
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
File: oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json)
Hash identifier: dQ3bydZpwm9D/DDM/TLvR5rQ8rr9z2S9+8GoMFgp5Nk=
Subject key identifier: B0:2A:9A:92:A3:77:B1:51:45:3A:10:F2:AA:FA:54:07:25:C4:33:A5
Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9
Certificate issuer: /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
Manifest number: 75
Signing time: Thu 23 Jul 2026 04:56:38 +0000
Manifest this update: Thu 23 Jul 2026 04:56:37 +0000
Manifest next update: Thu 30 Jul 2026 04:56:37 +0000
Files and hashes: 1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: 6jCPMhszzRdQ+AdZLsID1jz1xibJPdO75xAPrYbhIco=)
2: 7D6CF15E299511F1AB285139C2833773.roa (hash: zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl
rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
Validity
Not Before: Jul 23 04:56:37 2026 GMT
Not After : Jul 30 04:56:37 2026 GMT
Subject: CN=6a619f06-f1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:7b:c0:00:30:f6:f0:e8:53:a6:25:59:da:
5c:5b:0e:84:62:ad:58:a0:e5:94:0f:f5:2c:d1:82:
2e:ab:5b:09:de:04:83:db:a6:b7:11:05:1b:65:00:
bc:2b:2f:e0:7c:64:a5:f7:e2:d4:ed:e1:3b:b4:f6:
8c:cb:14:fb:26:06:4d:ee:05:f6:93:e9:92:48:48:
57:f1:37:d0:0d:a0:99:ba:8c:b4:f4:67:5f:7c:8d:
29:5d:5a:02:61:68:ae:98:f8:48:41:30:2f:73:fa:
d2:0f:df:86:22:33:87:87:2b:54:09:c7:a3:f4:95:
a2:99:3b:f3:88:18:a6:94:ec:2a:2f:7b:af:cc:2e:
d3:b2:f5:11:5c:b1:06:77:f7:b9:7b:8a:ab:93:d1:
1d:cb:06:79:4e:d4:c9:b7:91:fd:f9:e8:d3:69:e8:
cc:26:73:d2:c8:85:e8:7e:6a:f6:47:9d:a7:c6:54:
c4:62:ff:e0:fc:61:a0:12:f3:24:6a:51:ab:83:1d:
2d:f5:60:f8:29:57:8a:75:cc:9c:eb:50:05:cb:d2:
71:13:3d:f4:e6:10:14:5b:3a:f1:25:9b:d6:80:75:
4f:e6:4a:4d:31:d3:07:71:1c:65:88:01:81:68:6a:
fe:68:0f:05:e3:df:6f:e9:8e:e8:b5:46:3a:70:09:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:9A:92:A3:77:B1:51:45:3A:10:F2:AA:FA:54:07:25:C4:33:A5
X509v3 Authority Key Identifier:
keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e3:24:7d:ed:3c:fe:62:a3:e1:49:a7:9f:90:c9:b4:8d:8a:
16:9b:d9:d8:a0:63:f1:aa:42:ff:1f:e3:c7:31:8e:9b:fd:6e:
67:40:cc:fd:25:b7:49:b4:42:2a:2c:c3:8a:25:e0:4b:e3:7a:
6f:96:19:68:6a:21:b2:b3:75:0f:23:e7:ec:b1:ed:58:d1:f2:
cc:7e:9c:a9:e5:b4:0e:73:46:8a:07:61:a1:28:d6:ba:6e:e4:
f6:0b:8f:f2:db:a2:8f:71:3c:66:e3:9b:65:0d:05:fc:10:a7:
dc:d7:ed:6f:ba:40:09:3c:bc:3d:cf:b3:53:2f:ed:c4:a6:dc:
24:5b:00:ab:dd:1e:06:82:ae:c1:32:22:40:1f:0a:9d:72:e6:
ee:e5:67:8f:5b:48:d1:59:13:61:4a:58:e1:ae:d8:b3:32:6f:
42:fc:3d:06:92:56:b9:41:76:33:16:0f:bd:0f:87:e5:b0:b3:
93:aa:30:f8:f9:f7:ec:d9:1c:d1:4f:bb:89:42:39:c2:71:8c:
96:8a:9d:39:37:e1:24:83:52:78:6a:e7:d5:c1:1d:2c:13:74:
67:47:50:e8:a9:dc:ed:be:b3:56:ad:b7:70:6c:50:a7:0d:06:
e1:86:8d:25:09:cc:62:ca:7b:93:56:56:be:c1:8a:79:70:4d:
9d:95:f8:7c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QjI5NzExMC8GA1UEBRMoQTBGQ0JFOUJDQjQzMjhBOUU4QkNDQTFGNUUxNDk2QUND
MkNFMkVEOTAeFw0yNjA3MjMwNDU2MzdaFw0yNjA3MzAwNDU2MzdaMBgxFjAUBgNV
BAMTDTZhNjE5ZjA2LWYxZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCx6HvAADD28OhTpiVZ2lxbDoRirVig5ZQP9SzRgi6rWwneBIPbprcRBRtlALwr
L+B8ZKX34tTt4Tu09ozLFPsmBk3uBfaT6ZJISFfxN9ANoJm6jLT0Z198jSldWgJh
aK6Y+EhBMC9z+tIP34YiM4eHK1QJx6P0laKZO/OIGKaU7Cove6/MLtOy9RFcsQZ3
97l7iquT0R3LBnlO1Mm3kf356NNp6Mwmc9LIheh+avZHnafGVMRi/+D8YaAS8yRq
UauDHS31YPgpV4p1zJzrUAXL0nETPfTmEBRbOvElm9aAdU/mSk0x0wdxHGWIAYFo
av5oDwXj32/pjui1RjpwCWTLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsCqakqN3
sVFFOhDyqvpUByXEM6UwHwYDVR0jBBgwFoAUoPy+m8tDKKnovMofXhSWrMLOLtkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMjk3L0JCRjI4RERBRDk5
NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tub3ZNb2ZYaFNXck1MT0x0
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvb1B5LW04dERLS25vdk1vZlhoU1dyTUxPTHRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC
Mjk3L0JCRjI4RERBRDk5NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tu
b3ZNb2ZYaFNXck1MT0x0ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCd4yR97Tz+YqPhSaefkMm0jYoWm9nYoGPxqkL/H+PHMY6b/W5nQMz9JbdJtEIq
LMOKJeBL43pvlhloaiGys3UPI+fsse1Y0fLMfpyp5bQOc0aKB2GhKNa6buT2C4/y
26KPcTxm45tlDQX8EKfc1+1vukAJPLw9z7NTL+3EptwkWwCr3R4Ggq7BMiJAHwqd
cubu5WePW0jRWRNhSljhrtizMm9C/D0Gkla5QXYzFg+9D4flsLOTqjD4+ffs2RzR
T7uJQjnCcYyWip05N+Ekg1J4aufVwR0sE3RnR1DoqdztvrNWrbdwbFCnDQbhho0l
CcxiynuTVla+wYp5cE2dlfh8
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:36 2026 by rpki-client