
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json)
Hash identifier: yFkn0ivsHfP4zPIumPPeiS9j9m/7Frch9B49t56S/SI=
Subject key identifier: E3:05:F8:88:1E:45:52:99:88:15:59:36:F1:28:18:0C:13:93:9B:A8
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial: 0CA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
Manifest number: 0C8C
Signing time: Wed 22 Jul 2026 18:56:56 +0000
Manifest this update: Wed 22 Jul 2026 18:56:55 +0000
Manifest next update: Wed 29 Jul 2026 18:56:55 +0000
Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: 735Sr5YD9BncpnVwbH6+D+o+22sVNI2AP5VDTKW6Gds=)
2: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 2A0LGFbTxJM1CyVE/zh4gUOdkdA5g554p/UKkKfLEQk=)
3: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: TTxeq1OMdbgzaP7dTYMc6Fs5lQ+8FxgwD7ohl1EhyQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3241 (0xca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Validity
Not Before: Jul 22 18:56:55 2026 GMT
Not After : Jul 29 18:56:55 2026 GMT
Subject: CN=6a611278-6896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:d2:a4:e3:3b:02:7a:99:14:2a:b7:09:41:
dd:49:ff:c6:20:fa:aa:1a:dd:1f:3e:76:f7:1a:eb:
e8:93:01:47:59:95:db:05:49:e6:70:2a:f9:6f:67:
bb:ce:79:46:8e:2b:ae:be:45:94:34:e6:8d:d6:b8:
5c:14:ba:3c:63:6a:ad:78:74:2b:63:b3:84:c7:16:
8a:d3:17:c4:6a:05:71:ce:f7:54:86:16:58:20:b4:
1d:df:2f:e0:bd:4c:97:80:54:98:d5:d0:fd:51:ce:
35:5a:11:f6:5a:d9:56:d4:cf:9e:4d:96:69:c5:0f:
18:84:93:be:b5:23:93:38:47:87:11:a9:8d:69:49:
e7:8d:7f:30:c6:14:e0:f8:4a:be:8f:c2:8f:09:77:
0e:16:67:e4:15:a5:d2:bb:91:a6:62:09:bf:27:23:
25:8d:85:fe:be:4f:8d:7b:0b:ca:af:c1:9f:b0:15:
59:09:e5:6d:61:22:1b:ea:04:56:7c:1a:e4:df:4d:
d5:38:a1:58:ae:7e:65:66:80:9d:a6:fb:0b:7b:d3:
31:80:9f:6e:04:e3:23:78:2c:e3:23:3d:a6:f7:5e:
23:b5:df:f6:15:1a:48:a9:fa:b4:6d:93:f1:82:f0:
07:67:86:6c:eb:b1:bd:9c:f8:63:dd:80:7b:eb:12:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:F8:88:1E:45:52:99:88:15:59:36:F1:28:18:0C:13:93:9B:A8
X509v3 Authority Key Identifier:
keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:16:06:64:6b:10:d7:69:c8:34:ff:ee:56:24:64:b6:d6:bf:
0b:5c:b5:d4:75:f4:72:f4:9e:30:ca:3c:7a:c8:6a:66:24:94:
be:c0:71:2c:37:0c:ca:bf:83:88:82:f6:00:8b:48:68:1d:f5:
dd:14:05:e3:6e:e4:ff:d8:b4:15:9c:df:61:84:b5:d9:5a:de:
67:2c:f7:32:2a:d8:f5:4c:b6:8d:e8:c0:ef:73:1c:44:6b:17:
8a:5a:67:8b:93:bd:33:ba:11:c9:91:b0:3a:30:c2:02:95:c9:
f9:49:b3:3c:91:b7:46:f0:4f:13:f6:42:29:38:ba:51:69:16:
42:02:e4:96:18:ed:e2:69:33:7b:14:e8:96:06:bc:2b:47:0f:
41:d0:53:38:7b:a8:00:c1:dd:30:21:ea:f5:ed:24:91:25:64:
ca:7c:38:8d:71:af:36:b4:67:18:89:77:8c:0b:e0:a4:3a:8c:
d1:fb:e5:fe:29:42:dc:92:f7:11:0d:3b:f4:60:13:a0:69:ab:
e4:f4:ad:c2:ce:9d:5f:5c:cd:63:9b:3f:ed:f9:73:df:43:68:
42:bf:1d:14:de:e4:4d:64:49:20:f5:c8:ed:c9:4e:a3:e3:c9:
3e:d6:e6:04:7a:ab:d6:b1:c1:f9:61:92:35:2f:61:9a:2f:2b:
17:2d:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:33:59 2026 by rpki-client