
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json)
Hash identifier: 0hRTsqcOGs2UCMLBXTeLAHeoGapbpEBHkxvt3mukG9Y=
Subject key identifier: 3E:30:99:34:10:69:10:C2:2D:47:6B:3F:92:63:E2:C0:2F:BB:F4:47
Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
Certificate serial: 0F96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
Manifest number: 0F8C
Signing time: Tue 18 Aug 2026 17:43:22 +0000
Manifest this update: Tue 18 Aug 2026 17:43:22 +0000
Manifest next update: Tue 25 Aug 2026 17:43:22 +0000
Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: Ic9+U3NDCUX6tOYAyE5uWFuDUPQgARdg24QSYP3Ge6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl
rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3990 (0xf96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
Validity
Not Before: Aug 18 17:43:22 2026 GMT
Not After : Aug 25 17:43:22 2026 GMT
Subject: CN=6a8499ba-1909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:c5:b3:3e:67:3f:5f:a6:d4:13:2c:77:d7:
33:9c:1d:80:fc:cc:a7:94:56:ee:fb:a4:f6:75:ef:
c5:ba:21:a7:da:3d:11:7e:32:b2:c3:69:09:2a:d5:
e2:b5:9c:db:3d:40:c1:94:52:7a:8b:21:44:88:bb:
4b:eb:72:04:5e:93:2c:32:a3:e2:ee:be:b4:10:cf:
c0:b6:f0:df:e9:9e:ff:eb:bc:dc:89:0f:7e:45:20:
07:ff:ff:4c:8e:b3:be:73:71:50:ad:c8:58:f5:f4:
b8:c8:a5:5c:c6:b2:e6:5d:9b:19:b1:d3:1e:ee:4a:
93:1d:1f:28:71:60:c3:db:8c:ae:02:d4:1d:78:e2:
89:4f:3d:66:b8:6c:44:67:40:bf:3a:11:a4:af:2d:
d2:a5:53:e5:f7:09:df:ee:3d:42:c3:a0:47:86:19:
56:17:ec:cf:2f:94:6a:20:5a:96:97:18:93:27:9b:
7e:5b:2f:01:ce:b3:8e:32:ff:a4:e1:7e:11:6d:be:
95:9a:72:03:e5:72:1e:c7:4d:9c:84:d5:d5:61:26:
91:f5:11:1f:b5:38:8b:dd:f0:eb:73:7d:65:2b:eb:
ce:44:a3:8b:9c:b0:b1:d9:a3:f7:16:67:44:9d:c6:
9d:a7:b5:4c:57:40:5c:90:3a:4f:44:4b:bb:5d:b2:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:99:34:10:69:10:C2:2D:47:6B:3F:92:63:E2:C0:2F:BB:F4:47
X509v3 Authority Key Identifier:
keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:88:b3:d9:e4:ea:09:44:5b:1f:12:22:9f:7e:e8:42:42:
09:ac:f6:45:01:93:df:4a:6b:57:ba:27:a3:e4:87:23:7b:db:
84:95:7d:c4:eb:ee:ba:b5:5b:a4:bd:c5:79:05:15:f1:67:1e:
8d:4c:67:7a:89:c9:f4:ce:6d:57:2b:20:51:26:73:33:dc:3e:
95:09:bc:9b:19:cc:9b:ef:af:b6:7a:81:2a:76:23:9d:51:8a:
1c:b0:fa:b6:a8:f5:64:2f:5f:71:ce:4c:b9:24:dd:f1:b7:11:
2d:9f:6d:22:82:07:e4:0f:ce:4d:76:88:72:f5:30:c3:e5:84:
cf:3a:d8:6d:25:7d:9e:b4:82:8b:0c:ce:f3:51:5b:f3:79:01:
73:95:de:f3:4f:0c:bd:8f:48:73:b1:d9:22:df:6e:b8:cb:2d:
46:74:c7:d1:62:be:d5:e1:d7:3d:08:08:af:96:ba:37:b7:3a:
3b:18:12:44:e1:01:fe:35:09:ef:ba:0f:71:71:f7:87:1d:df:
82:c4:bf:ac:75:ae:39:a6:70:07:da:12:eb:d6:db:4f:bc:a6:
ad:a2:03:3a:e5:62:d4:ab:a4:1e:c3:3f:ce:bc:c2:ff:7b:13:
39:01:c6:4c:66:73:54:a4:80:ec:3d:62:21:ba:66:f1:b2:ed:
00:80:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:19 2026 by rpki-client