
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json)
Hash identifier: e8MXr0EGBtp5xmaLKXTIlJ0UunDY7QRif5LnIuJVoD8=
Subject key identifier: FF:7C:DF:AC:3E:D0:F7:A2:62:45:CA:87:C5:44:73:FB:72:D9:39:B1
Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Certificate serial: 0A98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
Manifest number: 0A88
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Mon 09 Mar 2026 00:01:39 +0000
Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: 3EttPvGBRTEg1uIudiDlDNoNkaMDjbertmT6TE/slmA=)
2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: MAXacxJ/RMDMxYMvqaQnbiqd4rfD3qFy66FNBQszakU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2712 (0xa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 9 00:01:39 2026 GMT
Subject: CN=69a4d364-15fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:0f:dc:58:17:7c:b8:76:3f:8a:ba:87:21:
8d:bf:6d:8b:11:1e:3c:30:40:69:aa:7f:9c:01:18:
e8:6b:ea:b0:64:dc:38:3e:19:fe:66:4b:41:87:10:
11:46:54:2e:ee:33:47:5e:c9:2a:f4:26:bf:63:3c:
78:e7:b6:a4:0b:15:9f:62:81:2f:fc:b9:52:31:d9:
e4:52:5f:84:b5:34:94:fe:3e:f6:52:19:5f:2f:03:
07:f7:9b:a1:f5:a6:35:9d:51:87:05:9a:c7:e7:76:
8a:32:b9:63:da:d3:3d:cf:37:5f:80:37:de:73:f0:
60:9c:2b:f2:ca:95:4d:0f:61:f1:21:d2:20:76:85:
64:76:0a:2b:65:b9:39:7c:a8:08:fc:6c:90:b0:a4:
a1:45:5f:22:6f:d8:c8:c8:2c:e5:41:58:90:95:5f:
12:0f:05:02:2d:e7:1f:d7:1d:e2:fb:08:d6:4f:ab:
ef:5e:0c:d1:23:6f:9f:51:e3:a1:4a:1e:e1:dd:c1:
61:4f:5c:2c:39:ce:76:4c:36:59:f1:1a:e4:7a:70:
e3:eb:45:8a:aa:67:06:5f:75:8b:91:79:b0:9b:35:
6b:8a:bd:2d:8e:10:37:0a:0f:8a:c1:1f:da:8c:c9:
bc:4d:61:f3:36:73:60:db:8c:7f:77:37:31:33:8d:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7C:DF:AC:3E:D0:F7:A2:62:45:CA:87:C5:44:73:FB:72:D9:39:B1
X509v3 Authority Key Identifier:
keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:4f:54:2d:7c:80:ae:30:ac:f9:d5:4f:cf:3c:9e:2f:4b:6a:
76:69:47:1f:a3:ff:31:99:02:8e:8a:68:6b:a1:f9:a9:f8:5c:
04:8e:3f:8a:12:ca:3d:35:b8:c5:69:e1:67:76:6a:71:c2:9d:
48:78:f7:e9:59:68:56:94:84:62:a5:d5:45:af:d2:78:fd:f3:
62:dc:c0:f1:23:1a:e0:85:0e:57:a1:94:8c:0c:a3:f4:55:1f:
34:c5:d3:5d:8c:07:89:4e:cc:e5:08:50:95:d8:a0:b3:7f:a0:
53:a5:a6:4f:da:97:5f:a2:cb:b4:24:52:84:9f:49:9e:1d:bf:
3b:2c:5c:7d:63:bc:08:44:a5:53:53:cf:4d:e4:de:e8:c9:f3:
61:06:2b:9a:95:94:9f:77:5a:18:50:70:73:ee:e0:c0:52:92:
34:5a:f0:6a:ab:09:2f:8a:e4:11:f7:19:fe:53:6d:7d:6c:0c:
59:32:28:b2:c1:a4:b3:35:fe:c4:0e:10:fa:bb:d1:49:f3:1c:
cb:96:6a:f7:f6:c4:f7:b7:fb:b2:98:45:02:60:9d:fb:56:6a:
6b:03:61:e7:a2:f5:1d:5e:74:aa:cb:11:40:bd:51:9e:ae:a8:
82:45:e8:77:c2:67:57:e9:71:42:2a:9b:12:2f:60:9c:6e:95:
5c:b2:12:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:35 2026 by rpki-client