
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
File: Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json)
Hash identifier: zSwxjFi1VH2UhfprjwV0RWWvfIdx/IhKD/nOVC0NsVs=
Subject key identifier: 9E:F0:0E:6A:BA:FD:62:7C:F0:00:3D:F7:F7:FE:85:1C:9E:E6:33:BB
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Certificate issuer: /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
Manifest number: 96
Signing time: Sun 27 Sep 2026 07:57:43 +0000
Manifest this update: Sun 27 Sep 2026 07:57:42 +0000
Manifest next update: Sun 04 Oct 2026 07:57:42 +0000
Files and hashes: 1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: vhaKLnCrm7lgAQZVFEz3d9DHFWNlrpbiNYYY20pyK5Q=)
2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Validity
Not Before: Sep 27 07:57:42 2026 GMT
Not After : Oct 4 07:57:42 2026 GMT
Subject: CN=6ab8cc77-e643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:bd:2c:2d:f7:14:4b:63:1a:28:24:1e:bf:
0b:49:a7:f0:55:a1:59:97:df:c0:16:cc:fb:91:f8:
a3:4a:1e:8f:31:ef:3f:ba:f9:ae:d0:e6:21:07:75:
4f:99:26:64:e6:e6:15:80:a0:bf:57:29:fb:1e:17:
9e:a5:b1:26:3a:73:72:10:2c:8a:29:ab:c4:4b:f0:
a2:87:a8:f6:ca:13:9a:ea:d3:f4:c7:27:de:58:5b:
12:06:5e:50:03:fb:95:fd:c9:8a:c9:ae:62:a9:a5:
5a:50:f9:98:d6:93:f8:52:b0:22:0c:ca:27:a4:ec:
1e:46:c9:9d:7b:f5:36:4b:1a:8e:1f:8b:0b:fe:1b:
dc:9f:4d:d1:b5:5c:8f:a0:aa:5a:d3:40:9e:d5:ed:
56:9e:64:e5:2b:4a:3b:62:51:c4:9a:b6:3a:ff:5c:
1c:59:5b:d6:6d:b6:5d:39:26:15:ed:4a:9f:a1:51:
64:1c:17:05:8b:5e:28:9d:3f:ec:bb:05:cb:91:94:
8d:01:32:c9:6a:49:fd:64:c2:46:24:cb:ab:1a:2c:
2f:62:40:9c:9b:01:df:14:c7:76:8f:70:41:5f:07:
89:a1:09:69:7f:09:6c:8f:bd:bd:df:24:25:3b:9d:
2c:ed:22:91:26:81:88:d8:75:3e:61:7d:c3:ca:d7:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:0E:6A:BA:FD:62:7C:F0:00:3D:F7:F7:FE:85:1C:9E:E6:33:BB
X509v3 Authority Key Identifier:
keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:5d:6e:e8:e7:7d:d9:ab:5e:52:f2:8c:00:fa:84:31:9d:0c:
a7:0f:fb:75:7d:71:85:eb:14:62:dd:c9:a0:93:13:ee:ec:90:
97:1f:66:33:0f:7a:19:4d:71:a6:4b:4f:37:8b:73:2d:19:44:
25:f4:94:8c:e3:45:3c:be:dd:ab:39:a1:87:29:6d:86:7c:f0:
30:41:96:03:29:63:01:42:16:d5:60:15:58:1e:43:ad:ec:c0:
39:e6:fd:d8:7f:10:26:59:aa:e3:51:10:9d:1a:48:bb:8d:bd:
c2:ca:87:47:b5:ec:ed:32:eb:33:5c:69:f8:a8:ef:38:ba:a7:
fe:8c:11:82:3b:00:c8:70:e9:e4:a1:5d:c3:56:cf:5d:03:b4:
1a:1b:e5:f5:a2:06:9b:59:86:6b:4a:b5:a9:1c:cb:61:13:8c:
49:cc:d4:8a:91:0e:05:59:6c:ee:ad:1d:d4:96:be:ff:7d:30:
66:5d:fd:ea:59:ec:02:4b:25:df:34:eb:a5:7e:2b:d3:7d:1b:
85:30:13:4c:66:f5:c1:4d:3a:0c:e2:79:73:64:76:bd:6c:9f:
1f:b8:00:a9:f5:9a:55:af:d2:89:6e:6a:4b:cf:24:85:10:be:
f3:49:b6:23:9f:3a:3f:c6:3b:a4:8b:fa:c4:27:a6:dc:d7:78:
f6:97:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:35:18 2026 by rpki-client