
$ rpki-client -vvf rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
File: OpBsYeE9uJ5h3MrxA2oyvtqof18.mft (raw, json)
Hash identifier: 6g5eHLNf23e/Gk1HYeHXbsJgXDi4hrK1pdIpxIbpdDM=
Subject key identifier: 16:E9:C8:74:4E:7A:51:6C:CA:45:64:CD:56:B2:52:AD:47:94:95:46
Authority key identifier: 3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
Certificate issuer: /CN=A914855F/serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
Manifest number: 30
Signing time: Thu 23 Jul 2026 13:12:12 +0000
Manifest this update: Thu 23 Jul 2026 13:12:12 +0000
Manifest next update: Thu 30 Jul 2026 13:12:12 +0000
Files and hashes: 1: OpBsYeE9uJ5h3MrxA2oyvtqof18.crl (hash: y46KLTDVy/utdNSbjf7YLxkxMvtOPHh0MVHcGIZpKLA=)
2: 1B095A06869811F184DE0C3C6EA30FBC.roa (hash: f8BDbd1V8OOTxeth43R3JsquIgRX5kFT2OaagVfMyiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 13:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914855F, serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Validity
Not Before: Jul 23 13:12:12 2026 GMT
Not After : Jul 30 13:12:12 2026 GMT
Subject: CN=6a62132c-a6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:65:0c:d8:71:86:8d:39:07:7e:f4:3c:f7:
e1:7b:c5:78:db:65:12:69:c7:3f:a7:97:9c:03:24:
6a:29:7f:b8:88:41:f7:e6:a3:43:f8:b0:6e:a5:06:
f7:e4:e2:8f:4b:34:bf:8b:eb:49:b1:91:24:84:39:
db:90:7e:bc:dd:08:23:57:36:1e:e6:9f:47:2c:f3:
42:cb:cf:a2:57:0e:28:87:42:1c:e4:70:a5:bb:ff:
01:0d:6f:f9:9f:a1:c2:ae:4a:88:a8:37:0b:7f:ad:
87:ac:7d:1f:49:92:a8:10:23:15:d8:64:5d:70:f2:
02:b3:d2:31:f3:a4:10:d8:af:96:4e:d2:a3:c1:34:
4e:aa:9b:f2:b9:65:14:0b:a6:09:ec:b7:6b:61:2a:
cc:2e:0e:c9:27:94:a1:f9:9a:3c:10:58:5e:74:53:
51:6d:24:3c:81:6d:ed:a3:19:84:9f:e3:38:7c:d0:
ba:8e:75:69:f0:7c:4a:37:30:99:48:b2:4d:f1:5c:
fe:57:34:2e:b8:53:b0:98:97:76:3b:e7:0f:d7:34:
a1:fe:cf:50:41:32:e2:54:da:b8:77:c0:45:b7:7d:
4f:3c:58:5e:4b:b4:cd:14:62:4f:8b:1a:3b:60:f8:
65:cc:71:76:be:48:77:91:cc:69:4e:c1:f4:24:9d:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:C8:74:4E:7A:51:6C:CA:45:64:CD:56:B2:52:AD:47:94:95:46
X509v3 Authority Key Identifier:
keyid:3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3f:44:aa:e6:99:44:54:c1:24:d0:d6:bd:77:84:b8:69:c5:
3c:72:6c:3e:0a:d6:d7:7c:a9:7e:1e:61:a4:7e:06:6c:fa:47:
34:e7:d0:bd:44:06:04:50:9e:a2:1b:7a:7f:f6:82:f5:ef:e0:
20:4b:55:76:54:2f:68:1a:f6:af:34:1d:4b:48:8e:82:72:16:
86:bb:75:7a:94:9d:30:1b:61:6c:71:14:a1:6d:2b:84:69:e2:
6b:38:06:6c:84:01:ad:ff:52:7c:b1:65:55:63:f5:c7:b3:97:
d0:73:d1:fe:e4:de:fd:41:d6:b9:35:5f:26:a5:da:b1:18:2c:
68:20:5b:11:68:00:b2:b8:54:55:71:76:78:89:b8:b0:f7:1e:
91:a0:d3:27:77:d1:05:3e:3c:ff:41:5b:30:27:ea:d9:8f:32:
63:66:8b:85:04:69:56:37:1e:65:0e:09:a6:9b:78:ba:31:6f:
6a:7e:17:e3:c8:9e:6c:01:ad:ec:1b:f4:7c:09:cb:7f:1f:eb:
c2:ad:97:71:86:ce:2d:3c:85:bd:b9:33:ed:c3:8a:dd:d2:e7:
ac:c5:4c:c9:ad:d1:d6:7b:87:a0:95:0f:85:66:e4:98:66:f1:
d1:c6:f7:92:5f:e2:d6:99:35:d1:cd:1c:d7:59:74:75:ac:30:
23:79:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:59 2026 by rpki-client