
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json)
Hash identifier: ipvqya8Ai8s1vYGOEKltomOX4RaEKwX6E2U/fIA2Elk=
Subject key identifier: EF:00:E2:A9:4A:01:DB:60:E6:F1:12:60:9A:CB:B8:05:23:09:D3:E9
Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
Manifest number: 0106
Signing time: Sun 21 Jun 2026 06:10:49 +0000
Manifest this update: Sun 21 Jun 2026 06:10:48 +0000
Manifest next update: Sun 28 Jun 2026 06:10:48 +0000
Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: An80y8ba7lFzga0bcTcGOs8hdYNuiNPh+dILsigCN9I=)
2: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: dmB1cr7byswXq/X1M5OhCF6oVNLPlMisHj2PV9sIXP0=)
3: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: 0FCY4nM/xiPTvsko2lPHjPRBl+NB5R5liczHspFuXXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 06:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Validity
Not Before: Jun 21 06:10:48 2026 GMT
Not After : Jun 28 06:10:48 2026 GMT
Subject: CN=6a378068-ce54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:e3:15:1f:2a:71:00:4a:6a:40:ca:1a:7e:
fc:4a:1a:5a:b4:a0:3e:0e:6c:c7:db:12:d3:b3:c6:
d6:b5:ba:c2:0e:95:ce:b2:98:bc:99:43:13:3c:68:
b0:a7:a7:a8:2d:aa:ff:ad:1b:42:61:5a:01:ea:ec:
da:e0:aa:4c:95:04:51:40:d0:dc:eb:22:fa:f2:02:
50:0b:85:49:c9:fe:b1:21:ea:99:ab:c6:b9:c2:18:
aa:c0:4b:4e:be:6b:f0:8d:42:f2:d1:79:80:6e:df:
fc:6d:10:9b:4b:55:cf:05:99:00:41:99:61:f4:e0:
89:51:08:61:3e:cf:8a:85:19:a9:67:01:7d:dd:35:
78:3c:a4:5d:01:c6:13:d6:fd:e9:01:d0:f6:35:49:
ba:ab:3b:0c:9f:3e:63:d8:c8:57:05:d2:5f:be:fd:
b3:89:8a:62:41:69:62:08:65:9d:fe:c0:36:25:f0:
74:77:e0:1a:da:57:c2:16:92:73:bc:eb:f3:49:78:
a3:4d:b9:e6:74:4d:a5:2f:f0:83:c4:cb:da:72:db:
04:4b:05:c1:d2:a3:9d:87:2c:2a:37:dc:ef:1c:dc:
44:20:03:af:dd:59:84:8b:0f:19:b5:e8:8b:7d:52:
89:71:c2:4f:0e:8b:c4:3c:69:56:fb:d0:e7:e0:c0:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:E2:A9:4A:01:DB:60:E6:F1:12:60:9A:CB:B8:05:23:09:D3:E9
X509v3 Authority Key Identifier:
keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:6b:bb:b7:25:b6:fd:73:3f:17:ab:5b:88:11:9b:09:1e:ee:
94:36:4e:e0:2e:34:75:74:5c:6a:bb:cb:f9:eb:76:55:0c:e2:
30:08:67:f5:eb:16:ad:3c:63:64:ae:72:b1:39:7b:07:0c:aa:
a4:83:7f:15:d1:27:82:b3:60:c6:76:67:2b:35:b6:dc:50:79:
13:c6:60:9e:25:86:38:78:55:79:18:fa:79:f5:55:be:98:13:
27:4a:b8:eb:2c:ff:bb:03:c0:e2:51:3e:0c:e8:b0:28:0d:e6:
35:e3:56:c0:55:73:75:e2:ce:88:8b:0a:bc:8b:1b:c9:0d:30:
a1:5d:a3:87:d8:37:80:29:79:72:ae:8b:e4:b0:7e:b1:2d:50:
da:5f:f3:bc:c2:17:93:99:aa:0a:0b:72:20:ff:f8:b0:05:c8:
68:ad:6c:93:10:68:d2:43:28:8d:fa:40:4d:34:72:1f:92:7c:
34:a4:58:41:c0:b1:c9:ac:af:23:95:12:c9:56:45:cc:ef:29:
a6:21:69:11:64:5f:05:f9:34:12:a6:11:ea:55:2a:c7:61:a8:
12:11:b5:74:3d:17:85:65:a3:34:39:1e:c6:4b:49:28:38:c3:
4c:e4:58:e7:bf:04:42:17:db:ee:f1:69:26:68:f8:b1:ac:39:
b2:b6:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 02:48:22 2026 by rpki-client