
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json)
Hash identifier: DsE5HfOnyrv+gWc4I2l/jhNHImCoytAIr61vxtY5uU4=
Subject key identifier: D4:DD:A0:1A:FD:00:20:B9:74:94:B6:0A:AF:C3:58:22:84:61:B9:D8
Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
Manifest number: 0145
Signing time: Sun 11 Oct 2026 06:02:10 +0000
Manifest this update: Sun 11 Oct 2026 06:02:10 +0000
Manifest next update: Sun 18 Oct 2026 06:02:10 +0000
Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: BTMmJWQNJNYTFBLmEdq6CDSk9Ptaj+XXSi5tCwmecAA=)
2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: v41aBlF3leOW8tter1KV8agjab7xR5AdoEi5mvmK3SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Validity
Not Before: Oct 11 06:02:10 2026 GMT
Not After : Oct 18 06:02:10 2026 GMT
Subject: CN=6acb2662-b434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:83:f2:d4:3b:0f:8a:68:bc:ac:0f:f8:79:
43:8a:53:db:81:0e:a7:10:64:90:67:24:a8:fa:f7:
cc:dc:a4:8b:58:e4:1a:6c:18:a5:75:ee:70:4c:3f:
33:c6:3e:bf:2b:8a:03:76:ce:82:34:df:09:33:97:
ac:8a:8d:6b:71:fc:a3:8b:bf:55:94:85:7e:4a:d2:
75:ef:c0:7a:72:43:26:b4:8a:e0:4a:77:2f:6e:9e:
84:79:71:dc:ac:db:03:d6:8b:7f:f0:86:fc:dd:7f:
e8:bd:de:4a:e1:c6:5c:74:1f:3a:59:b5:22:f1:80:
69:70:39:e7:2d:02:47:b5:10:d6:ab:17:d5:ed:55:
19:9b:30:4a:1f:4d:a8:67:74:46:83:e1:cd:ca:a6:
2e:a3:43:23:a1:ae:88:a7:73:dc:cb:05:af:84:6b:
e2:13:91:af:cf:29:b7:22:a5:97:72:b1:7b:67:fd:
29:ba:a7:cd:5e:48:19:c1:3d:19:c8:f7:69:ae:5c:
b0:7f:af:dd:cc:c3:3e:a3:19:6c:74:77:e0:d5:c3:
7a:31:62:a3:55:4b:c9:cf:11:8e:4b:1c:ed:3a:d9:
27:45:c6:de:c3:28:04:a8:b5:7b:9a:3c:b2:a9:55:
3b:89:b1:2c:53:33:f3:76:a8:65:1c:de:7d:9d:20:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:A0:1A:FD:00:20:B9:74:94:B6:0A:AF:C3:58:22:84:61:B9:D8
X509v3 Authority Key Identifier:
keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:16:9e:07:55:de:28:42:56:db:34:fc:8e:4d:26:e5:41:c0:
c8:fd:85:ba:cf:37:de:1d:e2:4e:51:e7:2f:7e:cf:35:15:6c:
5b:1b:7d:57:93:e9:02:ea:74:66:c6:13:45:d4:a6:dd:ad:f2:
97:ea:40:fc:3d:aa:12:8d:56:78:fe:0d:2d:d1:79:63:56:91:
e9:fe:45:ca:7e:fa:be:88:9d:f0:86:57:2d:89:aa:28:66:f0:
89:36:b2:03:d7:06:95:90:41:c2:3e:64:71:14:5d:ea:94:c3:
ed:85:c4:16:03:c2:3e:cf:f1:4a:c2:22:9b:1f:70:6d:09:36:
54:99:93:53:40:1c:df:72:69:f6:2a:e4:bf:a0:65:6b:21:ca:
e3:11:36:f8:b8:69:b7:5d:5b:d9:e9:7f:e1:e4:c8:41:90:30:
65:eb:db:eb:1f:ef:17:30:1c:66:fd:b3:6c:57:12:32:f2:43:
66:9e:68:3c:0f:b3:fa:20:86:27:b6:19:1b:76:ce:3f:e1:16:
00:12:80:e8:02:4c:dc:c0:59:f9:72:45:60:ee:f0:f9:44:c5:
98:b8:e4:d2:2c:fd:1c:83:41:b7:79:3e:4a:1a:98:09:7f:02:
c0:60:52:b5:94:23:92:19:6b:7a:5a:57:da:1a:ab:14:44:1d:
a8:e9:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:49:19 2026 by rpki-client