
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
File: Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json)
Hash identifier: o4eFDr1KrenVzGSWlGCehaTqhRr6huWVlG7+eSYdLNs=
Subject key identifier: 5B:DC:1A:AF:1F:A9:B5:43:EE:64:08:67:D4:6B:20:96:43:AE:51:48
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Certificate issuer: /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
Manifest number: 94
Signing time: Wed 23 Sep 2026 07:11:52 +0000
Manifest this update: Wed 23 Sep 2026 07:11:52 +0000
Manifest next update: Wed 30 Sep 2026 07:11:52 +0000
Files and hashes: 1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: ot2LK8XAz++OxY1Yn8cAl6wQcMNilNbmHuD5sjkyZ2w=)
2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Validity
Not Before: Sep 23 07:11:52 2026 GMT
Not After : Sep 30 07:11:52 2026 GMT
Subject: CN=6ab37bb8-5aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:14:44:64:d3:56:b4:c2:dd:cd:57:44:1c:
63:6a:c9:89:92:38:d1:ce:a3:10:45:72:d1:a9:a4:
37:12:95:38:e6:97:d7:ea:59:f8:cb:25:ff:07:f6:
0b:b9:02:97:81:27:8a:aa:fe:ca:e1:93:9c:b0:1e:
29:39:49:8f:52:b7:3e:eb:ff:b1:79:9c:de:12:06:
30:aa:41:f3:04:70:c4:34:75:f5:ca:28:de:17:f2:
33:cd:ab:26:6d:b0:eb:ab:f3:bc:dc:da:f8:0d:1e:
9e:06:36:dd:0f:f9:4d:19:40:e6:d4:57:30:7b:25:
00:4a:ff:be:c5:b6:6f:54:b7:0f:e1:b9:a5:e8:24:
87:48:b4:0a:c1:e6:a3:15:47:02:19:c5:98:53:02:
a4:a2:a8:d0:b3:c0:9a:6e:18:c8:b7:6b:27:e5:a3:
00:69:9d:2d:35:76:b1:4a:01:b4:77:4d:c9:47:1c:
ac:07:34:a7:fa:6b:a8:dd:3e:05:ec:3f:80:3c:a4:
82:20:08:6e:7d:83:00:33:24:b8:12:72:5a:4d:2f:
8c:26:9f:5f:1c:d6:d6:4a:9f:db:41:14:40:15:95:
6d:bc:92:25:11:2c:cf:b2:36:33:b5:bd:a8:66:f1:
16:26:ff:76:15:09:3f:99:44:e0:61:0f:4e:d8:02:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:1A:AF:1F:A9:B5:43:EE:64:08:67:D4:6B:20:96:43:AE:51:48
X509v3 Authority Key Identifier:
keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a7:5f:ca:fd:86:51:b9:7e:80:53:ec:14:fa:11:82:ec:58:
d8:7e:db:7d:fd:a3:f4:1d:c1:bd:07:4f:e1:0a:20:4d:db:38:
32:f6:e9:c6:f8:22:7a:42:e5:d4:f5:2f:0c:f8:e2:18:83:48:
ce:6a:72:da:f3:15:91:92:5d:b3:59:7d:73:5d:a4:88:96:46:
b5:53:0e:11:d8:d4:7c:c5:66:5c:85:59:b7:94:4a:f5:ff:27:
c7:91:4c:76:43:57:e5:6e:8f:73:1e:84:97:93:68:f3:2e:5a:
ff:97:10:e9:ec:23:ff:3a:05:96:da:39:e0:46:e5:cc:e7:62:
8d:37:20:96:b8:60:b7:80:71:f7:9d:40:cc:90:6e:7c:7c:0e:
33:3e:a2:fc:2f:1e:c2:f0:28:05:50:02:39:92:b5:ba:78:d0:
a2:e7:49:99:20:ba:c7:b0:c8:83:ab:e2:c3:fb:a2:71:a9:7d:
48:ce:ca:0c:88:48:e8:b4:32:8e:6c:f7:ac:54:44:b8:6f:03:
21:83:01:c9:13:84:60:8e:25:e8:d8:3a:fc:92:8e:86:17:f7:
39:89:84:43:96:9d:eb:64:fe:7f:64:d2:a0:55:43:7f:cf:50:
ed:ad:3c:03:cc:83:a0:98:7c:b3:33:28:a4:f2:d7:d8:bd:98:
48:cd:90:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZCRjMxMTAvBgNVBAUTKDNBNUZCNUUxNzM4RUUwOTRDNUI5MDhCMzc5MUM2OUMw
Nzc3REFFMUUwHhcNMjYwOTIzMDcxMTUyWhcNMjYwOTMwMDcxMTUyWjAYMRYwFAYD
VQQDEw02YWIzN2JiOC01YWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmUkURGTTVrTC3c1XRBxjasmJkjjRzqMQRXLRqaQ3EpU45pfX6ln4yyX/B/YL
uQKXgSeKqv7K4ZOcsB4pOUmPUrc+6/+xeZzeEgYwqkHzBHDENHX1yijeF/Izzasm
bbDrq/O83Nr4DR6eBjbdD/lNGUDm1FcweyUASv++xbZvVLcP4bml6CSHSLQKweaj
FUcCGcWYUwKkoqjQs8CabhjIt2sn5aMAaZ0tNXaxSgG0d03JRxysBzSn+muo3T4F
7D+APKSCIAhufYMAMyS4EnJaTS+MJp9fHNbWSp/bQRRAFZVtvJIlESzPsjYztb2o
ZvEWJv92FQk/mUTgYQ9O2AKrBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvcGq8f
qbVD7mQIZ9RrIJZDrlFIMB8GA1UdIwQYMBaAFDpfteFzjuCUxbkIs3kcacB3fa4e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkJGMy9FNTBDOTlCNEQ2
NjAxMUYwQjJBNTRCOTUwQkI0M0UxMy9PbC0xNFhPTzRKVEZ1UWl6ZVJ4cHdIZDly
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09sLTE0WE9PNEpURnVRaXplUnhwd0hkOXJoNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkJGMy9FNTBDOTlCNEQ2NjAxMUYwQjJBNTRCOTUwQkI0M0UxMy9PbC0xNFhPTzRK
VEZ1UWl6ZVJ4cHdIZDlyaDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXKdfyv2GUbl+gFPsFPoRguxY2H7bff2j9B3BvQdP4QogTds4MvbpxvgiekLl
1PUvDPjiGINIzmpy2vMVkZJds1l9c12kiJZGtVMOEdjUfMVmXIVZt5RK9f8nx5FM
dkNX5W6Pcx6El5No8y5a/5cQ6ewj/zoFlto54EblzOdijTcglrhgt4Bx951AzJBu
fHwOMz6i/C8ewvAoBVACOZK1unjQoudJmSC6x7DIg6viw/uical9SM7KDIhI6LQy
jmz3rFREuG8DIYMByROEYI4l6Ng6/JKOhhf3OYmEQ5ad62T+f2TSoFVDf89Q7a08
A8yDoJh8szMopPLX2L2YSM2Q7g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:35 2026 by rpki-client