
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json)
Hash identifier: o9M/MAtaHKluLoyWfOrpk362ZN2D8bPeTPKamF/LHi0=
Subject key identifier: B4:4E:43:43:CD:16:DF:FE:86:C5:AC:DF:18:F6:8D:66:91:B3:DD:15
Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Certificate serial: 04A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
Manifest number: 0498
Signing time: Sat 04 Apr 2026 23:45:43 +0000
Manifest this update: Sat 04 Apr 2026 23:45:42 +0000
Manifest next update: Sat 11 Apr 2026 23:45:42 +0000
Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: SFgBQycXu3DSTPBaZL/0kXwxkEBdO9K1KRMw6s9rrd4=)
2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: ESb08CIldkA52UjTOgfIkYemevA0bqNjwn2hKZ9gCBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B32D, serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Validity
Not Before: Apr 4 23:45:42 2026 GMT
Not After : Apr 11 23:45:42 2026 GMT
Subject: CN=69d1a2a7-1665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:76:4d:5a:20:9d:1f:be:06:b8:1a:3a:68:
ee:73:6b:17:73:43:5c:dd:49:42:57:16:c2:d0:3a:
bd:85:4b:55:93:00:8b:9f:f1:f9:b1:38:fc:f8:c9:
7f:66:73:5a:f4:51:c0:5a:61:63:7f:cf:0b:d9:e9:
67:f1:27:0a:27:2a:a1:5d:32:f7:89:21:05:8f:3c:
7b:70:fb:6a:b6:ea:80:5d:a4:19:06:a7:75:23:60:
7b:b1:09:86:66:9f:db:6b:4e:74:54:ae:23:75:66:
09:22:84:5d:a6:6c:98:2e:74:a1:da:df:85:0e:14:
c3:1b:e6:27:b9:c8:b3:20:b7:f2:53:04:4d:32:b1:
0c:e6:e6:5d:f7:6f:7b:ca:17:51:2d:b0:22:30:bd:
3a:5c:c0:00:fb:b3:b9:87:af:52:6b:81:63:d9:43:
aa:10:06:47:99:3e:80:54:6a:33:64:b3:e3:f4:e4:
51:c8:08:7b:12:f2:47:d0:f6:91:ad:0c:b5:be:03:
f9:30:9c:85:df:c1:0f:25:e9:93:8a:7d:56:5c:65:
ea:60:f6:5c:eb:f1:04:24:5c:1b:45:15:a0:25:38:
ad:fb:68:3e:70:79:69:5b:72:e2:2c:57:d4:6f:31:
c5:4b:ae:0d:f5:be:83:b9:40:f1:5f:83:22:dd:54:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4E:43:43:CD:16:DF:FE:86:C5:AC:DF:18:F6:8D:66:91:B3:DD:15
X509v3 Authority Key Identifier:
keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:88:d4:b5:25:da:41:82:88:70:98:9c:9f:db:85:2f:dd:ad:
ae:0d:e0:26:e6:35:01:49:f5:4b:11:c3:c3:75:7e:8f:d6:6f:
bb:93:dc:b3:ac:6d:3b:e4:f5:82:22:2e:f1:cd:5c:c4:e6:c6:
15:32:7c:6c:ee:0c:ef:cb:14:f5:ab:b9:d3:09:64:7d:19:a7:
2f:33:cf:2d:52:9e:8c:34:73:3d:cf:d2:3d:fa:7e:82:6b:71:
35:6d:9c:46:90:cd:0d:a0:28:c2:52:f7:ca:c6:d1:4d:d2:70:
35:b7:9a:46:e9:61:2a:c5:dc:7a:99:99:b9:5b:72:2f:21:f3:
65:f2:c1:1f:18:e7:97:d2:dc:08:65:28:bd:01:27:f3:c2:50:
4b:6b:06:bf:c4:63:28:b9:cb:4f:a8:05:d2:36:de:94:94:1d:
a2:3d:fa:33:9e:1d:d3:f8:d6:ea:93:3b:01:1e:ac:a0:29:c1:
40:fe:2b:dc:13:66:83:6d:72:6c:8f:36:16:0a:db:8c:fb:87:
c5:a7:5a:d8:50:40:72:39:dc:27:bf:f3:f1:c5:1a:96:34:61:
22:b8:bd:40:1e:d2:02:78:33:48:84:dd:67:92:99:5d:28:bf:
b9:50:c6:a2:d1:1e:d5:8e:19:cb:a7:5d:f0:30:0b:49:6d:57:
bb:6a:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:39:50 2026 by rpki-client