
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json)
Hash identifier: 2JFEuTFFxvhHSXYPqLOgKfy8eQABtOgUZzY+e19hygE=
Subject key identifier: 55:1F:2C:92:FE:DF:59:52:9F:8F:5A:60:34:5A:9E:1C:87:C2:18:80
Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
Manifest number: 013D
Signing time: Fri 25 Sep 2026 05:35:21 +0000
Manifest this update: Fri 25 Sep 2026 05:35:21 +0000
Manifest next update: Fri 02 Oct 2026 05:35:21 +0000
Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: 0bMJ6BV+8MoyF2JpysAUiTw5cGZeZqNKlQ+Ul59M2+U=)
2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: v41aBlF3leOW8tter1KV8agjab7xR5AdoEi5mvmK3SE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Validity
Not Before: Sep 25 05:35:21 2026 GMT
Not After : Oct 2 05:35:21 2026 GMT
Subject: CN=6ab60819-1078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:37:10:17:61:1b:f2:03:5d:18:f5:03:79:
e0:2d:e3:f2:7d:e9:33:c1:06:eb:8f:5e:9e:63:18:
ca:8d:f5:b3:8b:0d:3a:7d:6b:ac:e8:b7:34:72:0e:
2e:55:d0:9a:a1:43:a8:e8:e5:aa:27:34:74:21:c4:
c1:1e:21:ed:30:ef:08:dd:b2:17:3f:9e:77:18:6d:
75:7f:57:83:20:c9:c6:ab:a4:7b:e1:a4:97:ca:2e:
d7:32:90:9a:5c:5c:3d:41:98:92:88:d3:63:3e:45:
1e:85:8e:e2:47:db:ce:ac:06:80:85:62:36:f2:08:
11:6e:71:0f:cb:8d:3d:3b:8b:93:76:e9:04:76:df:
fc:ea:f1:e2:d8:d1:ff:66:b1:16:48:e2:a6:e7:23:
89:cc:b8:fb:71:34:a1:7b:e1:03:63:e8:75:f4:2c:
d7:5d:cb:64:4e:9b:7d:1a:34:14:ba:66:48:29:f8:
cd:cf:86:9d:77:80:16:59:cc:db:c3:c6:9e:68:8e:
45:a9:e1:ae:f9:47:1f:41:34:ba:6c:12:b0:d2:9c:
e1:04:5f:c1:bd:4d:49:83:28:60:e0:83:fc:47:54:
f5:95:0e:39:50:09:0d:ad:9e:5c:9f:9d:e2:77:51:
e0:b4:75:ba:9c:72:7f:90:7c:31:da:67:4c:78:88:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1F:2C:92:FE:DF:59:52:9F:8F:5A:60:34:5A:9E:1C:87:C2:18:80
X509v3 Authority Key Identifier:
keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:a2:b8:bc:4a:52:95:f5:1f:f6:5d:9f:a4:fd:00:74:d6:
02:7b:cb:93:9e:f1:9f:ba:34:d3:62:06:e2:d8:00:58:12:76:
b2:50:6d:42:80:93:e1:cd:fe:dd:22:81:62:bd:05:db:15:c0:
38:93:5d:2c:1a:63:2e:43:d6:31:68:c9:50:f5:c4:90:da:68:
e6:03:cf:c1:40:59:79:f3:24:86:2c:02:35:c8:05:98:da:8e:
ef:0a:a6:7e:57:4e:0f:69:a5:84:29:d2:ca:a7:8c:a4:9f:53:
c7:a9:35:c8:14:b0:cb:ca:2c:3c:fe:98:f5:71:c1:8f:a9:56:
40:4e:9c:66:f4:84:c8:fa:5f:4f:a1:bf:6c:25:9e:1e:df:1d:
18:91:5f:ba:0d:34:9d:bc:1f:ff:17:a9:38:50:f6:97:cc:1e:
15:b4:73:59:df:b0:51:e6:80:dc:35:90:74:df:c7:18:ed:dc:
d0:0a:4b:87:f1:bd:7d:ee:a1:0d:22:cc:db:06:64:47:00:fd:
0c:b1:d9:5c:59:8f:26:0b:93:7c:0f:91:5e:15:d6:5c:7d:ec:
8e:e6:cb:0f:39:72:36:2f:8c:88:19:64:64:fd:df:ca:5b:36:
40:0e:d2:52:58:c1:9d:69:65:77:29:5d:dc:c5:f8:43:8a:ac:
31:b8:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:39:12 2026 by rpki-client