
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
File: oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json)
Hash identifier: lbc1jsuA3hJums9MSAW6PUZAP9xUNK9RTn87b/UFBak=
Subject key identifier: EA:16:CF:98:44:DB:FB:70:07:B6:AB:4C:D8:24:D7:7B:F3:5C:CC:D1
Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9
Certificate issuer: /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
Manifest number: 5C
Signing time: Mon 01 Jun 2026 04:37:34 +0000
Manifest this update: Mon 01 Jun 2026 04:37:34 +0000
Manifest next update: Mon 08 Jun 2026 04:37:34 +0000
Files and hashes: 1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: Ic7g5vrbZlS323hDf5IdnKx1Yk6ZI5FqgGcGvNZq4I8=)
2: 7D6CF15E299511F1AB285139C2833773.roa (hash: zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl
rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
Validity
Not Before: Jun 1 04:37:34 2026 GMT
Not After : Jun 8 04:37:34 2026 GMT
Subject: CN=6a1d0c8e-bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:60:f9:f9:45:13:46:78:b9:d2:df:aa:92:
6f:8e:45:7e:e3:43:4b:3a:73:3d:25:48:51:d8:8e:
3f:da:71:86:68:d2:92:84:9b:c7:fd:97:f9:85:fc:
2d:b1:cc:86:eb:dc:9d:4b:d2:8a:ce:f9:b0:81:9f:
73:a1:7a:eb:8a:76:d0:e3:0d:58:7d:8c:b6:09:e4:
6b:12:9d:b5:7d:32:70:47:66:6b:03:00:25:7d:d4:
d8:ed:62:86:32:d1:87:9a:02:fd:d9:55:c6:4b:2e:
8a:1b:bb:87:72:65:1d:3e:fe:ce:02:ca:7f:2e:b2:
74:61:89:59:e0:ae:3d:62:0a:9e:0b:4b:6a:ff:f2:
f5:d5:e1:8f:12:b4:6a:e1:60:bc:00:7f:1b:4d:6b:
40:d5:50:2c:ca:99:8e:1f:08:15:a8:20:5f:1f:79:
90:e2:64:e9:b3:47:9a:62:5d:5e:90:2d:9d:64:80:
8e:6b:09:47:7b:f2:13:b6:0d:7c:55:3d:ca:b3:fc:
c2:5b:e2:8a:fe:eb:fe:65:c7:f3:f9:0e:de:6f:af:
c0:4e:49:16:b6:58:b7:55:31:4c:36:fe:da:53:52:
0a:ee:b9:56:2b:87:25:3e:2f:41:26:f9:b7:82:19:
33:46:b1:5a:bf:8e:95:ed:7e:53:b2:14:39:84:87:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:16:CF:98:44:DB:FB:70:07:B6:AB:4C:D8:24:D7:7B:F3:5C:CC:D1
X509v3 Authority Key Identifier:
keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:b5:4b:4c:7f:7a:ea:fb:e2:0d:08:4e:c6:97:f1:7f:03:75:
95:ca:d6:e2:df:22:9f:e8:79:00:72:b0:00:b0:ad:28:bb:4e:
5b:99:4f:f6:1e:9b:0b:71:3b:81:df:02:d4:c0:d5:1f:d2:fb:
f0:c9:5c:3b:2a:00:a7:7d:82:c3:d7:b4:15:3c:9a:a2:82:48:
bc:e5:cf:f9:32:74:31:0b:2b:d0:92:eb:6c:04:69:7f:eb:13:
77:c9:91:f3:e0:97:3c:9f:e2:db:d8:04:ce:52:65:ee:db:d6:
58:75:5c:f1:18:b2:64:f4:3b:35:12:37:90:9b:1e:16:d8:61:
25:48:1b:33:e0:c5:0f:c3:14:57:23:e9:b9:59:a8:60:46:5f:
7e:df:00:e1:09:2b:fa:fb:ce:55:4a:fd:7d:73:40:bb:d2:49:
00:9a:bc:8e:a6:34:5c:9b:73:3f:d1:01:a5:bd:f2:20:9a:b2:
d8:d3:80:85:b1:1a:f1:80:fb:bc:58:1d:69:07:01:0b:45:77:
69:c2:d7:d1:48:39:a0:d6:94:b7:79:f8:48:6e:61:38:7b:95:
ab:1f:c4:66:e0:63:82:47:2c:18:9a:b2:41:4c:bc:62:f0:7f:
e7:80:fd:c9:46:b7:c4:85:4d:d1:f3:51:91:42:82:82:fb:31:
e5:e5:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:57 2026 by rpki-client