
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json)
Hash identifier: egH8Xc165Hd3lCju+FqFttxZE/4GWhnEdzEAEhLeBW4=
Subject key identifier: 3F:EF:CD:28:28:10:97:5C:F0:37:DF:BE:52:C8:B7:36:1B:7A:4F:59
Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
Manifest number: 69
Signing time: Tue 23 Jun 2026 08:12:22 +0000
Manifest this update: Tue 23 Jun 2026 08:12:22 +0000
Manifest next update: Tue 30 Jun 2026 08:12:22 +0000
Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: lYOLMCjB0SE0gt+Ni8zqGUcet11e+rNDHIinKVqFbHM=)
2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Validity
Not Before: Jun 23 08:12:22 2026 GMT
Not After : Jun 30 08:12:22 2026 GMT
Subject: CN=6a3a3fe6-e841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:26:9c:a3:29:83:2c:50:ed:17:e7:b1:95:
8e:ba:c9:cf:e3:77:48:2e:de:c6:84:9b:46:e7:54:
39:11:d6:d0:71:c9:80:12:07:36:b3:b2:dd:88:90:
d5:c9:53:e0:69:8e:70:23:a3:01:b9:74:b1:e0:5f:
6e:a2:5a:94:c1:f1:b9:6d:a8:8d:07:b2:35:75:cf:
97:18:9e:dc:c8:6e:d3:37:31:34:8d:62:b3:24:10:
43:ce:f6:fb:5e:33:ee:e1:d0:52:8b:2f:cc:0e:d9:
61:f8:fe:04:6e:74:34:11:bc:2d:3f:d4:70:95:19:
ed:28:5a:f0:c6:b6:e1:57:91:61:18:33:9f:1e:88:
39:23:3b:0b:34:c3:e2:30:e6:f1:bc:bd:d8:ed:19:
2e:2d:cf:79:7d:4c:17:aa:c7:06:b4:64:13:a0:d7:
c8:85:7a:b9:76:cc:a2:11:09:ff:7a:17:dc:8f:7b:
39:c9:ac:1a:8d:1d:35:51:15:6e:c7:ed:3c:22:d2:
38:99:d7:21:52:d0:de:5c:e1:8f:d6:ca:34:2b:f7:
44:c8:74:23:f3:4e:9a:d9:41:cf:6e:c2:6a:cb:ed:
f8:a1:c4:6b:ba:4d:21:27:91:ca:dc:27:58:0a:34:
18:04:49:47:ff:08:ed:7b:38:20:29:54:fa:15:2d:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:CD:28:28:10:97:5C:F0:37:DF:BE:52:C8:B7:36:1B:7A:4F:59
X509v3 Authority Key Identifier:
keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:7e:69:c6:d8:93:b1:e2:dd:05:8a:3f:11:d7:68:a0:ca:2d:
a0:3a:25:dd:65:61:bd:5e:96:93:e4:dd:8e:f5:f0:72:9c:70:
62:bb:32:e6:71:76:43:b4:92:65:24:ef:f2:de:24:f3:e4:09:
a8:96:e0:ce:83:b4:04:55:87:b8:a5:f4:29:cf:66:5c:13:ee:
fa:9a:90:45:88:4f:93:af:e4:8b:9e:69:2f:33:40:62:d1:d6:
5f:a5:ff:01:45:16:b6:ac:de:d7:23:f3:1f:f3:01:51:a0:39:
3d:34:46:a0:6a:77:d3:74:83:29:59:2b:9b:21:b7:7a:f4:0f:
87:d7:85:cd:1d:60:b1:ae:0e:ea:a4:f9:52:5c:c5:a2:dc:d6:
8e:ec:e9:94:ca:4e:bd:be:e7:06:52:c4:a1:78:08:5c:3a:45:
ea:65:a1:46:b1:b0:61:f9:f7:b4:0c:c0:c8:01:49:9b:6c:6e:
ef:d3:2d:2b:ba:ee:5c:2e:c6:e6:9e:38:29:69:aa:40:d7:b3:
dc:e5:95:29:b0:0c:4e:ab:a5:bf:0a:72:af:3c:89:80:1c:16:
07:88:1d:f8:3f:40:2f:69:8b:81:68:4d:db:ad:1a:19:c2:c9:
11:f0:f0:b3:10:be:7f:0c:cb:be:3d:68:2e:d7:6a:57:c3:10:
a1:9a:8a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:30:13 2026 by rpki-client