
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json)
Hash identifier: ynC4BjjNFk9p7qVKkaclmH5xOPWoJm+D3AKmj5wl0Ss=
Subject key identifier: E7:63:AD:7B:5C:2D:71:E1:2A:B5:76:37:0F:FA:F6:7C:DD:4F:09:B7
Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Certificate serial: 380B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
Manifest number: 36DD
Signing time: Tue 22 Sep 2026 14:24:35 +0000
Manifest this update: Tue 22 Sep 2026 14:24:34 +0000
Manifest next update: Tue 29 Sep 2026 14:24:34 +0000
Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: hcdKTUZj/n42lAtwN4dqGSuVlU0+djsQHBOel5zJw/8=)
2: rQSAPyGUXtGkb8Ui1URzc0kbX3M.asa (hash: e5gGUoXTbgO3Bqx/dg2NaRASCiNn+/PB5Y+WJNAkgGg=)
3: DDBF75E8AC0F11F18FA02B357011F970.roa (hash: XkgCJ50UlAocEgPti+/VSXFYIwUrWzt3O9MV4EIAwHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl
rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14347 (0x380b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Validity
Not Before: Sep 22 14:24:34 2026 GMT
Not After : Sep 29 14:24:34 2026 GMT
Subject: CN=6ab28fa3-67f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:31:aa:63:14:2b:0e:5f:8d:e5:58:18:5a:
05:07:86:6e:d3:b5:35:6d:c5:58:de:24:90:28:26:
df:65:b6:c9:3f:df:74:8a:6a:db:cf:b9:f9:5c:95:
9e:ad:e1:d4:cf:3d:de:e1:5d:aa:07:7e:75:92:1a:
15:72:c2:73:a4:2f:c8:d1:36:04:49:1f:10:8e:c1:
48:92:cc:a7:ef:b9:82:2c:a0:2f:26:e4:93:f6:f7:
ee:3d:dd:79:f2:fd:98:7e:e6:20:ad:a6:31:9e:f4:
3a:49:4a:e2:ea:1f:90:b2:66:af:c4:8c:01:9d:6d:
1c:ed:a5:f4:92:14:b3:aa:84:06:41:78:18:69:28:
93:ed:ec:d7:84:3d:07:40:75:c7:ca:2d:eb:93:e8:
ba:b1:0b:02:cc:3e:9c:e7:ac:40:57:5a:f3:10:59:
ea:a7:de:2b:33:3a:0d:80:5d:55:d0:e7:3e:b8:6e:
b2:f7:61:d2:8e:8e:bf:33:86:dc:8d:39:f2:c3:89:
b5:44:5a:46:7c:e8:96:96:6a:5d:20:d2:88:b9:71:
b0:56:03:2a:c4:a6:8f:01:3b:b9:34:66:4e:d5:42:
54:5f:be:f3:80:c5:ec:23:97:07:fe:bf:c0:27:17:
a3:78:33:45:a8:d2:d5:f3:12:c5:d7:7d:2c:4a:3d:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:63:AD:7B:5C:2D:71:E1:2A:B5:76:37:0F:FA:F6:7C:DD:4F:09:B7
X509v3 Authority Key Identifier:
keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:aa:0e:df:c7:49:ef:db:a4:61:30:04:83:1d:bb:35:a3:c0:
6f:0e:47:01:f7:3c:a6:84:f3:44:24:51:02:46:b8:39:b7:54:
f7:5a:7b:55:ca:20:9b:bc:20:0a:33:7a:ad:62:f8:f8:af:53:
a5:88:8c:6f:1f:27:ea:f5:92:18:29:08:7e:ea:7e:07:65:bd:
5b:ec:24:3a:62:6d:9a:ce:5b:a1:83:f1:69:9d:56:98:76:90:
ee:69:d4:23:dd:fe:11:85:c3:75:55:03:8c:0b:07:22:8f:5a:
06:a4:a1:b3:48:3c:81:b6:b9:97:20:49:68:1c:10:10:dd:02:
fa:a3:e1:5e:12:24:3e:a7:b4:60:0a:0d:83:62:de:91:28:b5:
48:43:28:5b:9c:b0:12:b7:fd:99:c3:6d:17:74:0f:9f:6c:ef:
b8:00:eb:a9:71:f3:99:c6:c2:a1:32:0b:c9:01:e2:75:11:68:
17:9a:5a:ec:c5:eb:8f:2e:e3:ef:65:87:d1:c6:c9:cb:92:b1:
de:fe:84:aa:24:72:99:ac:8c:ce:98:d2:d4:7d:47:d7:ce:e7:
9b:63:66:79:c0:2f:27:ac:22:d4:ce:ed:43:2d:b6:48:bf:96:
37:75:2e:68:7d:61:5b:f6:2a:68:a9:37:15:30:db:d2:de:e6:
58:fe:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:17:30 2026 by rpki-client