
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File: opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier: +NC75jG6Up4blNfPYg6oqr9wsKa4GY0d5TTKy3A78x0=
Subject key identifier: 86:97:B2:49:07:9C:3C:A2:3D:EF:5E:7A:B6:DA:5E:F7:60:C6:6E:67
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer: /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial: 07FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number: 07F1
Signing time: Wed 22 Jul 2026 21:53:23 +0000
Manifest this update: Wed 22 Jul 2026 21:53:23 +0000
Manifest next update: Wed 29 Jul 2026 21:53:23 +0000
Files and hashes: 1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: rf/eFnm99KDmTZdOJb0vffuom8f12/4jXDJiduv/Mws=)
2: 95FD50623E6511F1AEA6C186CD833773.roa (hash: l7NMwYErPFX+9MH6lT3nSuiEqkaf/DGpFJaT5BlukYk=)
3: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047 (0x7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Validity
Not Before: Jul 22 21:53:23 2026 GMT
Not After : Jul 29 21:53:23 2026 GMT
Subject: CN=6a613bd3-b194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:55:17:89:d4:7f:e1:2b:9f:4b:e9:cd:17:
94:61:13:6e:73:14:a1:eb:8c:33:5e:15:d9:a2:90:
2b:ae:2b:0b:fb:57:61:78:cf:47:7b:a6:b2:a5:32:
23:5f:ef:8b:68:1d:dd:e7:32:78:3a:a6:99:a4:b9:
7a:41:ae:36:4a:dc:c6:11:ac:02:be:33:87:e3:9d:
72:40:42:35:f2:27:d0:1b:b1:77:f6:06:6a:78:b2:
9f:36:a4:03:42:a1:78:a3:83:a8:5a:50:22:0e:bc:
c5:29:d5:d4:e9:f0:06:7a:04:09:0b:bb:9d:43:ab:
a1:a8:e5:18:a6:da:40:33:db:b9:ed:1b:63:c9:16:
15:9e:96:af:f8:e1:72:ab:73:e7:1c:6e:8f:69:1a:
15:ef:93:82:17:b6:f5:51:42:97:0c:d6:9e:38:ec:
37:3c:de:eb:63:7a:76:47:5c:1b:9a:96:b7:29:a9:
13:57:39:c2:96:7e:21:15:88:18:93:89:23:f5:b9:
9b:8b:b4:b5:40:a4:b8:47:d9:2a:14:93:83:1d:29:
8a:b7:99:ca:de:01:8e:7e:0e:b5:51:9a:6d:3f:17:
8e:56:cc:7c:51:e9:df:75:c0:8d:82:9e:e4:4a:fb:
85:98:ee:44:a0:52:94:c2:ed:6e:e7:0a:a2:c3:c3:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:97:B2:49:07:9C:3C:A2:3D:EF:5E:7A:B6:DA:5E:F7:60:C6:6E:67
X509v3 Authority Key Identifier:
keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:ab:81:d1:f2:b1:1e:da:47:c9:b2:b8:77:f2:60:2e:4c:
1d:0a:d2:ff:2b:b5:84:b3:34:01:99:3b:e9:f8:a8:91:b9:d5:
1e:f9:20:0a:af:89:24:8c:8b:b0:7e:da:19:d8:0a:75:5f:37:
e3:35:86:bd:1d:fe:bd:84:f4:25:82:74:e0:c1:b0:36:12:60:
0f:c9:bf:78:57:af:1b:b6:8e:20:2f:e1:b1:87:e4:ca:8b:d3:
f6:2d:a1:30:4b:fa:c8:3e:e3:9c:83:93:16:46:d0:46:c4:0f:
c7:fe:02:fc:fe:a1:82:3e:bf:03:56:b8:5c:3c:f2:fc:31:f0:
a1:da:59:87:32:41:d2:f9:93:b6:fd:55:a4:95:7f:c3:ae:7e:
48:7f:77:09:88:37:76:af:34:d5:04:f7:b8:3b:e9:97:7a:20:
a9:d1:60:2b:65:a2:20:50:23:d7:01:39:ee:04:b9:1e:f8:58:
e5:b7:41:b0:3f:6b:87:97:7e:3e:c9:9e:66:1b:42:f6:af:79:
4d:43:b6:90:a0:43:b1:b4:23:c6:57:66:46:57:ca:f3:fa:37:
bd:86:b6:07:69:2e:49:66:8b:20:4e:74:b1:72:e2:d4:e2:eb:
9a:cd:a7:85:43:99:3a:9f:53:88:a6:c6:81:bb:82:93:59:ef:
78:ae:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:04 2026 by rpki-client