
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json)
Hash identifier: abCTxzIvvNARKJanGT0v4Yle0Y+o//j9xcUv5ftyV2k=
Subject key identifier: 52:18:F9:6E:E5:CB:02:6F:53:7C:4E:0D:E0:98:F5:27:BD:45:25:19
Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Certificate serial: 0A6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
Manifest number: 489B
Signing time: Tue 12 May 2026 15:46:43 +0000
Manifest this update: Tue 12 May 2026 15:46:43 +0000
Manifest next update: Tue 19 May 2026 15:46:43 +0000
Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: XrZgm6ORCJX9sOuJM4Xw4C3JRIN/6A3WBWohmqELdWY=)
2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: FehOg1jQMA1kFJnWyr7fIuCvYAwffMy7bJWnLWfMfbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2671 (0xa6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Validity
Not Before: May 12 15:46:43 2026 GMT
Not After : May 19 15:46:43 2026 GMT
Subject: CN=6a034b63-47e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:2c:c2:15:cc:70:4d:b8:9b:b9:05:7f:8d:
8b:a3:e9:74:24:c3:5e:dc:15:b9:81:6a:d0:97:dd:
b3:68:2b:63:19:e5:a1:79:e6:34:02:96:ed:80:69:
dd:35:28:a9:8c:2e:32:cb:98:47:8d:3c:de:80:a8:
f0:6a:d1:22:a2:67:40:d1:e6:19:9b:cc:59:5e:41:
6c:d7:1b:73:05:73:80:6c:ae:d6:fd:55:74:84:4a:
34:02:de:41:7d:48:70:a5:ed:66:d6:dc:1e:7a:10:
e5:68:24:55:5f:d4:8f:de:2e:98:86:bb:ae:37:3f:
81:0f:79:fe:89:df:43:f6:3b:f8:37:31:88:dd:80:
7d:00:58:6f:d0:63:73:8c:9f:36:1c:f3:27:39:a1:
55:0d:ed:63:74:af:7d:08:20:a9:c5:d4:84:68:78:
68:eb:52:47:0b:ec:87:2c:b6:ef:48:8b:78:91:5d:
49:e1:34:75:e5:2d:1e:99:f7:83:ed:10:0c:70:76:
5f:36:3b:b7:73:19:84:3a:0f:d4:cb:ed:23:81:73:
e0:b5:53:ac:20:3f:92:78:2f:5a:94:45:4a:9d:5d:
cc:41:ff:fd:70:c4:8d:b8:59:4b:17:a9:49:a1:d8:
db:d6:8d:5d:43:99:63:d5:bd:96:de:a8:7b:24:4a:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:18:F9:6E:E5:CB:02:6F:53:7C:4E:0D:E0:98:F5:27:BD:45:25:19
X509v3 Authority Key Identifier:
keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:1d:ba:1f:b6:80:0e:f6:bd:64:ec:c9:9e:08:70:cd:a0:54:
b2:15:a1:da:27:94:14:b6:26:69:c1:86:e8:22:15:a3:1c:fb:
a7:89:2e:fa:9e:e0:a9:a0:27:e3:fc:9b:b2:c9:8c:5f:4d:ab:
c6:66:08:5e:8a:5e:4b:bf:b9:ac:0c:6a:da:91:e3:02:68:09:
97:82:0d:e6:6b:bb:d6:2f:40:d5:83:e9:0e:69:c4:6c:fd:2e:
f2:ee:7e:2d:9f:03:0a:11:93:a6:22:73:79:dd:c9:cc:4a:3e:
c3:2a:a8:ce:7e:74:79:94:a5:cc:90:b9:42:10:2c:63:17:24:
24:30:4e:e3:ce:2d:f1:31:ae:0a:f5:e9:60:74:c7:9d:be:df:
95:a9:98:ce:01:4a:5e:ee:e9:4d:0f:86:38:91:12:d3:d5:29:
73:b5:33:b1:e9:8e:40:72:02:15:41:f0:fa:2e:32:b9:66:81:
52:81:37:af:1a:f0:60:c8:68:50:f3:7c:91:db:72:2e:dd:3e:
45:b7:9c:db:ef:f7:6f:37:e7:b2:19:08:28:15:9a:2e:13:73:
dc:b5:01:38:78:b9:19:d5:0a:42:8e:d6:46:15:d9:75:c5:00:
15:a4:8e:c5:a1:9e:ef:b4:25:e7:64:75:71:89:6d:d8:e0:5b:
78:e4:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:04:05 2026 by rpki-client