
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json)
Hash identifier: BJWfoDU+Zk/wCtw5dFSHFlEtjCrVmpQ0cFfA0PnQXX8=
Subject key identifier: 50:BF:A0:9A:E9:F0:E8:43:A8:EB:46:43:E8:E3:83:32:2A:E0:68:39
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial: 0CAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
Manifest number: 0C8E
Signing time: Sun 26 Jul 2026 19:00:17 +0000
Manifest this update: Sun 26 Jul 2026 19:00:16 +0000
Manifest next update: Sun 02 Aug 2026 19:00:16 +0000
Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: hyv57gEdEAzyxTqhAAj3lCeMvtG0CbAx++FcASGhqdw=)
2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: TTxeq1OMdbgzaP7dTYMc6Fs5lQ+8FxgwD7ohl1EhyQY=)
3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 2A0LGFbTxJM1CyVE/zh4gUOdkdA5g554p/UKkKfLEQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3243 (0xcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Validity
Not Before: Jul 26 19:00:16 2026 GMT
Not After : Aug 2 19:00:16 2026 GMT
Subject: CN=6a665940-062d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:ff:49:b4:76:e8:92:3e:24:be:46:3a:5f:
cc:81:4e:f4:9b:37:85:b5:65:3a:8b:95:f4:67:73:
fd:38:2c:e8:f6:84:56:3a:b0:cb:d7:da:2e:e9:7b:
8e:18:53:61:9d:dd:a1:e6:93:11:50:1e:e9:49:a4:
8f:ff:5b:8d:c0:ad:49:13:fb:76:ab:37:c8:2c:9b:
98:14:65:f9:ce:88:cb:77:49:72:51:aa:87:9f:96:
f9:59:5b:10:55:f2:64:c1:e3:84:9e:20:e2:2e:56:
73:f0:73:c2:96:72:28:a5:43:aa:f3:81:50:87:40:
f4:ce:4f:2d:c9:3e:ad:82:a3:12:17:10:2a:c5:5a:
98:9b:2f:5e:18:26:d2:1d:ce:72:db:5d:92:12:97:
67:b3:3e:f2:00:8f:2d:1c:b8:ad:7c:c4:7a:cd:e7:
8b:7a:9a:f5:5c:e6:f5:2f:39:63:e7:50:1d:d4:9c:
dc:c4:b6:93:7d:f2:16:d0:e1:16:4f:0b:ca:9e:f3:
02:dc:48:29:9c:ec:3a:b1:d4:aa:f9:7f:d0:93:17:
20:6c:f5:bb:60:2e:b7:a7:c0:a5:e3:be:89:a0:aa:
a9:d1:18:72:3f:63:56:10:7f:47:06:da:4f:9a:6b:
ab:54:25:2b:25:bf:57:05:56:23:64:bc:26:1c:cd:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:A0:9A:E9:F0:E8:43:A8:EB:46:43:E8:E3:83:32:2A:E0:68:39
X509v3 Authority Key Identifier:
keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:a7:0f:df:42:28:fe:f5:de:47:f3:0d:7b:5b:a2:b9:ca:eb:
3f:37:6e:2f:cb:50:ba:b6:a7:45:b0:6b:c0:ac:e5:71:a2:5b:
7d:5c:c4:12:fd:45:df:b1:e8:a8:70:34:ff:e9:86:38:22:db:
1a:21:0a:b6:ed:01:2f:32:14:a9:42:25:04:2e:62:2c:3e:d5:
05:f7:f6:17:10:f9:00:97:dc:03:77:c8:67:85:34:2e:21:3f:
56:ed:39:e7:03:5e:36:58:10:8c:e6:f1:f3:f2:24:67:bb:23:
c0:41:bf:29:f8:e1:dc:44:41:ab:52:31:61:93:70:ac:cb:62:
6b:20:78:90:b8:49:06:81:3b:ee:12:30:67:ea:2d:b6:34:a9:
0a:1e:39:a9:bb:ab:a6:e9:a3:fe:0d:01:f1:ad:81:da:c7:23:
bb:b0:cd:b7:ca:38:9d:44:e5:10:9a:34:01:f0:00:58:62:bf:
ba:da:dc:56:f9:d3:35:18:f8:4a:9a:02:87:e0:0d:1b:4c:5c:
56:e1:5e:43:66:4c:00:c6:4b:b7:91:56:07:a4:62:98:43:b0:
ac:03:af:2b:ef:ba:b6:d4:71:98:ee:16:2c:e9:7c:1c:e2:8d:
a6:9f:45:25:2a:a1:4b:88:8f:b0:b1:7a:f7:66:5a:44:ca:7a:
3b:e6:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:58:27 2026 by rpki-client