
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
File: Omhmsd88LltfrK7gwJkrvHiMXQo.mft (raw, json)
Hash identifier: 2I1Rm7B/Vxj+G7SiUBIkz9REtdIEMA4jtc3TvxjwKqs=
Subject key identifier: 24:C5:1B:C9:58:6D:9C:44:45:76:BC:C7:60:2B:EF:EB:83:13:D0:DC
Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
Certificate issuer: /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
Manifest number: 0232
Signing time: Thu 21 May 2026 02:40:18 +0000
Manifest this update: Thu 21 May 2026 02:40:17 +0000
Manifest next update: Thu 28 May 2026 02:40:17 +0000
Files and hashes: 1: Omhmsd88LltfrK7gwJkrvHiMXQo.crl (hash: oUHLyUXqmpqoWxazeMgnjUbRZ5PxvKkyutU3gVRTO1c=)
2: D4D3B47EA27811EE9C29A256C4F9AE02.roa (hash: UrwTDpQ73wZniwDukqZp2ufbIM32Z/byrU5UOJJiolo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Validity
Not Before: May 21 02:40:17 2026 GMT
Not After : May 28 02:40:17 2026 GMT
Subject: CN=6a0e7092-88b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:e1:fa:d4:7b:89:43:b7:b4:12:6f:d1:0e:
b5:48:8d:91:8e:57:76:38:b4:d6:07:07:b3:1a:e2:
7f:27:d7:21:4a:1f:03:37:d0:f5:00:bc:04:d1:d4:
a3:4f:75:94:de:2d:a7:56:4f:ab:89:f3:7c:01:c1:
0b:aa:61:0c:8b:57:b4:64:64:25:d0:0f:80:36:61:
d6:d2:cb:a3:38:3f:ba:02:5c:cb:f6:42:90:1e:20:
58:38:ca:85:e1:f2:e4:75:28:f6:09:e9:a2:66:c7:
72:c5:9d:81:73:6a:be:d5:d3:fa:19:43:2d:93:6e:
cb:fa:4e:6c:92:a6:b8:2f:dd:0a:03:04:2d:39:71:
61:1e:26:9d:89:26:26:42:c3:ce:a3:a0:99:7f:27:
92:9f:62:9d:cc:a3:1a:4b:d5:a7:68:71:c0:64:66:
d3:d9:92:98:1b:df:a1:20:ac:43:c9:bb:ba:1e:1d:
d3:5e:87:26:ea:e7:1d:70:ba:35:dd:9d:c9:7d:f9:
2f:85:a8:51:6d:64:fb:c5:14:b3:d6:0a:a0:a6:9b:
02:f6:71:45:d2:0b:ac:7e:5b:1a:32:51:02:fe:84:
67:b1:a4:a6:e0:79:3d:33:4f:8a:54:e8:a8:bf:da:
8e:cb:c4:7c:e1:67:51:b4:ca:2b:5b:67:b0:f8:c8:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C5:1B:C9:58:6D:9C:44:45:76:BC:C7:60:2B:EF:EB:83:13:D0:DC
X509v3 Authority Key Identifier:
keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:87:ea:58:95:13:1c:2b:4e:d3:63:fb:f1:5a:e2:d3:06:0e:
68:78:30:e1:4c:ca:85:d2:02:15:f9:7f:0d:f0:7c:dc:c9:8b:
1f:98:c3:c6:66:cb:f6:d9:55:43:02:3c:9c:dd:6a:ae:93:68:
3c:ea:85:39:fd:4c:e9:5a:ed:51:ee:86:b1:ae:a7:04:76:ee:
13:e0:bf:68:c3:94:19:6f:d2:05:8a:6a:70:d5:11:7c:b7:e3:
7b:4b:8c:e2:99:22:91:db:e9:eb:21:62:46:39:0c:24:3a:9b:
75:44:ff:f6:59:18:96:04:96:0c:75:b4:c0:2b:dc:f0:29:b8:
63:bc:7c:b7:35:bd:a3:78:e9:6d:4f:d9:12:54:af:18:78:98:
c7:2a:8e:8f:aa:21:94:18:06:81:a7:bc:35:d8:7f:71:e9:da:
6e:60:86:be:a5:e8:1e:f5:ff:db:42:78:63:fd:fe:05:f9:a1:
63:37:2c:71:61:3c:db:54:6e:30:51:89:a5:f5:db:78:87:fe:
c5:02:33:ae:4b:5c:d1:6f:70:97:84:de:4b:94:9f:f5:31:24:
6a:34:38:15:9d:fe:76:a4:e3:b1:83:3e:d2:9b:5a:07:e5:17:
3d:f7:79:ae:93:e4:c0:c1:e7:ab:b5:3d:a0:74:0f:c3:14:2e:
68:9d:8e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:24 2026 by rpki-client