
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json)
Hash identifier: hUvQmQd/PTGVpoRZGk70YujHTDy5NO6cANV5qgxZ4RU=
Subject key identifier: CD:2D:FB:76:4A:8C:35:0E:71:21:DA:4E:AD:DD:C0:C3:90:7B:65:90
Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
Manifest number: 0118
Signing time: Mon 27 Jul 2026 07:56:49 +0000
Manifest this update: Mon 27 Jul 2026 07:56:48 +0000
Manifest next update: Mon 03 Aug 2026 07:56:48 +0000
Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: 93p8NAXY6UlLGEo4hOP6MQEnWkGrlYoEVtSDZ05r5Ow=)
2: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: dmB1cr7byswXq/X1M5OhCF6oVNLPlMisHj2PV9sIXP0=)
3: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: 0FCY4nM/xiPTvsko2lPHjPRBl+NB5R5liczHspFuXXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Validity
Not Before: Jul 27 07:56:48 2026 GMT
Not After : Aug 3 07:56:48 2026 GMT
Subject: CN=6a670f40-c967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:99:15:d9:0c:72:a2:9a:19:72:4e:64:a7:
a7:f4:77:72:5d:a3:cb:7b:0f:21:98:8f:ce:b9:69:
4d:cb:b4:de:54:e5:57:31:2e:92:fa:f1:2d:f1:45:
be:bb:94:e7:b7:52:5e:0f:01:4e:f3:0f:f3:e7:97:
bf:a3:71:b8:66:2d:49:e2:e2:28:8e:3f:ec:ff:1f:
df:70:22:16:d2:c0:80:dc:d1:c1:b8:f2:30:b8:c9:
e7:e9:c7:2f:f0:e6:09:bf:f8:f3:ad:d8:e6:62:30:
e8:95:eb:5f:09:ee:d8:94:25:14:41:54:eb:6a:02:
83:fe:a4:96:9d:9d:8c:24:fc:42:98:9e:81:19:6d:
f7:fb:f1:1e:e1:dd:8a:7d:57:03:83:ec:01:b4:25:
06:69:80:c6:ed:a6:a0:38:d4:ea:32:12:9a:3c:f3:
1d:b8:35:40:51:69:e9:da:07:88:cd:e2:49:62:30:
22:35:f3:18:4a:48:87:04:50:9b:46:af:97:a4:7f:
dc:14:00:af:4f:01:b7:52:6f:e4:a8:ef:75:98:66:
f8:40:43:9d:83:df:84:4e:ce:1a:98:59:80:bc:b4:
7a:b7:7c:42:31:3d:f8:23:13:a7:b3:57:b7:75:2c:
be:59:e8:40:2c:5f:cf:bd:67:84:c1:9e:d1:07:b5:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:FB:76:4A:8C:35:0E:71:21:DA:4E:AD:DD:C0:C3:90:7B:65:90
X509v3 Authority Key Identifier:
keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1e:53:d6:b3:22:72:6f:d3:66:c0:56:93:47:ec:74:bd:c3:
6b:9a:05:90:d7:14:c2:1b:a2:0c:5e:87:ce:00:67:92:ae:22:
87:60:89:5e:d2:d9:fe:ef:83:de:1f:12:bd:f5:90:b7:51:9b:
54:f7:49:ce:d4:20:33:17:e1:62:87:60:25:f3:bb:60:fd:ac:
71:fd:82:e2:09:ab:33:3f:b4:c7:35:b4:32:e4:92:61:4e:30:
3c:00:73:6b:df:7c:78:9d:05:3c:11:1e:b6:09:5d:06:f4:21:
36:36:c9:75:b7:89:f1:a8:fa:93:59:ab:85:4c:21:94:ed:9b:
9f:c6:0b:e0:45:ae:32:ca:a8:5d:be:ef:3c:eb:c0:85:2b:9e:
d2:29:dd:4a:d9:08:03:47:01:12:4a:04:57:1d:14:c5:50:e9:
a6:b8:f0:ed:dc:74:4d:e1:dc:fb:97:db:2d:93:dd:d6:6b:93:
7a:81:31:8d:f8:cb:7c:e0:5b:52:4b:6e:bd:4b:df:1b:bb:d2:
f7:fb:7d:87:6d:76:45:55:43:b1:38:57:c7:ed:07:0b:92:d7:
b0:98:c9:69:90:6f:ac:74:5c:43:03:ea:7a:b6:d1:68:68:8e:
ed:09:57:21:3c:da:ec:28:8e:38:c6:a5:71:c4:42:9f:5e:b4:
a9:2e:91:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx
QTMxQzE4MDAwHhcNMjYwNzI3MDc1NjQ4WhcNMjYwODAzMDc1NjQ4WjAYMRYwFAYD
VQQDEw02YTY3MGY0MC1jOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vWZFdkMcqKaGXJOZKen9HdyXaPLew8hmI/OuWlNy7TeVOVXMS6S+vEt8UW+
u5Tnt1JeDwFO8w/z55e/o3G4Zi1J4uIojj/s/x/fcCIW0sCA3NHBuPIwuMnn6ccv
8OYJv/jzrdjmYjDoletfCe7YlCUUQVTragKD/qSWnZ2MJPxCmJ6BGW33+/Ee4d2K
fVcDg+wBtCUGaYDG7aagONTqMhKaPPMduDVAUWnp2geIzeJJYjAiNfMYSkiHBFCb
Rq+XpH/cFACvTwG3Um/kqO91mGb4QEOdg9+ETs4amFmAvLR6t3xCMT34IxOns1e3
dSy+WehALF/PvWeEwZ7RB7Uo7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0t+3ZK
jDUOcSHaTq3dwMOQe2WQMB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux
NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NENCNy84QzkzRjc2Q0UxNzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZm
akFpNGtsWDNsWlFhTWNHQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPx5T1rMicm/TZsBWk0fsdL3Da5oFkNcUwhuiDF6HzgBnkq4ih2CJXtLZ/u+D
3h8SvfWQt1GbVPdJztQgMxfhYodgJfO7YP2scf2C4gmrMz+0xzW0MuSSYU4wPABz
a998eJ0FPBEetgldBvQhNjbJdbeJ8aj6k1mrhUwhlO2bn8YL4EWuMsqoXb7vPOvA
hSue0indStkIA0cBEkoEVx0UxVDpprjw7dx0TeHc+5fbLZPd1muTeoExjfjLfOBb
UktuvUvfG7vS9/t9h212RVVDsThXx+0HC5LXsJjJaZBvrHRcQwPqerbRaGiO7QlX
ITza7CiOOMalccRCn160qS6Rtw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:36 2026 by rpki-client