
$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft
File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json)
Hash identifier: /+ktXth7BpwfPaww3ginxktn9NyeE0/l4vA0RxW7prY=
Subject key identifier: B6:34:B3:A7:F3:6A:04:51:39:63:38:9C:EA:B8:25:0B:22:8D:71:D1
Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5
Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5
Certificate serial: 08C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft
Manifest number: 08B7
Signing time: Tue 18 Aug 2026 20:53:40 +0000
Manifest this update: Tue 18 Aug 2026 20:53:39 +0000
Manifest next update: Tue 25 Aug 2026 20:53:39 +0000
Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: ioIcZpLObE3xElbhzynY02Z/x0t+IA01sU1lrokq3Gs=)
2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: /eR4DcEKcHPeMGGpYmYmwEr8sLx2OGFp1l1XKPCo91M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl
rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5
Validity
Not Before: Aug 18 20:53:39 2026 GMT
Not After : Aug 25 20:53:39 2026 GMT
Subject: CN=6a84c654-631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:9a:1a:7c:4e:b8:ff:fe:54:0e:a6:f7:9b:
b2:d1:6e:d6:7a:6b:40:e2:9a:50:89:fd:06:27:c4:
db:8d:86:06:7e:98:d5:38:ba:e4:2c:79:87:1c:a4:
84:90:09:6a:be:fa:1a:5c:03:0f:aa:63:55:7e:cc:
ad:42:64:87:79:e1:74:63:6d:5e:2b:b4:0e:c3:26:
82:be:85:65:2c:b9:7a:15:f7:ac:22:13:09:a5:ae:
c1:d9:e9:ad:3c:a0:21:6a:35:86:00:96:2b:02:b8:
0b:be:c7:36:81:68:d1:c5:a2:ee:82:32:8c:d3:8a:
d4:24:1d:00:3a:92:eb:27:e6:e8:6a:14:0a:7e:c4:
28:b9:6b:07:d0:49:68:68:35:bd:b6:3f:8d:7f:0f:
81:c3:76:82:de:4b:58:61:03:6d:4a:72:b5:52:29:
a6:ea:77:c1:50:05:68:70:9e:d9:7c:d3:d0:d2:c2:
a7:0a:c2:74:2c:df:7c:2b:ee:1b:f6:9c:86:7d:c1:
77:77:8d:2b:9b:91:1a:05:8a:59:c7:99:6e:30:99:
eb:3c:7b:d2:76:c7:89:8c:1c:2f:ff:3b:aa:31:96:
79:44:3c:01:14:9b:77:15:b0:7c:f6:31:4a:15:37:
99:ee:9b:c8:2e:5a:4c:05:ae:e2:c2:25:1e:1f:6f:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:B3:A7:F3:6A:04:51:39:63:38:9C:EA:B8:25:0B:22:8D:71:D1
X509v3 Authority Key Identifier:
keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:98:2a:9c:dd:6f:27:fd:42:82:75:be:b0:33:cc:73:81:27:
b7:83:2d:0d:b2:0f:86:68:6c:c7:ba:39:21:72:7a:2f:88:88:
85:97:10:7e:7f:f1:6f:5a:bf:90:6e:cf:0c:74:a6:2a:7d:7d:
34:83:16:00:e7:b6:0f:92:da:44:24:1b:53:cb:c8:52:30:8c:
8a:66:3d:3b:28:3b:6d:12:e4:29:c1:e4:5e:8c:07:97:c7:f8:
bf:25:15:18:63:a3:d8:28:19:f4:cf:55:ce:e7:f6:21:71:2d:
cd:4c:71:78:75:4b:4a:60:d5:d2:08:39:af:ab:d8:6b:66:13:
55:c6:cb:dd:3e:b3:08:23:19:b1:ea:d9:2f:69:c7:e6:b0:15:
ab:f6:7e:89:3d:30:57:a7:c6:f2:5c:8f:33:55:12:19:06:c8:
2e:0f:ba:10:13:a2:43:71:72:2b:ff:65:1b:0a:75:e4:2e:58:
90:79:e6:f5:a8:4c:a4:3f:c0:4c:bf:4a:e6:c8:2e:05:4b:9d:
a3:a6:70:ad:06:d7:d2:83:95:fb:11:aa:8b:98:80:dc:65:61:
75:66:44:51:b4:79:af:44:9e:a9:35:41:88:fe:db:bb:b2:52:
48:d5:b0:c7:36:85:c7:be:af:3d:fa:f1:81:00:90:64:d7:54:
35:b0:09:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0
ODJDNjExQTUwHhcNMjYwODE4MjA1MzM5WhcNMjYwODI1MjA1MzM5WjAYMRYwFAYD
VQQDEw02YTg0YzY1NC02MzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZuaGnxOuP/+VA6m95uy0W7WemtA4ppQif0GJ8TbjYYGfpjVOLrkLHmHHKSE
kAlqvvoaXAMPqmNVfsytQmSHeeF0Y21eK7QOwyaCvoVlLLl6FfesIhMJpa7B2emt
PKAhajWGAJYrArgLvsc2gWjRxaLugjKM04rUJB0AOpLrJ+boahQKfsQouWsH0Elo
aDW9tj+Nfw+Bw3aC3ktYYQNtSnK1Uimm6nfBUAVocJ7ZfNPQ0sKnCsJ0LN98K+4b
9pyGfcF3d40rm5EaBYpZx5luMJnrPHvSdseJjBwv/zuqMZZ5RDwBFJt3FbB89jFK
FTeZ7pvILlpMBa7iwiUeH282zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLY0s6fz
agRROWM4nOq4JQsijXHRMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3
M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw
N1M5T05hMl9mcXhJTEdFYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC5gqnN1vJ/1CgnW+sDPMc4Ent4MtDbIPhmhsx7o5IXJ6L4iIhZcQfn/xb1q/
kG7PDHSmKn19NIMWAOe2D5LaRCQbU8vIUjCMimY9Oyg7bRLkKcHkXowHl8f4vyUV
GGOj2CgZ9M9Vzuf2IXEtzUxxeHVLSmDV0gg5r6vYa2YTVcbL3T6zCCMZserZL2nH
5rAVq/Z+iT0wV6fG8lyPM1USGQbILg+6EBOiQ3FyK/9lGwp15C5YkHnm9ahMpD/A
TL9K5sguBUudo6ZwrQbX0oOV+xGqi5iA3GVhdWZEUbR5r0SeqTVBiP7bu7JSSNWw
xzaFx76vPfrxgQCQZNdUNbAJeg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:41 2026 by rpki-client