
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
File: opeisJM4LkUIbKB87myXs2vkws0.mft (raw, json)
Hash identifier: n5IJmlTnsvlZ/Yf5Nk2mzODV9sXLe4nMkKU0NdaoaWQ=
Subject key identifier: 47:70:D8:DF:64:88:47:5F:43:B9:58:F6:F5:0B:FD:01:99:90:3F:33
Authority key identifier: A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
Certificate issuer: /CN=A91B1C82/serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Certificate serial: 080D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
Manifest number: 07FF
Signing time: Tue 18 Aug 2026 21:37:20 +0000
Manifest this update: Tue 18 Aug 2026 21:37:19 +0000
Manifest next update: Tue 25 Aug 2026 21:37:19 +0000
Files and hashes: 1: opeisJM4LkUIbKB87myXs2vkws0.crl (hash: 3yRTNXe5WMVSDkzRWRIqpwVFAgNXB90Zue9QU5QWZ/I=)
2: 48005BEC3DEA11EBBCCD2322C4F9AE02.roa (hash: wqignbbOOBT+SZZkFeJmJ04WZ59PELTSk8fHzU8aK4s=)
3: 95FD50623E6511F1AEA6C186CD833773.roa (hash: l7NMwYErPFX+9MH6lT3nSuiEqkaf/DGpFJaT5BlukYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C82, serialNumber=A297A2B093382E45086CA07CEE6C97B36BE4C2CD
Validity
Not Before: Aug 18 21:37:19 2026 GMT
Not After : Aug 25 21:37:19 2026 GMT
Subject: CN=6a84d090-ed5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:34:14:48:30:00:4c:7a:c7:a9:ff:9f:6f:
45:3f:f8:f8:ea:99:be:24:95:87:58:ae:fa:03:a8:
f3:2b:57:30:cc:0c:9b:3d:57:14:6c:0d:3d:78:88:
5b:dd:b9:5d:d0:04:a4:b2:32:29:46:40:99:56:dd:
56:9c:15:da:0d:47:e4:e9:be:61:1a:2b:ce:3c:d0:
2f:a3:06:9c:89:9b:a2:2f:8d:4b:e2:83:a2:68:c1:
bc:ef:85:e2:bc:0a:94:9e:f2:d8:18:54:c3:b3:11:
25:14:8b:6d:ee:5d:c7:36:51:ae:1a:25:08:c6:c4:
73:2b:58:15:26:67:b8:24:39:8a:4d:36:ea:1d:3a:
58:e0:a5:9e:8d:9d:7f:a6:4f:43:de:a4:4d:30:c0:
e9:6a:c2:b2:d8:0d:ba:e2:1d:76:db:21:29:5c:7a:
d4:58:ae:37:0c:a5:8d:95:24:e4:54:cf:bb:e7:28:
e0:70:25:42:32:de:e4:be:87:f4:e1:f0:d7:0d:84:
05:76:28:27:25:d1:ea:3d:fe:b5:b6:9c:f7:37:3c:
d6:ec:32:e1:6c:e4:a3:9f:f7:96:81:c1:3b:6f:33:
41:01:88:22:ae:25:3a:86:c2:85:76:f7:8f:e3:67:
9e:8e:dc:09:0c:9a:3a:7b:a3:8c:01:a9:12:b1:55:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:70:D8:DF:64:88:47:5F:43:B9:58:F6:F5:0B:FD:01:99:90:3F:33
X509v3 Authority Key Identifier:
keyid:A2:97:A2:B0:93:38:2E:45:08:6C:A0:7C:EE:6C:97:B3:6B:E4:C2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opeisJM4LkUIbKB87myXs2vkws0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C82/18DDBFD23DE811EBA35D501FC4F9AE02/opeisJM4LkUIbKB87myXs2vkws0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:40:75:55:bd:ec:6e:be:f2:99:eb:fe:bf:11:a2:23:ef:e7:
f5:ab:63:85:9f:36:b7:17:a6:a7:6d:41:7c:80:29:eb:88:66:
2d:e8:ab:0e:27:57:65:c2:52:d1:c2:2a:e1:e0:94:cf:87:ed:
b0:8b:03:14:5b:51:26:0a:3b:d7:04:c7:1e:ba:ea:90:cb:24:
5c:6b:a5:45:45:69:11:87:e3:bc:4b:d0:5b:97:eb:e7:c0:52:
51:92:eb:e8:5b:98:98:66:1d:bd:13:6c:45:44:93:e9:f6:e2:
72:9a:b0:d6:5a:67:1c:84:bc:de:04:78:fb:37:d0:37:28:7c:
31:89:24:71:fc:f3:d7:df:48:d9:de:99:a5:e0:5b:38:83:c8:
96:4a:da:79:2c:ea:29:cc:1a:4e:c4:93:e5:e1:34:3e:0e:3d:
41:ad:72:b9:b6:5c:f4:08:62:24:e6:53:7f:51:e9:5d:8a:15:
07:7c:e6:7f:07:74:ce:34:66:2f:ba:a9:4f:ed:c7:2e:85:75:
c6:55:d2:15:6d:83:e1:ee:60:5b:e6:06:70:0c:af:a9:d9:0a:
bb:4a:d6:15:10:3b:16:7b:57:f0:2f:c8:b5:e3:f8:a5:d1:66:
65:20:e9:c7:2e:11:60:ef:9a:e8:bc:fd:29:27:5c:ed:05:55:
66:0a:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:01:14 2026 by rpki-client