
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json)
Hash identifier: NS2zX1rmK8kyl3SZNw5Ocxk4EndxDCbZP+CR6aGjYpo=
Subject key identifier: 1B:B6:09:E8:F7:E3:CB:0E:C2:1D:A7:C0:E0:B7:24:C7:56:93:6A:21
Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
Manifest number: F9
Signing time: Wed 13 May 2026 06:26:27 +0000
Manifest this update: Wed 13 May 2026 06:26:26 +0000
Manifest next update: Wed 20 May 2026 06:26:26 +0000
Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: p5WaLpSeudCKcvYOxRqq3w8RO9N6alg7z1PmYasLhfs=)
2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: v41aBlF3leOW8tter1KV8agjab7xR5AdoEi5mvmK3SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Validity
Not Before: May 13 06:26:26 2026 GMT
Not After : May 20 06:26:26 2026 GMT
Subject: CN=6a041992-eda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:24:e7:e4:c6:b0:a8:f1:a5:cd:7c:03:eb:
38:5a:d6:e8:bb:3c:b5:14:4a:63:54:3b:17:61:0d:
9d:25:5c:ff:80:62:71:83:ae:f2:e2:b6:d9:e1:12:
b1:cd:77:53:a3:3a:37:bc:48:3b:63:93:d5:0b:26:
85:cf:f2:e7:4c:43:18:d5:33:08:41:e4:e2:c3:c9:
dc:88:76:f9:9c:35:f1:e2:c7:2e:65:a1:86:8f:d3:
ca:5f:74:e8:f7:0f:29:05:fd:ed:e5:38:2b:42:f2:
82:8a:b2:2f:4a:62:39:04:8f:44:e4:78:38:f3:57:
66:1d:de:c7:ea:02:5f:70:3d:66:90:ed:90:15:ec:
74:4f:72:ed:82:43:f8:e3:a1:9f:42:d4:ce:f9:a4:
f2:52:af:aa:7c:b3:68:cf:ec:27:ef:ad:fd:f3:34:
d4:c1:3a:90:03:d5:ee:61:0c:f1:02:14:ce:9d:95:
81:51:7f:46:2e:21:4a:15:0f:23:c7:50:2f:1b:fa:
92:93:cf:9a:61:a5:8b:34:c0:a1:d1:bd:b7:09:9a:
ab:13:01:7a:80:34:90:2b:7e:ab:b1:89:7c:fa:8a:
ab:d0:f1:ce:20:28:d6:be:8f:02:32:b6:ad:df:2d:
91:ea:eb:9e:2c:14:f9:4c:76:30:e6:e5:46:c9:aa:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:09:E8:F7:E3:CB:0E:C2:1D:A7:C0:E0:B7:24:C7:56:93:6A:21
X509v3 Authority Key Identifier:
keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:10:c5:36:b8:4b:d3:cb:c3:b8:98:cd:55:90:8b:40:67:e3:
50:f4:6f:53:f9:c7:e5:fd:88:3f:db:e9:7b:99:40:dc:ce:82:
56:ff:28:01:49:94:83:08:1e:a6:f2:41:28:6a:b3:ae:bb:15:
86:64:49:70:7f:f5:54:0b:fc:d1:3b:6e:95:02:af:3b:97:c4:
98:b7:13:25:82:b2:74:32:d7:ff:f4:df:17:b2:70:86:59:9e:
b1:f9:22:a1:13:4a:7c:b9:12:4c:db:94:c6:c7:2d:be:eb:e8:
57:28:7e:9b:f2:35:33:9d:a1:b3:29:fc:da:a9:4c:2d:7c:8b:
ea:60:88:29:f6:56:a3:74:fb:e5:53:b4:23:42:bb:2c:29:86:
9b:4b:49:0d:1a:5e:8b:d5:2e:6f:67:93:57:45:18:8a:a6:ed:
41:8a:90:95:d8:65:33:c7:0a:b4:28:72:ec:37:72:5f:87:de:
1f:5a:22:19:cb:b8:f6:0f:fc:55:03:36:84:a9:fb:4f:94:dc:
06:5c:36:bf:fe:96:76:58:b2:cf:82:7b:68:50:c7:44:9b:cc:
61:48:34:a8:67:2f:0c:39:2d:17:8a:92:83:05:97:00:ce:6b:
3b:7e:54:cf:de:62:69:ff:ab:b8:fc:69:ec:ec:15:a0:b0:63:
ea:5a:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:28:38 2026 by rpki-client