
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
File: Omhmsd88LltfrK7gwJkrvHiMXQo.mft (raw, json)
Hash identifier: 5ZF5b21TR4jKcrHpaMwnSczBN3xfNXKJK3iRxeV2YX0=
Subject key identifier: BC:3E:6C:8A:2D:06:4B:A8:63:52:CB:1C:8F:BE:0E:AF:72:46:A7:E7
Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
Certificate issuer: /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
Manifest number: 021B
Signing time: Sun 05 Apr 2026 02:23:47 +0000
Manifest this update: Sun 05 Apr 2026 02:23:46 +0000
Manifest next update: Sun 12 Apr 2026 02:23:46 +0000
Files and hashes: 1: Omhmsd88LltfrK7gwJkrvHiMXQo.crl (hash: uOJTMtqDD/jyqSXExOVHt00oeJpwmSohYacmTJgtsoA=)
2: D4D3B47EA27811EE9C29A256C4F9AE02.roa (hash: UrwTDpQ73wZniwDukqZp2ufbIM32Z/byrU5UOJJiolo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Validity
Not Before: Apr 5 02:23:46 2026 GMT
Not After : Apr 12 02:23:46 2026 GMT
Subject: CN=69d1c7b3-62fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:7c:fd:04:fd:23:03:46:e0:c3:ff:3d:35:
6e:5b:bf:d7:03:05:dd:f4:b8:1d:03:4a:6c:75:68:
e2:2a:92:6b:48:10:0d:18:2e:a7:6a:fb:32:46:eb:
a7:c8:52:af:2b:2d:d5:fb:f7:97:b7:05:7b:3c:2c:
1b:ff:3e:1d:15:34:fd:a0:7d:7e:be:53:05:35:83:
22:8a:15:db:02:a6:15:78:52:55:07:dc:b6:bb:af:
a6:da:27:ea:55:b3:8e:f8:26:57:67:48:cb:b0:cf:
b3:a7:41:86:2e:4d:5c:f7:db:65:8f:61:a3:f8:7e:
0f:4b:74:cd:5a:14:6d:c2:a1:9c:40:de:fb:71:3a:
27:6e:d9:19:f3:cc:e6:62:86:c4:10:cc:e6:df:7b:
c8:93:65:c3:86:6f:67:ca:ec:12:a0:f4:3a:86:65:
ed:6c:34:d6:9e:ad:f5:8c:2c:2e:77:38:1d:79:d8:
29:1c:72:ac:11:b9:32:29:a1:b3:c2:c7:b7:06:dc:
a1:e1:7a:13:18:0f:b5:bf:ba:76:8c:98:a4:b1:d8:
dd:31:d0:ff:82:0e:66:47:23:92:8c:64:37:42:8f:
43:70:e7:1e:c8:9f:64:66:58:02:7f:d6:52:0a:26:
f5:95:9f:48:f6:94:08:73:2e:f4:b1:4e:14:7c:b7:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:6C:8A:2D:06:4B:A8:63:52:CB:1C:8F:BE:0E:AF:72:46:A7:E7
X509v3 Authority Key Identifier:
keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:aa:72:22:89:ad:e5:9b:23:46:7c:3c:85:e9:6f:4a:7a:13:
fe:42:82:aa:63:d2:8d:9d:27:5a:6d:34:a0:de:52:3f:13:61:
48:34:f2:f0:ab:c1:09:d0:4c:72:e9:37:92:b6:f2:12:69:0c:
a9:19:4e:03:c8:fa:7c:4c:12:ee:62:37:d0:54:4c:00:a9:7e:
cb:b6:b1:d0:9b:93:9b:07:d4:61:e4:af:d7:05:31:2b:9c:5f:
0c:e5:66:51:89:7e:e9:8e:4c:29:90:e1:53:c3:e9:56:d9:ff:
db:de:6f:04:b8:a1:aa:8f:85:cc:77:d5:69:b6:c3:37:63:dd:
a7:70:d3:f7:a4:04:52:39:a8:b2:8d:6b:8e:60:cd:18:14:7a:
8f:4a:f3:78:cc:34:f2:fd:be:0d:d6:33:f0:de:37:da:31:78:
a6:93:ef:5a:2a:07:0a:01:52:85:c9:2c:ba:08:5b:7a:37:b8:
84:80:22:d0:28:f1:4e:6e:0f:0f:ed:e6:38:85:6f:39:8a:c6:
09:03:05:ca:5d:ca:67:67:66:e4:4d:12:16:99:ed:aa:ed:7f:
2f:ea:57:a8:1a:90:e5:82:95:bd:73:63:4d:45:a9:35:15:7b:
c6:de:88:80:bf:d2:90:6e:e9:2a:fd:bd:f1:67:de:ab:b6:6c:
59:14:21:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE2RDYxMTAvBgNVBAUTKDNBNjg2NkIxREYzQzJFNUI1RkFDQUVFMEMwOTkyQkJD
Nzg4QzVEMEEwHhcNMjYwNDA1MDIyMzQ2WhcNMjYwNDEyMDIyMzQ2WjAYMRYwFAYD
VQQDEw02OWQxYzdiMy02MmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Np8/QT9IwNG4MP/PTVuW7/XAwXd9LgdA0psdWjiKpJrSBANGC6navsyRuun
yFKvKy3V+/eXtwV7PCwb/z4dFTT9oH1+vlMFNYMiihXbAqYVeFJVB9y2u6+m2ifq
VbOO+CZXZ0jLsM+zp0GGLk1c99tlj2Gj+H4PS3TNWhRtwqGcQN77cTonbtkZ88zm
YobEEMzm33vIk2XDhm9nyuwSoPQ6hmXtbDTWnq31jCwudzgdedgpHHKsEbkyKaGz
wse3Btyh4XoTGA+1v7p2jJiksdjdMdD/gg5mRyOSjGQ3Qo9DcOceyJ9kZlgCf9ZS
Cib1lZ9I9pQIcy70sU4UfLfGuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLw+bIot
BkuoY1LLHI++Dq9yRqfnMB8GA1UdIwQYMBaAFDpoZrHfPC5bX6yu4MCZK7x4jF0K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTZENi9ERTM0QzE3OEZD
ODAxMUVEQTgzODIwNTJDNEY5QUUwMi9PbWhtc2Q4OExsdGZySzdnd0prcnZIaU1Y
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09taG1zZDg4TGx0ZnJLN2d3SmtydkhpTVhRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTZENi9ERTM0QzE3OEZDODAxMUVEQTgzODIwNTJDNEY5QUUwMi9PbWhtc2Q4OExs
dGZySzdnd0prcnZIaU1YUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPapyIomt5ZsjRnw8helvSnoT/kKCqmPSjZ0nWm00oN5SPxNhSDTy8KvBCdBM
cuk3krbyEmkMqRlOA8j6fEwS7mI30FRMAKl+y7ax0JuTmwfUYeSv1wUxK5xfDOVm
UYl+6Y5MKZDhU8PpVtn/295vBLihqo+FzHfVabbDN2Pdp3DT96QEUjmoso1rjmDN
GBR6j0rzeMw08v2+DdYz8N432jF4ppPvWioHCgFShcksughbeje4hIAi0CjxTm4P
D+3mOIVvOYrGCQMFyl3KZ2dm5E0SFpntqu1/L+pXqBqQ5YKVvXNjTUWpNRV7xt6I
gL/SkG7pKv298Wfeq7ZsWRQhQg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:44 2026 by rpki-client