
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json)
Hash identifier: wAzJPcuK1s/qHRp/vFtNZeQ9sE3INFm9f/yRCeqjsD0=
Subject key identifier: BC:87:A1:56:DF:CF:6B:5D:CE:20:87:AD:6C:69:FF:E6:61:41:9C:0E
Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
Manifest number: 0103
Signing time: Tue 12 May 2026 23:02:33 +0000
Manifest this update: Tue 12 May 2026 23:02:32 +0000
Manifest next update: Tue 19 May 2026 23:02:32 +0000
Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: 5N24tX9k4KcfHID1qOZO/vBjh7yv+1dW7aVSi6SOZc4=)
2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: I4oc7m/xRaD9qjT6EvNaPSVC974na0zNUvD6aBlYtfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Validity
Not Before: May 12 23:02:32 2026 GMT
Not After : May 19 23:02:32 2026 GMT
Subject: CN=6a03b189-d179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:da:a0:8f:fa:65:d5:2a:b0:68:38:69:92:40:
86:05:7c:f1:ef:be:b1:54:5c:01:af:56:d0:02:99:
6b:05:c7:64:29:c0:86:6e:f3:bc:91:ba:00:1b:14:
b6:b1:64:fb:b4:66:a9:0e:90:3c:c1:76:ad:e1:31:
6f:65:f5:57:70:22:15:e7:52:c8:4e:cc:06:a9:b5:
a6:26:e4:36:04:2c:4e:ae:f4:59:f4:6f:ec:fd:c1:
6b:c9:97:e4:65:91:94:7b:a7:d5:91:b6:42:0c:f2:
00:92:db:9f:36:e2:bb:c0:b7:f5:e9:12:a4:c7:b9:
0e:9d:fe:d0:19:9b:f4:49:79:49:cf:3a:f2:06:f1:
6f:da:56:54:dc:1e:d1:9f:f2:cf:d6:75:98:02:2c:
d5:e1:a6:5c:55:71:21:c5:c2:a1:95:87:aa:b4:89:
ea:75:5f:24:ac:2a:dc:4d:cc:4d:13:b9:19:39:e1:
ce:34:5f:77:72:3d:27:2d:70:ea:cd:10:8c:df:69:
08:66:81:08:fa:b9:3e:c6:b4:07:f9:e7:78:d2:3c:
cb:8e:22:ec:30:16:4b:ec:c0:e6:0d:b2:80:8a:df:
14:f0:fb:24:f4:58:f0:51:59:90:a1:af:81:8a:00:
4d:db:c3:ed:17:23:fd:9f:d9:c0:cf:8b:b3:1b:c2:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:87:A1:56:DF:CF:6B:5D:CE:20:87:AD:6C:69:FF:E6:61:41:9C:0E
X509v3 Authority Key Identifier:
keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:d6:74:33:e9:1e:86:57:56:ed:35:a0:b8:35:60:7a:13:
23:1a:82:60:3e:51:7b:76:c7:74:33:40:6e:22:d1:12:d9:f4:
24:91:20:a4:b1:88:81:41:b8:eb:57:53:8d:aa:1b:b0:ee:0b:
cb:5a:25:d3:e3:0b:7e:8d:86:81:8b:c9:16:d6:dd:99:22:e3:
c7:a8:4b:c0:20:3d:6d:0d:dd:9c:4f:9d:21:02:4a:bb:13:91:
74:b6:d3:09:3c:65:71:ad:01:8a:75:be:d6:55:08:05:88:34:
ce:7b:c5:4a:1e:0b:e4:57:48:c5:8b:c7:c4:6f:7f:ad:34:7e:
a4:d4:9d:ee:9a:78:6e:dc:35:08:b9:2c:2d:6c:04:53:62:82:
9d:7d:84:7a:78:04:55:6a:de:77:8b:40:d0:a6:0d:e7:36:d2:
06:24:a3:35:8e:04:30:36:87:0b:6c:b0:4a:57:9a:73:75:75:
fb:47:e8:4f:ea:8f:3c:a8:2c:b4:c0:21:86:de:73:94:e6:dd:
b3:05:63:3b:22:cc:30:f0:5f:8b:2c:0b:d2:b3:2d:9c:54:68:
f2:f3:42:53:15:8b:a4:68:95:29:22:b9:13:21:ca:ec:de:f2:
1b:71:7d:05:a5:e4:90:87:b2:4e:2c:f5:af:c8:72:ba:18:ee:
3e:db:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:38 2026 by rpki-client