
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json)
Hash identifier: me+1cFowgRzaxbZXYyU6jg6up7xo9dIrKj/YrEgysfg=
Subject key identifier: 2F:38:06:D7:79:6E:21:7C:A4:56:A2:E5:03:A3:44:A3:34:7A:68:62
Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
Certificate serial: 0F68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
Manifest number: 0F5E
Signing time: Wed 20 May 2026 17:33:30 +0000
Manifest this update: Wed 20 May 2026 17:33:29 +0000
Manifest next update: Wed 27 May 2026 17:33:29 +0000
Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: HrE+s13Qt5yy4R3n+dkTYrfB0scy4TffuEElKviyuz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl
rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3944 (0xf68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
Validity
Not Before: May 20 17:33:29 2026 GMT
Not After : May 27 17:33:29 2026 GMT
Subject: CN=6a0df06a-6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:2b:00:ef:58:6b:3b:29:ed:c3:72:fb:a4:
f9:8b:49:82:c8:18:d4:df:ff:9f:66:dc:50:62:c7:
79:6d:f7:1d:05:db:d9:aa:cd:ea:85:71:b4:70:e5:
80:37:80:7c:21:61:90:0d:3e:b4:d5:85:8e:38:10:
64:50:c0:a9:e9:1d:e9:6d:19:94:2a:a7:34:96:2b:
01:a4:dd:0f:11:a0:67:42:b7:2f:a7:be:7a:ba:d5:
30:f8:2c:70:2f:d7:ed:a9:f2:59:84:e7:44:ba:45:
03:2b:24:3b:89:a0:a2:24:a6:89:8b:24:4d:8c:06:
6a:02:fd:a8:7c:84:99:a3:df:ec:97:55:c9:8a:99:
ff:6d:90:49:94:d0:c4:8b:ca:11:6e:45:2b:fe:d9:
38:e4:ed:ba:e1:b7:6b:14:2d:5b:77:de:92:27:80:
86:08:3c:4b:d4:45:f0:83:23:dd:0e:58:63:f0:57:
01:02:b2:ba:fa:8d:02:00:9b:7e:93:bd:c1:4d:ff:
0a:e3:6e:e9:f3:8d:69:d0:72:13:78:d6:79:9f:f1:
39:e7:28:13:78:1a:57:99:7c:97:18:24:56:d6:09:
ff:af:49:01:d1:e0:b0:62:1d:59:98:c8:ea:01:11:
e1:50:5e:4b:24:0d:47:e2:3c:42:d4:f0:b4:2e:23:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:06:D7:79:6E:21:7C:A4:56:A2:E5:03:A3:44:A3:34:7A:68:62
X509v3 Authority Key Identifier:
keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:c8:e2:2a:08:23:51:00:72:cb:07:88:ba:58:38:4f:b6:03:
57:d2:62:14:6b:25:ef:59:9d:4e:50:c8:c6:86:94:20:2a:df:
13:60:bc:d3:55:eb:24:71:86:de:66:ce:ef:97:ba:87:a0:3e:
29:ea:5b:4b:ba:cf:6b:03:12:29:de:de:e9:f3:c6:ba:a2:74:
c7:6a:07:bd:0d:73:ab:47:a9:69:fc:59:af:0e:13:63:a3:69:
d5:d0:1d:6b:da:b4:f5:fe:3b:dd:24:fb:61:0d:b9:13:2f:ca:
a1:cb:e9:ac:80:b5:bf:d0:81:a7:43:79:82:19:19:21:fe:20:
75:59:ab:50:ec:ec:4d:0a:d4:c5:90:1d:fb:be:ef:c9:3c:ba:
ea:ea:8b:ad:f9:85:a0:12:c1:23:da:c8:6d:43:79:da:f1:85:
08:80:6d:30:3e:38:fb:1c:41:3b:94:7d:c7:02:33:a5:0b:74:
96:3f:11:b0:1c:23:c5:3f:35:1a:25:ce:e6:19:e5:79:50:33:
8d:0b:be:eb:53:1d:6d:b0:f7:c0:d0:5d:0b:3b:99:8a:a6:83:
20:82:0e:fe:97:13:27:0f:04:0a:b2:d1:57:4a:d9:24:94:15:
00:ea:82:86:fd:e1:49:14:3e:50:65:6a:08:2b:5f:31:b5:46:
55:39:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:06 2026 by rpki-client