
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File: opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier: dqWFA3awTmGMAC2E9JKUelw1WLemrWE3IAoJ5XK8Ows=
Subject key identifier: 08:6B:96:FA:AA:53:C5:6C:58:08:25:4B:F9:C2:6F:F3:4C:BD:CE:03
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer: /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial: 07B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number: 07AD
Signing time: Tue 24 Mar 2026 21:11:52 +0000
Manifest this update: Tue 24 Mar 2026 21:11:51 +0000
Manifest next update: Tue 31 Mar 2026 21:11:51 +0000
Files and hashes: 1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: YwZatkPHvstDMsdL+Mb5ybXA6xPKQxtHafw6gpAbcBw=)
2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1975 (0x7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Validity
Not Before: Mar 24 21:11:51 2026 GMT
Not After : Mar 31 21:11:51 2026 GMT
Subject: CN=69c2fe18-c928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:8b:c9:ee:1c:bd:6b:f7:56:d1:42:37:fd:
db:1d:c0:dc:ca:c6:73:11:ef:10:2b:79:37:ea:a2:
c7:0c:a6:42:d4:45:b7:7a:79:4f:f8:7d:94:99:4b:
6a:41:40:78:0b:89:f2:f8:ff:0b:52:09:3b:e5:37:
d8:9a:24:58:91:17:ff:f7:cb:25:92:23:58:67:9b:
c3:69:4c:fd:32:2e:c7:03:12:47:e5:3c:00:57:a6:
49:a4:55:31:2e:e4:69:b2:37:be:94:ca:c5:14:e4:
7e:fd:75:2e:51:8d:cf:4c:fc:43:bf:54:ce:0d:f4:
c7:0f:f9:f3:ab:08:7e:e1:f4:36:19:19:be:f7:2f:
3d:00:f5:56:c2:9c:83:59:56:e3:85:36:ee:85:01:
bd:7d:70:5b:a0:fa:b2:73:00:c0:a3:28:d6:8d:13:
f6:7d:69:45:b0:96:d8:91:ee:b6:75:3f:ee:88:2b:
71:de:97:ab:21:ca:6a:e2:73:83:c4:d3:1f:3a:b7:
fc:6e:5f:f2:92:ea:0a:51:af:11:e2:73:e1:3b:5d:
b4:dc:5a:49:44:e3:bf:c2:90:ea:2d:e7:9d:8d:b2:
4c:15:1b:a0:bd:95:1a:0d:d8:7a:93:36:34:b4:8b:
78:89:e5:6b:fc:eb:1c:e5:15:90:0e:68:a2:4b:b3:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6B:96:FA:AA:53:C5:6C:58:08:25:4B:F9:C2:6F:F3:4C:BD:CE:03
X509v3 Authority Key Identifier:
keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c6:0a:b1:05:86:26:09:39:63:5a:c4:b6:99:d4:8f:13:78:
6c:13:dc:e3:36:8c:98:88:b7:9d:e8:03:fa:04:bf:ca:d5:ee:
f5:f9:d4:90:c5:ec:9d:3f:d9:f4:a3:7f:5d:1a:8c:cb:8d:63:
21:e5:f8:80:0b:52:84:f6:c8:69:03:89:4f:8f:1e:44:a1:70:
44:9d:e9:d6:77:45:e4:73:3e:99:f8:bb:3b:f7:a8:00:57:58:
d9:d9:2c:02:cf:96:18:20:39:3f:49:8a:aa:20:eb:22:b5:88:
ab:70:35:74:a2:8a:f4:b2:60:38:f1:da:39:9d:3f:33:8e:09:
be:20:3c:4b:cc:c4:6d:60:ba:b8:bc:38:c1:97:e9:1b:f0:f6:
ac:85:ee:67:18:7d:ea:03:e6:8a:9d:fd:3c:10:d3:5e:e3:6a:
0e:6c:e6:da:96:00:64:5c:21:12:d1:ec:21:ab:a0:0e:87:92:
e4:6b:1d:7f:7a:c0:1c:3d:75:81:8b:fe:37:62:ba:fd:cd:46:
e3:34:73:00:87:48:30:54:62:9b:3f:fd:bc:ac:ad:fb:ee:e3:
0b:68:e7:ff:b0:49:66:e3:8d:3e:25:f5:ef:f6:f4:a4:25:a0:
f7:c0:f2:45:d7:ff:44:90:2f:53:b9:19:91:91:a2:91:1e:a2:
3c:75:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:16:06 2026 by rpki-client