
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File: opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier: YKbP511CoT+tzZgLJNf7WEcAx3DZShhWftfoikTvQ9o=
Subject key identifier: 74:7A:0C:7D:D8:80:54:D7:23:0D:9E:FC:71:B9:67:55:AB:78:81:F7
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer: /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial: 07BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number: 07B0
Signing time: Mon 30 Mar 2026 21:24:21 +0000
Manifest this update: Mon 30 Mar 2026 21:24:21 +0000
Manifest next update: Mon 06 Apr 2026 21:24:21 +0000
Files and hashes: 1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: c925xoRe98LYSa1RQzYpySLchiq7efVvSCSPiCbnZ9w=)
2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Validity
Not Before: Mar 30 21:24:21 2026 GMT
Not After : Apr 6 21:24:21 2026 GMT
Subject: CN=69caea05-1b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:c0:0a:77:94:fe:19:d5:fe:42:8e:17:26:
39:dd:21:4d:e9:9b:dc:d9:c6:e7:c4:db:a7:5f:51:
62:16:dd:0a:9b:63:5e:cb:39:e1:cb:7e:b4:6c:b6:
4c:5d:78:f7:3e:6d:44:4c:f9:58:4a:ae:2d:db:01:
f5:bb:35:3b:0f:c3:45:71:f0:36:a2:f5:60:3b:28:
fa:85:bd:23:e6:6f:f7:66:f6:b5:a2:ea:a7:2d:f5:
fb:17:cf:88:ad:2b:6e:95:58:59:a8:f9:51:49:b9:
75:70:fa:29:dd:fc:df:f1:a2:c2:29:93:bb:f9:66:
0b:ab:f6:00:e6:02:61:4a:e7:e9:f7:d0:5c:e6:82:
49:c9:78:11:8b:9d:71:37:d4:12:80:3f:f9:f6:9b:
0e:88:18:36:8b:64:7a:3a:6f:34:4d:ce:35:8c:45:
33:1a:39:d1:1e:89:de:31:d4:d7:a0:f5:38:95:88:
04:fe:ad:9c:49:64:08:9f:83:a7:3e:15:12:2d:2a:
a7:dc:f8:0d:b5:c8:4e:aa:14:03:cd:8c:b9:e6:90:
c9:a0:94:c0:d4:17:83:81:ff:99:31:0c:0f:9c:08:
7f:40:ed:3a:d8:4b:20:23:20:0e:6f:f6:59:1a:54:
35:78:3d:a4:60:4b:f8:9a:89:8b:f4:63:ab:b3:b5:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7A:0C:7D:D8:80:54:D7:23:0D:9E:FC:71:B9:67:55:AB:78:81:F7
X509v3 Authority Key Identifier:
keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:87:09:41:75:cc:f0:f0:01:cf:41:d9:90:f9:c8:28:3b:
ab:6a:f3:10:bc:61:3c:1f:83:3d:fe:00:fb:4f:08:d0:42:2a:
20:aa:f5:08:16:47:41:f2:2f:f8:35:75:c3:78:60:cb:1a:5a:
20:c1:e7:96:35:a0:4e:f6:a8:68:43:2f:93:93:e3:7f:ec:0b:
56:80:e7:b1:74:43:90:a4:da:67:00:d0:50:cb:4a:b1:a3:9d:
de:eb:1b:3d:a8:f1:af:42:e2:05:f5:60:5b:67:4e:2a:5f:e8:
28:89:8b:55:70:b3:a3:ed:45:41:e1:10:5d:a3:51:43:0e:0c:
b8:4b:ce:f5:c8:5a:e3:a8:43:4e:4d:2c:2a:a1:f8:3c:40:fb:
6a:75:2e:eb:2e:85:11:fe:ab:a0:2c:3c:87:82:9b:20:f1:92:
41:85:6f:fe:e6:36:3d:64:e4:97:e5:d5:7f:60:b8:11:9a:18:
54:9c:09:d5:be:f7:21:a2:df:f4:e5:b3:b2:45:51:9b:8c:10:
9f:04:2a:96:7a:e8:43:3b:52:07:b2:3f:36:ec:f8:d2:52:12:
19:af:96:1d:dc:02:00:76:ef:d6:71:d1:51:2d:6a:cb:5d:54:
bf:38:25:5f:36:2c:be:fb:49:6e:ac:c9:8a:cc:87:e9:2d:bd:
03:55:7c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 11:21:55 2026 by rpki-client