
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
File: Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json)
Hash identifier: EdQWYMtVWFsI7YHrFm/KP40/8y6+pJ95qUTXwzN5oTw=
Subject key identifier: 16:69:58:41:53:B9:1F:F5:4D:72:86:74:9D:6A:2A:13:D8:11:36:EA
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Certificate issuer: /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
Manifest number: 71
Signing time: Fri 17 Jul 2026 09:07:16 +0000
Manifest this update: Fri 17 Jul 2026 09:07:16 +0000
Manifest next update: Fri 24 Jul 2026 09:07:16 +0000
Files and hashes: 1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: AKK/ExBRnrRJaKx9hsPVZCAWsj5xKIJ9Ify2EyAu9zI=)
2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Validity
Not Before: Jul 17 09:07:16 2026 GMT
Not After : Jul 24 09:07:16 2026 GMT
Subject: CN=6a59f0c4-1e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:c2:b4:21:a8:dd:c6:2e:36:e6:ca:ce:c8:
13:69:7f:f1:ef:61:ba:93:12:d4:86:39:6a:10:72:
15:8d:95:79:03:58:fa:f5:ce:30:66:47:5b:2e:ca:
cc:6c:cf:3f:f1:a6:99:28:b7:d5:65:1b:22:05:d0:
62:07:7f:81:23:c5:04:9a:34:e1:b1:48:b2:f1:40:
92:be:54:ea:06:9f:c4:e9:55:c6:b7:83:f0:48:04:
13:85:a5:8e:b0:ef:14:66:b8:7e:60:13:23:e1:95:
2b:59:fd:a9:07:f0:d0:b9:26:35:97:d2:58:9f:b0:
d4:13:ef:18:7e:b5:62:71:0f:50:b7:88:4f:2f:95:
17:aa:97:d9:50:86:1c:2e:f4:62:8c:1b:6e:ff:1a:
91:9f:02:9c:66:4e:50:1a:34:98:25:a0:58:56:70:
cf:3b:8b:da:f4:04:52:ca:63:d0:ca:30:41:0c:2d:
a5:f8:c2:e4:28:31:e5:be:18:48:33:e1:e1:3e:87:
5e:94:cf:b6:b8:0d:83:19:59:97:f6:07:11:73:3b:
67:8e:be:00:65:ab:0a:c3:03:3f:48:37:b9:3d:66:
89:24:df:98:5d:15:eb:20:0b:e3:c3:0d:88:32:5c:
42:83:1e:9e:e4:33:20:13:db:30:2b:ad:3b:85:39:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:69:58:41:53:B9:1F:F5:4D:72:86:74:9D:6A:2A:13:D8:11:36:EA
X509v3 Authority Key Identifier:
keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3f:7e:b5:98:60:35:9b:72:62:4a:ad:7b:61:a4:ab:cb:5a:
9f:67:32:9c:af:ef:07:1c:33:71:b3:22:15:5e:c2:64:60:82:
ba:22:66:9a:fb:1b:d8:88:91:17:a9:1b:3f:a0:37:60:37:bc:
63:b5:a7:be:cb:96:58:c5:96:cd:aa:2d:7b:8d:22:56:a0:b0:
34:b6:75:7b:c5:c0:16:16:33:8d:01:61:9f:99:60:a5:98:7d:
fc:16:c8:df:43:c1:63:4a:29:7d:c6:d9:23:ef:13:37:f5:fb:
1e:a7:ac:e6:56:f9:fa:ec:5c:aa:de:85:87:43:5e:8a:30:90:
40:9c:63:a8:57:56:47:fd:78:d4:93:bb:d6:60:d0:91:64:23:
ce:d5:15:f4:b9:93:34:11:33:ff:ec:15:7c:a7:b7:41:4b:6d:
35:f0:85:17:4b:99:71:8e:86:45:35:32:4d:54:e4:11:9d:bb:
40:bc:a5:09:44:ac:7a:63:5e:4b:6a:33:f2:2a:9d:66:5a:62:
ee:f6:e1:9f:9d:fd:02:e5:1b:65:52:34:cd:8e:1c:b3:62:36:
f6:f8:52:f4:e0:99:71:63:e4:64:68:22:8b:95:69:53:6d:12:
be:cc:72:11:4d:80:6a:6c:78:3e:d0:9a:fb:66:b3:bf:68:2d:
81:4d:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:21 2026 by rpki-client