
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
File: Omhmsd88LltfrK7gwJkrvHiMXQo.mft (raw, json)
Hash identifier: cLi77m/9etC5Amu5khD3/Ct+xcEVCO1+/qSuoIhBeak=
Subject key identifier: 89:68:52:49:7C:EB:53:58:C3:E8:F2:5B:4A:F2:DC:2C:FF:76:F0:40
Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
Certificate issuer: /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Certificate serial: 0265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
Manifest number: 025F
Signing time: Wed 19 Aug 2026 02:44:19 +0000
Manifest this update: Wed 19 Aug 2026 02:44:19 +0000
Manifest next update: Wed 26 Aug 2026 02:44:19 +0000
Files and hashes: 1: Omhmsd88LltfrK7gwJkrvHiMXQo.crl (hash: XIhoOgHxxmYzK8jGT0P31zzkdrGiz3Fnds8CNwDwULw=)
2: D4D3B47EA27811EE9C29A256C4F9AE02.roa (hash: UrwTDpQ73wZniwDukqZp2ufbIM32Z/byrU5UOJJiolo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Validity
Not Before: Aug 19 02:44:19 2026 GMT
Not After : Aug 26 02:44:19 2026 GMT
Subject: CN=6a851883-e246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:b8:26:72:ac:18:89:b9:d7:b0:0a:a7:c2:
24:2e:7f:01:18:53:1e:89:22:55:f7:2e:ad:10:2b:
c1:3c:d9:1b:0e:41:12:7f:4d:b7:1b:8f:0b:b8:14:
f7:d9:6d:cb:aa:29:28:c7:37:e4:76:3a:04:9f:2e:
12:35:f9:7c:18:ed:36:98:9b:1a:13:dc:93:87:23:
8d:97:12:d7:24:d5:22:a7:f3:d7:ce:40:ea:fd:d0:
6f:0f:bd:91:ba:69:31:06:a7:25:31:64:40:fd:4c:
23:69:c2:4d:fb:0d:a4:1c:24:63:01:66:aa:06:23:
80:1a:2b:cf:5c:d0:12:46:9f:bb:76:1b:24:4f:d8:
23:81:7f:14:b7:6f:28:8e:59:27:10:95:d3:25:90:
ba:57:24:60:a7:4e:aa:61:a4:6e:03:50:79:8e:35:
54:91:31:82:e3:7e:fe:b0:e2:88:1e:ee:94:23:3a:
3e:09:da:4b:bd:54:20:9d:85:ad:da:a3:94:a7:fb:
46:64:4e:53:25:e8:e9:f8:10:5e:82:55:80:c9:da:
59:bf:03:df:25:2b:0c:b8:55:ea:fa:aa:71:d5:55:
de:ab:42:93:a6:0b:7a:7d:3a:0b:48:85:cc:7b:a2:
cb:9d:fc:f0:4b:28:5a:d1:fc:e6:76:00:f2:18:e2:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:68:52:49:7C:EB:53:58:C3:E8:F2:5B:4A:F2:DC:2C:FF:76:F0:40
X509v3 Authority Key Identifier:
keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:a5:7d:2f:bd:97:63:eb:23:2e:d9:ff:fe:43:97:f3:e9:d0:
64:4c:6f:dc:ee:5f:5e:b7:00:22:f3:78:7c:93:c0:a4:c4:1c:
0b:ed:2d:dc:ba:e9:63:cc:5c:7d:73:f0:09:73:ca:9f:93:48:
0a:12:2b:39:e1:0c:2f:da:f6:92:9a:00:ec:ba:ae:b9:4d:3d:
c6:20:31:58:f8:29:d4:01:54:0d:89:0a:f0:10:59:f3:60:01:
a5:5d:8e:a3:c2:99:6f:db:2e:24:cc:63:a9:9c:48:c8:e2:25:
20:ce:3b:6e:95:0e:90:81:df:23:27:98:4a:75:ef:40:0d:07:
71:16:39:67:3b:1d:06:a7:88:73:c6:6b:f5:41:af:9a:9d:12:
c7:58:34:e3:40:f0:6e:e2:99:52:f9:76:e6:ae:9b:6c:9d:04:
f8:14:e2:30:7f:5d:53:2d:b3:c2:e6:c9:45:f5:f7:3c:dd:d0:
1c:2e:a9:6a:bf:4f:da:51:10:4b:30:58:3d:4b:66:d4:c9:07:
97:88:a6:08:ec:e9:e1:f2:ed:63:12:b5:01:4e:79:8b:e1:92:
6b:ba:12:7f:1f:df:9b:58:dd:8b:62:fa:ed:70:8e:82:b8:24:
88:2d:c2:84:79:8f:a6:0b:a6:05:86:67:7e:e1:f0:ae:51:14:
90:70:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:26 2026 by rpki-client