
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json)
Hash identifier: hkADvuUawR8WJOhWsQC6TTPMBqWQyc5fDJwoPQvJXWA=
Subject key identifier: 46:E5:DA:81:38:DF:DF:91:E1:89:4A:FD:25:EC:90:50:0F:5E:23:D8
Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Certificate serial: 0B0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
Manifest number: 0AFB
Signing time: Thu 08 Oct 2026 19:29:00 +0000
Manifest this update: Thu 08 Oct 2026 19:28:59 +0000
Manifest next update: Thu 15 Oct 2026 19:28:59 +0000
Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: soxDpevMGVHOw8L00XF2ahi90sspcycKEsiibYqbHJw=)
2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2828 (0xb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Validity
Not Before: Oct 8 19:28:59 2026 GMT
Not After : Oct 15 19:28:59 2026 GMT
Subject: CN=6ac7eefc-1efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:f7:0a:a4:f1:bc:5c:ea:64:f7:8d:7c:08:
6e:56:4b:28:19:a7:71:f2:2b:f1:46:ec:52:26:bd:
51:dd:e0:75:4c:31:20:68:47:a3:99:ba:b4:a8:e6:
a5:d0:00:d7:63:b7:63:94:51:08:56:f5:86:f3:27:
c5:6c:5b:76:ce:57:10:b0:00:1c:98:5a:b9:54:0c:
37:6f:89:36:df:17:d8:26:38:e8:6c:44:19:20:42:
50:9a:e1:5f:6b:3a:e8:f3:14:81:f8:9a:d0:85:1d:
8e:37:34:40:c4:6b:c3:72:7d:61:35:8c:1c:28:d3:
95:fe:a9:dd:ba:a6:1b:39:d3:48:03:34:03:41:5b:
74:c6:9b:ca:81:c9:33:24:59:b5:fa:c7:b4:9f:a0:
ec:29:62:0d:62:6e:a8:fd:5b:29:28:61:b4:e3:f9:
3a:f5:bf:86:a8:cd:ea:4d:69:c2:ff:12:c1:fa:90:
b1:11:ad:d2:0a:56:5b:53:b0:d1:61:34:b9:a1:e7:
27:90:29:ce:ea:ec:65:4c:10:5d:f5:5a:8a:8f:28:
01:3c:bd:6d:53:50:74:b6:13:a2:0b:7c:8d:02:23:
3a:ef:5b:04:89:07:08:f4:3f:66:82:c0:27:b4:59:
05:6c:0d:d9:41:85:b2:f6:72:a3:bb:97:7a:f9:85:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:DA:81:38:DF:DF:91:E1:89:4A:FD:25:EC:90:50:0F:5E:23:D8
X509v3 Authority Key Identifier:
keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:c7:db:fa:66:2c:6d:83:d9:7b:ac:7d:2c:15:4d:e8:2c:29:
08:68:eb:67:b6:18:50:7a:7e:8b:b7:7d:2b:81:07:d0:96:fa:
1d:00:cd:19:96:26:d3:e6:34:2f:98:88:ac:83:af:bc:a5:81:
f2:30:b5:74:2f:1e:0e:f6:87:2b:b9:60:27:73:c0:a1:44:10:
a3:d5:f5:c6:b6:2b:a5:76:62:c5:bf:18:d2:0c:de:36:e2:cb:
62:d2:6c:44:61:2d:83:77:63:80:1c:be:a8:19:35:97:ac:25:
cc:43:68:75:3d:d8:a2:21:d2:c0:c6:d0:8a:e1:37:fe:21:e0:
09:ed:f0:54:03:ce:5f:96:1e:62:bd:fd:0f:02:2d:09:21:d2:
2b:3f:05:5c:3c:b7:e0:33:f3:f7:bc:a8:b6:d2:97:9d:9c:59:
18:d2:40:cb:6e:11:dd:df:27:ae:3e:78:07:45:91:84:eb:66:
65:fd:fa:45:99:db:9d:67:24:79:5b:f1:0b:ef:8f:99:4a:fb:
9a:6a:f8:b9:cc:ec:a9:15:d0:61:8c:ff:53:c5:4c:a1:d5:2b:
aa:53:9f:7b:6d:5b:d0:12:c0:84:fa:89:d1:a7:3d:f6:98:46:
e2:f1:08:eb:38:01:c3:f0:e8:11:8b:1f:ff:b6:4d:c4:df:aa:
3c:ff:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:43:51 2026 by rpki-client