
$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json)
Hash identifier: m1Gj8XBVuv5TeYFqr1PibhqWOh/le4AsmhoFijTV5T4=
Subject key identifier: 78:44:80:B4:D6:A3:A0:E8:58:A6:7C:DC:24:65:78:51:DF:2E:A0:30
Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Certificate serial: 24E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
Manifest number: 24CD
Signing time: Thu 04 Jun 2026 15:46:23 +0000
Manifest this update: Thu 04 Jun 2026 15:46:23 +0000
Manifest next update: Thu 11 Jun 2026 15:46:23 +0000
Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: L2Ol+8fammBHeu5Z94ulHouIUOmPu9rhThYYo7bDFYw=)
2: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=)
3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=)
4: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9449 (0x24e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Validity
Not Before: Jun 4 15:46:23 2026 GMT
Not After : Jun 11 15:46:23 2026 GMT
Subject: CN=6a219dcf-a09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:64:48:ad:60:d0:2b:99:ef:dd:84:28:18:
2e:d5:00:df:e3:d5:80:86:c7:fe:57:1b:89:b8:10:
c6:98:82:98:82:99:94:2a:ca:db:0a:26:aa:5e:c0:
e5:5b:c2:38:4c:45:cc:c0:82:6c:16:cf:1f:0a:6c:
5e:c7:dd:b2:a6:14:f2:76:fb:b9:25:ae:2a:21:0d:
49:85:52:8b:a6:85:71:eb:9d:8b:c4:3e:fc:e8:df:
c6:45:b5:d0:f4:00:2d:8f:02:d7:83:39:7a:9d:89:
78:a7:7f:51:b7:6b:83:fe:11:50:32:8e:cf:5e:cc:
57:e2:80:20:71:0a:ed:dc:4f:20:45:8f:98:44:08:
b9:24:25:29:29:23:00:5a:ba:ef:a4:22:b4:64:6e:
b6:31:8b:28:57:43:53:05:7b:f6:19:a8:d7:1f:f4:
10:20:77:f9:d7:39:5d:88:c5:ab:08:7d:0a:32:e6:
9b:46:33:9e:31:a2:f7:eb:ad:a3:99:49:ee:5e:f8:
80:a3:9d:a9:04:aa:40:d9:24:6d:fa:a4:ed:d0:96:
a5:cc:8d:b7:c4:40:3f:db:15:4d:fc:7d:5b:8d:f1:
41:84:e6:89:0a:23:68:1b:26:f4:b6:e8:f6:32:8f:
14:8f:e8:25:2b:6f:ca:79:f2:57:eb:0d:1a:9f:70:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:80:B4:D6:A3:A0:E8:58:A6:7C:DC:24:65:78:51:DF:2E:A0:30
X509v3 Authority Key Identifier:
keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:41:d2:41:54:fe:57:30:84:22:06:d7:f0:bd:1d:b6:c3:16:
2d:44:fb:17:09:f0:83:a5:3a:5e:b7:92:63:74:d3:bf:0e:2b:
5d:19:25:51:60:75:a2:d9:81:fa:2b:2d:97:52:32:79:eb:cd:
0f:e1:f6:0b:2d:8c:63:90:8f:dd:cd:af:89:d8:88:b5:1c:6c:
d0:19:47:9d:05:84:4b:dc:04:cd:d9:77:fa:8f:73:cf:0a:18:
33:71:18:c8:cd:d7:93:8c:b9:a8:cf:0e:ec:ea:6b:22:95:bb:
c4:7b:07:52:42:ad:1d:13:88:82:0b:01:54:74:ae:02:1f:4c:
a7:33:0c:fc:4e:c9:69:d6:0d:08:bf:d8:30:85:a9:b3:f0:65:
a1:0c:eb:66:54:74:5c:14:4e:c8:45:07:57:f0:15:ed:63:d0:
8e:94:92:74:17:d1:d9:70:6e:02:b4:3b:91:52:b1:69:bf:c0:
4f:56:84:10:20:af:f3:f9:8c:4d:db:ce:fd:9b:a1:c6:ff:f6:
d9:62:9e:2a:b9:89:5b:96:e8:00:45:29:1c:e2:1d:be:dd:7a:
2c:79:d1:dc:34:01:73:09:51:26:5c:42:11:19:32:c1:2e:46:
96:bc:cc:fb:ac:0f:4d:c8:0a:2c:0d:a1:89:4e:c0:56:d0:78:
e7:7a:59:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx
MzA4MjcwMjgwHhcNMjYwNjA0MTU0NjIzWhcNMjYwNjExMTU0NjIzWjAYMRYwFAYD
VQQDEw02YTIxOWRjZi1hMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAygNkSK1g0CuZ792EKBgu1QDf49WAhsf+VxuJuBDGmIKYgpmUKsrbCiaqXsDl
W8I4TEXMwIJsFs8fCmxex92yphTydvu5Ja4qIQ1JhVKLpoVx652LxD786N/GRbXQ
9AAtjwLXgzl6nYl4p39Rt2uD/hFQMo7PXsxX4oAgcQrt3E8gRY+YRAi5JCUpKSMA
WrrvpCK0ZG62MYsoV0NTBXv2GajXH/QQIHf51zldiMWrCH0KMuabRjOeMaL3662j
mUnuXviAo52pBKpA2SRt+qTt0JalzI23xEA/2xVN/H1bjfFBhOaJCiNoGyb0tuj2
Mo8Uj+glK2/KefJX6w0an3CARwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhEgLTW
o6DoWKZ83CRleFHfLqAwMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE
MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj
Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL
ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK0HSQVT+VzCEIgbX8L0dtsMWLUT7Fwnwg6U6XreSY3TTvw4rXRklUWB1otmB
+istl1IyeevND+H2Cy2MY5CP3c2vidiItRxs0BlHnQWES9wEzdl3+o9zzwoYM3EY
yM3Xk4y5qM8O7OprIpW7xHsHUkKtHROIggsBVHSuAh9MpzMM/E7JadYNCL/YMIWp
s/BloQzrZlR0XBROyEUHV/AV7WPQjpSSdBfR2XBuArQ7kVKxab/AT1aEECCv8/mM
TdvO/Zuhxv/22WKeKrmJW5boAEUpHOIdvt16LHnR3DQBcwlRJlxCERkywS5GlrzM
+6wPTcgKLA2hiU7AVtB453pZIg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:25 2026 by rpki-client