c1:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:26:19:CB:58:53:B2:BC:18:45:87:49:DB:85:A4:29:00:EC:96:E4
X509v3 Authority Key Identifier:
keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:49:01:cf:48:7e:12:f4:f4:30:05:a0:0c:3a:02:b9:42:b1:
aa:da:b3:4e:3f:2d:09:48:5a:b3:ee:dd:83:5c:7a:80:d6:b6:
5f:fa:54:a0:13:db:a0:13:e7:a5:9e:85:84:b5:60:3f:66:8b:
0b:ef:12:34:30:ec:04:da:73:fe:3b:6d:5f:bd:09:25:bb:b1:
75:60:ed:69:7f:3c:f4:80:29:07:ab:44:87:f9:ee:9b:05:01:
7a:7a:82:99:2f:6f:c9:a0:94:e2:f2:e9:a0:58:69:96:94:fa:
eb:9e:e9:6d:e2:d8:0e:55:66:16:25:8a:20:42:40:dd:aa:8a:
29:ab:fa:43:d7:99:2e:0f:ef:94:b2:8e:dc:4b:5f:d9:19:15:
e9:17:eb:bd:0e:6d:6f:6b:5c:f2:65:ed:39:3f:da:15:99:ab:
4c:64:7b:95:18:1d:11:de:f9:75:22:bb:d4:74:5c:84:98:aa:
f7:3f:4d:62:9f:a5:b8:89:34:cc:3b:48:8d:55:02:61:63:84:
b6:03:f6:a5:ec:08:36:2c:00:6a:4b:b5:e2:d8:2c:90:74:3f:
fe:9c:b7:ef:46:f4:1d:98:5e:91:53:d3:3d:bd:61:19:78:6c:
fa:e4:bf:21:f1:8b:2b:17:6f:f4:e3:16:36:6a:41:28:9f:9f:
f9:0c:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:53:38 2026 by rpki-client