
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json)
Hash identifier: oGhFFfKik4ye0mp4nLcG+8/AN+vD8idDs4D0p33sBYM=
Subject key identifier: 33:01:93:B5:46:9A:F9:BA:98:43:6D:B1:AA:4F:3C:84:BE:6F:25:9A
Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Certificate serial: 049C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
Manifest number: 0492
Signing time: Tue 24 Mar 2026 23:40:39 +0000
Manifest this update: Tue 24 Mar 2026 23:40:39 +0000
Manifest next update: Tue 31 Mar 2026 23:40:39 +0000
Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: UqYENZefrUoWOnl49aoJ2yu3nRxxYaVNZDooPwps1tU=)
2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: ESb08CIldkA52UjTOgfIkYemevA0bqNjwn2hKZ9gCBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B32D, serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Validity
Not Before: Mar 24 23:40:39 2026 GMT
Not After : Mar 31 23:40:39 2026 GMT
Subject: CN=69c320f7-17be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:db:e6:e4:55:50:41:c6:a1:9d:f4:b4:3a:
fc:df:2c:1c:da:e4:99:02:3a:b3:11:73:e5:fa:44:
cc:fe:06:95:03:7d:ea:39:ff:f1:2a:b9:77:2b:72:
07:33:a8:6f:8d:7a:9e:df:f1:d9:59:d4:9d:aa:4e:
20:89:ed:6c:73:65:ff:5d:c3:c6:ad:81:3a:4a:eb:
68:c9:78:09:c5:db:2e:d6:06:de:39:e5:e2:fe:8a:
3a:01:9f:f3:93:c6:13:5a:d0:19:f7:c0:61:e7:aa:
08:b1:62:95:31:bf:5e:65:3b:06:d4:78:19:1c:4b:
db:98:1b:d8:38:a8:4c:93:0b:3b:4e:05:88:45:78:
d0:ec:d5:21:e7:38:3c:68:f4:fa:4b:7c:3b:34:24:
1f:f5:79:e1:59:f9:ba:a3:7b:7d:64:ce:e6:30:07:
c6:7a:77:0d:68:78:33:a4:fe:a6:de:e7:7c:67:50:
39:2b:e9:f4:4b:67:2d:26:6f:f2:b9:a1:4b:78:f6:
50:8e:0d:b3:f6:bf:42:f5:44:58:44:9f:0b:9e:5d:
21:81:c7:92:56:00:dc:35:92:a6:0b:fb:d2:ed:39:
e2:74:a0:cd:73:8b:65:23:3e:5c:dd:ab:59:c9:ba:
ad:00:34:fe:ca:91:89:e7:ec:6e:ce:0f:11:e4:eb:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:93:B5:46:9A:F9:BA:98:43:6D:B1:AA:4F:3C:84:BE:6F:25:9A
X509v3 Authority Key Identifier:
keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6d:35:88:9a:87:58:1b:17:98:a3:15:19:dd:0e:8a:cf:ff:
f1:38:d8:d1:05:2d:0a:7a:82:ef:e4:19:4d:26:b5:c2:b9:c8:
a6:fb:ac:bf:87:9d:7a:80:b9:ff:42:fb:b6:90:a8:c7:39:f4:
a4:c8:ba:65:cc:61:2e:3b:67:4a:10:85:34:f6:db:0b:55:e2:
31:68:9e:de:1e:4d:50:51:9f:b0:e8:17:14:c6:f9:ee:44:43:
fc:c3:29:16:bd:ad:77:63:f2:de:d8:b7:1d:90:0f:3d:cb:f8:
9a:28:ff:c7:98:c4:35:16:6c:e8:4f:eb:ac:07:b8:ea:28:bc:
62:60:ab:53:74:d2:36:ea:80:5b:f1:1d:ed:55:cd:5a:75:18:
cd:6d:57:c2:e2:46:17:4e:0b:eb:41:f3:97:af:49:79:d2:0e:
02:d6:a3:fc:58:c8:a0:4e:8e:c5:11:e3:d9:e2:64:dd:79:40:
6b:c4:16:b2:19:06:bb:fc:af:25:9e:a0:e0:74:e1:93:98:c6:
fa:39:39:d3:4a:b8:e7:36:6d:9a:97:4b:1a:87:0d:51:8e:0b:
20:a4:43:dc:f3:6b:41:05:68:1a:b1:e2:f6:bd:eb:d1:8f:b5:
ac:8c:b0:b4:0c:bf:ff:23:8c:78:d4:f1:b1:ee:12:b7:ab:d3:
4b:9c:a3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:52 2026 by rpki-client