
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
File: OpBsYeE9uJ5h3MrxA2oyvtqof18.mft (raw, json)
Hash identifier: Fm/lJ394y1ZtfipAAXweDFxRPUCbe0ShzR62iUjQOOI=
Subject key identifier: 5E:2B:B6:B9:1D:0D:77:24:92:64:F2:31:F9:21:9A:41:A9:6D:6F:67
Authority key identifier: 3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
Certificate issuer: /CN=A914855F/serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
Manifest number: 58
Signing time: Fri 09 Oct 2026 08:59:58 +0000
Manifest this update: Fri 09 Oct 2026 08:59:58 +0000
Manifest next update: Fri 16 Oct 2026 08:59:58 +0000
Files and hashes: 1: OpBsYeE9uJ5h3MrxA2oyvtqof18.crl (hash: VnBEWNgiBKA+V22rYULfokyzuacffZCChPDt1A9cgjI=)
2: 1B095A06869811F184DE0C3C6EA30FBC.roa (hash: f8BDbd1V8OOTxeth43R3JsquIgRX5kFT2OaagVfMyiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914855F, serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Validity
Not Before: Oct 9 08:59:58 2026 GMT
Not After : Oct 16 08:59:58 2026 GMT
Subject: CN=6ac8ad0e-37da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:c7:79:80:b3:12:3a:f7:74:fe:0e:2b:a8:
ef:15:5b:00:c7:bb:44:fb:70:c9:cc:4c:0e:ff:a7:
19:b4:8c:95:8d:c3:c2:79:4f:3a:78:6d:b4:d1:9e:
86:cb:19:3d:75:cc:33:8a:8e:58:2c:b9:eb:06:a3:
87:7d:d0:df:fd:52:99:ff:84:fc:5f:f5:0f:c1:82:
12:9c:08:1e:f4:eb:5a:c0:f3:04:6c:dd:17:9e:bd:
83:9f:7c:1c:cc:70:9c:c7:ca:22:5f:84:2b:e8:46:
ff:e1:15:df:2f:d6:04:7c:09:55:eb:b7:18:d3:dd:
f6:27:05:d2:e8:43:11:56:b2:3f:08:91:69:39:ef:
ff:84:03:fc:b1:78:32:9a:ef:cc:e9:ab:5e:18:4c:
65:de:97:17:63:08:28:a1:b3:23:fd:68:7f:20:25:
44:2f:1d:b2:cd:3b:23:9a:0e:9c:be:75:49:28:04:
c8:a5:9d:fa:fd:34:48:56:e0:f9:8e:15:48:37:c4:
4a:b8:ef:bb:89:68:79:0b:84:4f:b9:1a:97:10:7c:
3e:30:76:d5:a1:ff:f3:c6:da:b6:3f:90:91:00:0e:
16:74:0c:ce:a4:0c:6d:2f:00:30:53:be:79:fa:c3:
bf:5a:2f:a7:a2:21:53:19:f5:3f:70:e0:04:4f:13:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2B:B6:B9:1D:0D:77:24:92:64:F2:31:F9:21:9A:41:A9:6D:6F:67
X509v3 Authority Key Identifier:
keyid:3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:c1:15:60:9a:05:ec:63:6e:23:49:f3:34:89:5a:4c:8d:79:
5d:3e:1a:57:11:ff:1c:88:9f:45:34:cd:d1:2a:a5:7a:1b:4b:
fe:39:e0:0a:67:9b:fa:69:80:fd:6d:1f:e4:b1:5f:9f:d8:b6:
0b:8c:8d:1d:e8:c0:9d:50:94:74:12:6b:5b:2b:e3:00:1a:95:
d8:a2:2a:a3:70:f0:00:e5:14:51:e8:38:2b:5a:57:ec:1b:4f:
12:ab:fc:d0:82:22:13:8d:09:24:c2:d1:c1:22:a4:2f:64:00:
36:65:ca:5e:a5:da:bb:1f:c6:3b:8d:e6:e8:8c:69:ee:d3:44:
ef:c1:ea:82:fb:f7:dd:5f:2f:68:d8:b2:18:1c:a9:ab:f6:db:
13:a6:13:04:85:30:e1:d5:10:b5:97:4d:93:14:51:2d:46:d7:
a7:b8:d8:5e:2e:6e:86:4e:42:ab:97:37:1b:2e:77:b2:d7:a9:
8c:5d:23:1b:09:b3:1e:1e:c6:73:32:ca:b1:5e:5d:3a:a8:ce:
ff:29:53:d8:18:8a:23:42:29:51:06:74:c0:72:ae:5f:33:81:
8f:5c:a6:52:2b:ff:68:07:70:7e:26:10:23:1e:21:8f:83:ee:
2a:ea:61:b8:00:13:b3:7a:8b:d0:cc:f7:8e:41:cf:1c:f7:65:
8e:b8:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:33:38 2026 by rpki-client