
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json)
Hash identifier: JSzK+5M1V3+xsbTCexzPX2dv335mgbxpS+/nMuwVTM8=
Subject key identifier: C9:41:48:FF:E1:E3:7A:88:B8:B4:9B:BE:34:FC:E8:9E:CF:1C:76:1A
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
Manifest number: 0270
Signing time: Thu 23 Jul 2026 03:36:17 +0000
Manifest this update: Thu 23 Jul 2026 03:36:16 +0000
Manifest next update: Thu 30 Jul 2026 03:36:16 +0000
Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: UoFgj3jf5gyAi/qMs7q5et+ySOOLURrq9oe+LScci6w=)
2: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=)
3: 28454DF268A611F1A734D2E87947A888.roa (hash: n4ycj6ArWVaLi7Ew1oxQxTzWoZohtycWjHjC7iISPLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Validity
Not Before: Jul 23 03:36:16 2026 GMT
Not After : Jul 30 03:36:16 2026 GMT
Subject: CN=6a618c31-31f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:52:b9:e1:70:9e:6c:49:b4:fc:f4:66:aa:
9a:9f:61:37:67:9a:db:ba:54:fd:71:f1:55:50:2e:
b4:67:88:46:8c:ef:c0:a5:fd:cc:cb:ae:8c:ba:58:
b0:7e:58:2c:04:9e:05:34:ce:6c:45:4e:f1:ad:1e:
48:52:00:92:02:29:2a:7d:71:4d:b3:99:46:85:76:
cd:1f:be:fc:54:f9:e9:5a:b5:b1:f0:d6:15:45:b6:
be:4c:d1:21:77:0b:c0:d4:bc:e8:c3:86:87:e4:03:
f1:68:18:ed:2d:b2:ba:66:62:1d:ef:ce:6f:e5:63:
20:06:39:cd:3e:34:70:cb:3a:f5:3a:13:56:44:00:
f5:a5:d4:bd:48:0a:8a:3a:b6:15:b2:6a:33:1f:25:
2c:fa:e5:24:a6:6b:07:db:ed:06:a6:dd:8d:b7:3e:
61:a8:c5:48:4d:fa:55:b7:d6:70:8a:63:76:f6:55:
13:ab:f6:80:ea:39:fb:52:b5:d3:b5:3c:70:93:57:
ec:ba:8a:27:1a:e4:ca:08:d7:6d:c0:38:4c:47:c9:
65:30:4c:91:e8:2c:57:41:11:02:c9:a2:99:c9:30:
06:94:c0:5c:27:c7:3e:71:98:09:5a:6d:1a:fa:50:
9b:c7:00:6a:9e:13:47:a0:e2:06:41:0e:08:5d:b2:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:48:FF:E1:E3:7A:88:B8:B4:9B:BE:34:FC:E8:9E:CF:1C:76:1A
X509v3 Authority Key Identifier:
keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5f:ac:ff:83:d8:48:8b:bc:a9:05:d1:5d:ab:98:1a:01:b7:
d7:cb:fb:58:e7:25:e1:53:75:1e:32:d2:c9:27:59:74:1c:53:
53:d6:64:76:5b:9d:93:ac:b6:4a:09:c5:d1:40:4d:87:2f:74:
f7:1b:4b:60:83:8e:13:79:60:ad:97:3e:25:30:68:2e:b2:1d:
f1:21:26:e0:86:61:0d:36:a3:7b:fd:d0:b5:c0:92:e3:9b:bc:
bf:a5:77:63:17:c3:95:4b:04:a6:fe:17:07:53:c3:24:21:41:
80:d0:62:ac:16:1f:4a:a0:87:6b:2e:37:1c:e6:32:89:5a:94:
cb:07:36:d8:4d:e6:fe:0f:a4:62:1f:79:aa:35:09:31:dd:a0:
2b:a6:04:4f:f1:44:56:df:83:38:13:39:b3:91:de:50:7e:f9:
34:71:cf:e3:83:84:e5:bf:2c:5e:4c:62:87:73:ec:c4:10:92:
f6:82:6c:f1:26:fd:9d:b1:a7:eb:30:91:db:71:61:91:9f:f0:
15:99:8f:c1:ec:13:7f:08:e0:72:9f:bd:67:8e:c4:48:66:12:
3f:ad:d3:5b:a5:bc:73:12:98:9c:82:ea:0b:5a:3c:8d:89:5a:
6e:42:17:7a:c4:9f:77:cb:19:5c:0a:81:62:bc:78:36:47:81:
13:64:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:51 2026 by rpki-client