
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json)
Hash identifier: NrfGp8SuxcC0+oWKZKIExFpi9diWbWo4Emu1LtyDVPo=
Subject key identifier: 42:C4:AB:FA:F7:47:92:75:9F:BA:6D:31:9F:69:D0:7C:61:70:27:D5
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial: 0334
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
Manifest number: 0309
Signing time: Thu 23 Jul 2026 02:10:44 +0000
Manifest this update: Thu 23 Jul 2026 02:10:43 +0000
Manifest next update: Thu 30 Jul 2026 02:10:43 +0000
Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: wHSBS7N/7WjbFsnuFI6JMuefRcBs34RnkR57aG2sfVo=)
2: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=)
3: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=)
4: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: 8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=)
5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=)
6: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=)
7: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=)
8: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Validity
Not Before: Jul 23 02:10:43 2026 GMT
Not After : Jul 30 02:10:43 2026 GMT
Subject: CN=6a617824-b7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:97:5c:60:a9:d1:cd:32:98:d8:a4:4f:13:
03:57:42:16:b3:d1:e9:4b:0f:f5:8c:f1:70:24:3c:
54:a7:ec:13:02:15:d9:44:d5:0e:52:0d:91:81:36:
93:ac:be:1f:67:76:79:71:30:7d:f0:38:08:ba:dc:
3f:da:8a:89:8d:67:2f:ed:32:2c:54:32:c8:ec:93:
08:0f:9a:2b:f8:e4:3c:0e:fb:c4:dd:36:db:f4:33:
a1:0c:8e:83:45:76:26:68:a7:f4:c6:fe:23:3c:ae:
0c:46:28:a6:45:12:e2:02:97:5c:98:d5:97:10:57:
a9:06:aa:da:28:aa:76:99:f5:cf:d5:a3:f8:7c:e9:
92:a4:3c:91:4b:2c:36:88:bb:ce:f8:62:ec:c8:3f:
51:bb:83:0a:73:03:fa:af:40:60:9a:53:21:14:a6:
2b:1d:90:51:a5:69:28:53:1d:a4:40:ef:66:12:ce:
3e:55:af:c8:6c:e6:e5:f1:ed:dd:01:0d:fd:81:57:
c2:08:13:75:38:51:5d:31:c9:c7:a2:24:61:74:b5:
4d:83:45:7f:9d:ac:78:74:8d:0f:e4:d8:0a:ad:58:
7d:b5:fa:30:a0:c0:b0:2d:90:c5:a4:a8:31:b7:ce:
cf:c4:d0:c0:b5:a7:bd:ff:f5:48:d7:b3:55:3e:96:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:AB:FA:F7:47:92:75:9F:BA:6D:31:9F:69:D0:7C:61:70:27:D5
X509v3 Authority Key Identifier:
keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f2:10:65:f1:5a:dd:48:db:7f:9d:b8:43:19:a0:f4:62:a9:
d0:49:cb:39:d3:00:ac:f0:c4:9c:13:27:dc:96:83:fd:62:5a:
b0:58:91:60:3e:fe:e5:27:16:b5:61:e1:b7:b9:b1:94:3f:a1:
b5:ba:d6:e0:50:ac:9c:6f:06:6d:18:06:58:c0:6c:cb:c6:7a:
6d:4c:80:ff:7c:8d:6c:5b:56:45:54:85:d3:19:72:fd:a9:fe:
02:53:60:22:fb:5b:fb:be:37:33:fb:53:76:43:7f:5c:bc:14:
81:fd:26:2b:34:fb:86:3c:0d:3e:52:5a:3d:c5:e6:83:de:48:
f8:10:50:ee:de:d6:f6:3a:fd:bb:22:ca:7c:95:ba:35:10:e3:
73:57:ab:64:ad:0f:d7:1d:18:17:db:3f:d3:5f:b2:dd:70:0d:
0f:bb:b6:89:71:8a:c8:fb:75:36:04:a5:53:f6:75:9f:9f:c8:
55:94:6d:c1:80:55:73:eb:f4:4a:25:c4:3f:6c:a8:8f:51:f6:
cd:25:06:00:08:73:27:73:89:af:59:12:c5:5a:84:8d:fa:91:
dc:73:b2:eb:2a:b2:e1:d5:71:f5:b5:24:a7:34:f3:eb:48:1b:
fa:34:16:63:8c:20:0b:68:90:aa:2c:3d:9d:0a:28:cc:97:e0:
da:38:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:21 2026 by rpki-client