
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json)
Hash identifier: 0fB1Wrsy4cEWHsNzZAMKjScKWmlLtKEnq0CyhWiJzjE=
Subject key identifier: 6A:8E:CB:B3:F3:CE:C6:3D:0F:D4:EA:D2:26:82:29:CE:8D:73:A0:17
Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Certificate serial: 0B0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
Manifest number: 0AFA
Signing time: Tue 06 Oct 2026 19:29:03 +0000
Manifest this update: Tue 06 Oct 2026 19:29:02 +0000
Manifest next update: Tue 13 Oct 2026 19:29:02 +0000
Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: KXq+h0akrzohiuqKT2j0eSIYtFAdvl1mQrTTMPZIWgo=)
2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2827 (0xb0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Validity
Not Before: Oct 6 19:29:02 2026 GMT
Not After : Oct 13 19:29:02 2026 GMT
Subject: CN=6ac54bfe-7428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:fb:93:2b:8f:b9:79:14:e8:a4:b2:8f:09:
dc:6b:a2:f3:80:e5:e0:c4:27:50:21:5a:da:90:c4:
38:5b:d2:9f:63:bc:83:9b:7f:54:e9:df:10:3a:cb:
74:e4:48:31:4f:cf:a1:1d:4d:2a:ec:80:a5:22:fa:
a8:99:88:2b:51:ee:0c:2a:15:ab:4e:20:03:fa:f9:
0b:4d:93:22:e2:49:b8:bb:ed:98:f0:3b:50:df:fd:
8d:6e:2c:ed:22:3a:d2:2e:78:ca:1f:f1:62:35:34:
b8:fe:57:42:ab:40:9b:7f:80:2c:65:aa:25:22:52:
8e:c7:65:f3:1e:5e:88:e8:a7:5d:f9:4f:57:b5:dc:
e7:ae:cc:2d:f3:48:fc:cc:a8:00:e2:e1:32:2f:b1:
39:7b:5b:45:9e:5d:c0:e2:6c:43:4b:37:ea:e3:ac:
f6:69:fb:4e:c3:00:a2:4b:d5:8e:70:00:03:80:fa:
94:73:87:3b:d0:f5:cb:84:ef:1e:98:48:e8:dd:d7:
a0:26:56:e7:e7:ee:1a:16:93:b9:e0:b0:6c:0e:c5:
ca:45:e3:94:75:ef:d3:7b:4b:7c:34:d4:6f:3e:02:
33:a6:ee:b8:c6:26:d4:72:25:54:1e:ea:49:8d:5a:
25:e6:39:81:53:da:ee:b4:26:8c:d7:62:fa:d4:f5:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:CB:B3:F3:CE:C6:3D:0F:D4:EA:D2:26:82:29:CE:8D:73:A0:17
X509v3 Authority Key Identifier:
keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ea:f3:31:6e:77:f9:4f:7b:a9:96:d6:fc:1e:83:91:b7:c3:
1a:23:81:e1:a6:38:12:7b:0d:4d:bc:64:de:1a:55:1f:0d:17:
77:8f:e8:c7:d4:e8:f1:c2:44:b9:80:b2:55:a8:82:64:90:77:
dc:d6:11:e7:b3:cb:2d:d1:ca:d5:02:4d:61:ff:8f:62:ce:10:
fe:a1:3b:ae:5e:fe:25:6c:94:3f:5b:e8:c4:05:d0:7f:6a:e6:
72:6d:d1:26:aa:1a:c2:10:4a:d5:35:b0:e4:8e:81:32:c5:4d:
6c:a1:b3:2b:6c:d2:0a:df:d8:c4:7f:4f:df:c3:a9:33:20:2a:
b4:57:c8:45:61:f4:23:f9:04:83:50:c9:46:35:d8:4c:24:72:
d3:16:f0:77:60:be:fd:83:af:29:64:6a:76:0e:9f:0c:8e:f7:
01:ba:f3:2d:38:1b:d2:4a:c6:6e:c1:7c:69:63:81:5e:28:4e:
12:28:52:bf:fd:22:01:30:bc:45:41:f8:69:ce:2d:17:e2:98:
eb:c5:c5:f3:ad:5a:2b:ff:89:f5:71:3d:22:6b:60:e8:8d:d0:
76:eb:22:d6:c7:52:8f:26:a0:eb:a1:2a:90:20:52:ba:18:6b:
19:60:85:25:cf:de:fa:93:bb:a0:c3:dd:7c:24:1c:ce:e3:96:
32:9b:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:01:44 2026 by rpki-client