
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json)
Hash identifier: aO3lWgC9HaA6CILDicBb2uK2RIcBoLsRW+J0ZOLRolI=
Subject key identifier: 34:E9:DA:A9:2F:7E:EA:1E:63:38:A7:59:80:88:8F:14:69:93:3F:67
Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
Manifest number: 0114
Signing time: Tue 07 Jul 2026 07:05:21 +0000
Manifest this update: Tue 07 Jul 2026 07:05:20 +0000
Manifest next update: Tue 14 Jul 2026 07:05:20 +0000
Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: NVJaXnqaJDqDLZiTV7cGWXoR7LUBXP7f4WpupiogVh8=)
2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: v41aBlF3leOW8tter1KV8agjab7xR5AdoEi5mvmK3SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 07:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Validity
Not Before: Jul 7 07:05:20 2026 GMT
Not After : Jul 14 07:05:20 2026 GMT
Subject: CN=6a4ca531-5759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:82:ff:a0:5c:16:3e:de:dc:cf:8c:e8:7f:90:
71:51:96:b8:90:3b:e6:00:f6:fa:7b:9e:f9:82:dc:
f6:0b:3e:ff:5e:e3:9e:4f:1a:04:04:74:93:18:98:
d6:9d:66:e3:f7:10:36:1b:e7:32:1c:73:d3:fb:58:
25:d3:73:04:5c:98:c1:b8:14:7c:47:81:70:23:3c:
c5:9b:7f:43:bc:d4:a3:f2:48:f2:17:ba:64:59:e6:
79:33:9a:1b:c2:f7:e5:0e:1d:75:15:63:f8:a7:01:
d4:eb:7f:b8:c3:5c:a5:62:82:3c:61:50:1b:36:95:
23:0f:4e:8d:ae:75:46:a6:b9:d1:81:09:05:9e:9d:
55:33:88:19:31:03:68:57:26:dc:45:12:4b:08:4f:
41:1f:1a:d4:fb:65:a4:c0:12:71:dd:fe:72:aa:14:
dc:3c:55:cd:b8:f0:5e:32:fb:06:01:68:ab:99:63:
55:33:93:4b:4f:dd:56:b7:73:85:ae:2a:4e:cf:0d:
03:0a:e8:80:8b:d4:fb:54:0d:98:d5:23:d9:c1:68:
73:4d:32:36:af:b0:ec:ae:ad:36:7e:c9:61:93:57:
03:0e:30:97:85:9c:ea:20:32:e4:97:95:40:14:ba:
a5:1a:7e:e6:4b:a3:a7:2c:65:57:b3:26:a3:3f:89:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E9:DA:A9:2F:7E:EA:1E:63:38:A7:59:80:88:8F:14:69:93:3F:67
X509v3 Authority Key Identifier:
keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:65:f9:d8:21:5c:0c:e5:e9:ca:0e:44:51:83:4d:12:d1:88:
d7:92:ab:ed:16:a8:bd:dc:36:8a:a4:3e:c9:d6:69:63:ea:e8:
30:17:6d:1d:b8:26:96:76:f3:c7:6a:25:e1:27:14:09:16:3d:
1b:e9:f4:7a:5b:c2:c3:77:3c:94:ea:cf:d8:26:80:c2:82:8a:
d0:c5:ec:22:38:4d:39:b7:b0:1d:1d:6e:b0:fb:68:9c:73:86:
9c:e4:c6:ad:ad:cf:96:b3:4b:20:41:a7:bf:27:42:b7:79:42:
74:bb:fa:8a:9d:14:85:a6:68:49:a7:a7:81:3d:34:51:9e:1c:
24:0d:62:bb:e6:25:c5:93:99:6a:6d:b0:41:b5:02:52:5d:a6:
ff:61:c2:84:0b:4b:6c:8b:ed:8b:50:3d:a5:a8:11:81:67:1e:
ed:38:3a:ec:d5:d2:4f:39:57:d9:bc:69:a4:ff:2f:2a:ac:ae:
1e:cb:6d:55:a8:27:b9:d9:41:f3:20:ab:7c:92:0d:fe:1e:0b:
e6:84:c8:b8:88:99:ab:b7:e6:d7:63:ca:c7:4d:3b:f0:0e:3e:
9e:86:d3:ee:57:57:b9:42:01:a1:8b:29:15:84:08:64:d4:f9:
ae:bd:2f:85:f5:ff:6c:ee:ac:b6:47:0f:29:0f:a8:ca:af:9a:
c2:3f:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 07:11:20 2026 by rpki-client