
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier: BuHRgcHMhJjGAwk+AXKP7l89QVPyaYoWWBaQILBR6CE=
Subject key identifier: 00:9E:6C:7D:78:C1:06:E7:F1:03:58:22:BB:1F:62:F0:5A:A4:DA:47
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number: 80
Signing time: Thu 23 Jul 2026 09:36:54 +0000
Manifest this update: Thu 23 Jul 2026 09:36:54 +0000
Manifest next update: Thu 30 Jul 2026 09:36:54 +0000
Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: /BptHvs06Mcwp7HP2ZLZg9DgT6UC35zYylnKIlhijVA=)
2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Validity
Not Before: Jul 23 09:36:54 2026 GMT
Not After : Jul 30 09:36:54 2026 GMT
Subject: CN=6a61e0b6-3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:30:d3:74:39:77:9c:4b:13:35:45:ba:dc:
90:57:fd:15:ae:2d:a6:ae:42:d1:ac:e7:76:45:78:
ea:4c:48:39:a7:3d:02:07:a9:b7:72:66:53:7f:92:
88:bf:fc:8a:7f:ce:c6:37:38:a7:25:c4:fa:90:51:
8a:49:6a:32:9f:8c:82:b6:5e:6e:b4:81:51:5c:76:
f8:27:49:e9:6b:30:20:01:4d:64:99:dc:39:c5:b2:
d5:13:3c:f6:ab:02:4b:7a:39:72:ca:76:57:22:f0:
b4:e2:ab:38:74:32:50:0b:06:10:ec:04:1c:fd:11:
f4:89:ef:9c:66:99:0b:a3:df:0a:80:91:ba:61:6a:
a0:c2:5d:d9:29:14:20:10:94:da:1d:65:8c:ac:95:
67:ce:f4:b5:0d:29:d1:86:80:4a:f5:9b:c6:dc:a3:
d7:d8:ec:7c:98:da:3c:10:35:c4:c7:b0:e9:5b:96:
cd:67:24:ca:ce:6d:ca:75:f6:8b:93:16:07:0c:05:
20:84:0e:93:b5:15:ac:75:18:51:b9:c7:c9:eb:20:
ce:0c:bd:36:f7:91:9b:08:e4:f2:42:78:2f:ec:7e:
c5:e8:74:5e:bb:ac:2e:60:8b:9b:24:7f:cc:84:8d:
81:5b:11:b5:c5:3a:56:0a:61:04:8a:f8:5c:55:38:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9E:6C:7D:78:C1:06:E7:F1:03:58:22:BB:1F:62:F0:5A:A4:DA:47
X509v3 Authority Key Identifier:
keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:eb:bc:5a:f6:b1:38:f2:0e:01:9b:64:f7:07:c2:41:ec:e1:
73:72:98:dd:a7:79:68:12:d8:92:05:18:fd:cb:22:36:c9:99:
54:4d:b1:51:61:de:16:72:87:5e:4e:06:45:96:a5:31:11:b1:
df:ac:f3:15:f3:a7:6d:f7:a9:ad:7a:5b:d9:f9:1b:44:71:51:
9d:c5:3a:67:11:d0:a7:17:f2:55:88:a5:80:60:6b:ba:95:6c:
8a:13:d8:c2:a6:d3:11:ed:82:5f:9d:34:be:82:d4:2d:0c:c0:
29:fc:f7:17:9e:db:f7:3b:4a:3e:4c:b3:48:34:e3:5f:21:3f:
3d:dc:26:0b:ef:ab:9e:29:3c:25:23:da:94:ad:35:56:f2:e2:
8b:0b:94:d9:02:03:cd:35:d9:9a:dd:33:a3:1a:ea:31:a7:32:
c5:42:02:fc:46:ec:2f:2e:1d:28:31:e2:a3:9e:5f:c9:23:df:
da:57:70:19:b1:41:4d:b5:d2:33:ce:7b:03:c7:33:cc:77:d7:
1d:8f:56:83:d3:fe:69:87:98:1e:61:2c:43:a0:ee:4b:87:21:
83:8f:7a:b8:3b:d8:1a:f8:fe:d0:a3:60:13:c2:ff:88:b2:b3:
9a:d7:54:47:55:54:87:5b:21:46:37:97:b8:f0:1a:00:91:90:
e7:d8:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:08 2026 by rpki-client