
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json)
Hash identifier: LPN+rnFtb/f0T7yy0u7OFzoe5dSiYugL/FigOTPqcEs=
Subject key identifier: 21:98:97:1D:45:7E:26:BC:43:02:58:FF:EF:C1:0D:F1:F7:2E:B5:C1
Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Certificate serial: 3793
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
Manifest number: 3678
Signing time: Thu 16 Apr 2026 14:24:20 +0000
Manifest this update: Thu 16 Apr 2026 14:24:20 +0000
Manifest next update: Thu 23 Apr 2026 14:24:20 +0000
Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: lhibJ1E5LKm4eRM/GldCpMerstXdquIdvpjN9SKNMP4=)
2: CBD7334E244611F1B0E42AFABC833773.roa (hash: Yayoj3EPvijmusvj/pZb04FDwJ9ctarBIPxm76ffpDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl
rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14227 (0x3793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Validity
Not Before: Apr 16 14:24:20 2026 GMT
Not After : Apr 23 14:24:20 2026 GMT
Subject: CN=69e0f114-cf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:ec:ff:07:2c:5f:6b:f8:b0:81:60:92:07:
dd:1b:9a:22:19:74:56:47:1a:cb:a5:b8:82:4e:1c:
01:af:5f:19:7a:da:74:10:35:b1:b0:07:9a:29:36:
0e:97:08:1e:34:3c:fb:1f:18:9c:32:8f:cf:ac:45:
8e:ac:57:5e:4d:80:6c:4f:b9:e3:ee:ca:cb:2d:b3:
5e:3d:66:0f:60:d7:41:25:df:24:d6:71:d9:89:e8:
d8:d0:6c:e1:af:4d:b5:db:ce:0c:87:f3:db:40:3a:
d9:f0:3f:07:59:b5:d1:e9:a9:de:3e:29:04:47:e0:
2f:a9:10:6c:e9:ee:c6:04:e1:bf:5f:18:d3:aa:a2:
30:0d:66:39:92:9b:44:07:ef:09:de:f9:7c:b9:8a:
f6:bf:de:fa:39:07:b4:75:0c:c6:74:a1:23:c1:ea:
cb:14:46:ea:01:f5:fd:1a:45:60:14:9f:e9:c2:be:
f8:bc:1d:0e:7b:91:d5:58:6d:d6:83:88:84:ea:8e:
3d:a8:81:7e:eb:3e:26:59:6d:5a:ec:c2:c2:ad:a5:
7b:b7:2b:78:2b:3b:21:8f:df:2f:b2:34:1c:d8:2d:
a2:a0:30:d7:c7:5f:0f:3b:2e:ff:00:a0:59:70:bd:
a2:89:d0:32:ac:2e:eb:a3:62:18:03:e3:fe:95:5c:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:97:1D:45:7E:26:BC:43:02:58:FF:EF:C1:0D:F1:F7:2E:B5:C1
X509v3 Authority Key Identifier:
keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:a3:e4:98:ae:b8:10:f1:19:39:1a:da:a6:5e:a4:0f:c4:4f:
e4:a0:9b:20:31:d9:2a:07:bd:7b:da:64:f4:01:1d:05:26:1a:
e3:f7:0a:8b:1b:e9:b9:4d:d8:86:17:1b:6d:fe:d8:95:40:7a:
d6:f7:d0:01:0f:23:55:16:68:30:07:02:4d:d4:35:85:08:2b:
df:16:48:94:e6:3f:1e:28:b5:9b:d1:9a:24:0d:e2:12:3f:ad:
06:49:01:e5:0c:23:07:d1:d0:ed:0c:2b:ce:9a:df:cc:d0:ef:
5e:00:d9:12:d6:39:5c:89:42:9c:81:2d:5c:fd:9c:55:99:96:
99:e6:3d:a3:b2:25:90:ad:3c:c9:be:b8:86:26:1a:39:7c:ae:
16:b0:43:a4:6a:9b:15:72:aa:6f:2c:83:bf:de:93:97:af:d8:
a4:fe:ce:04:2c:60:e5:e4:7a:a8:3b:10:17:07:35:58:5f:94:
69:00:1c:37:59:ce:c1:70:86:d1:64:5e:31:0a:7e:7d:81:cf:
eb:ab:1a:db:c7:16:e4:ba:97:2e:3f:06:67:f3:8d:d8:6e:68:
32:51:a0:37:8c:81:26:3a:85:3d:c9:13:13:7b:81:3c:0a:28:
4d:24:0b:a0:57:60:04:57:9a:5d:c7:d2:ec:ed:b5:9b:63:c3:
46:89:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:16:09 2026 by rpki-client