
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json)
Hash identifier: bVSbSlRmXn/ngGK97cfumO7gJnM/FH+Zu6vzk3IQDHM=
Subject key identifier: 58:25:91:9A:3A:3B:B5:1F:29:21:37:12:B5:7A:42:8A:FA:4D:8C:72
Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
Manifest number: 010D
Signing time: Sun 31 May 2026 23:34:57 +0000
Manifest this update: Sun 31 May 2026 23:34:57 +0000
Manifest next update: Sun 07 Jun 2026 23:34:57 +0000
Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: Tp3Kj8ajhSEBwyr4qrqaTN45OpmgwBa/fxljuLSSjJM=)
2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: I4oc7m/xRaD9qjT6EvNaPSVC974na0zNUvD6aBlYtfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Validity
Not Before: May 31 23:34:57 2026 GMT
Not After : Jun 7 23:34:57 2026 GMT
Subject: CN=6a1cc5a1-58ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:23:55:69:5b:42:81:eb:09:c9:89:62:f2:
f5:15:72:b1:e7:bb:9e:ac:4f:89:31:27:62:c4:8c:
1f:c9:fa:28:2d:8f:d7:2a:d6:ac:0e:02:60:ad:24:
17:bb:9f:4c:3b:61:a4:43:8a:b1:ad:61:6c:2f:8b:
2b:cb:6d:8b:75:04:29:33:b7:76:49:3f:37:b3:7b:
4b:0c:64:9f:42:a9:c9:33:96:78:a2:9d:0c:8e:22:
93:83:87:29:05:24:0f:65:7d:e0:42:58:f8:f6:61:
89:dc:63:8c:e0:2c:5e:c0:95:06:1d:59:f9:82:bf:
60:2f:e6:8f:f5:42:4f:d5:1a:99:4d:60:a5:e5:fd:
0e:98:3f:69:af:a8:7d:5c:41:12:81:62:12:dc:31:
4d:6e:dd:c8:bb:1f:52:32:24:86:34:db:a3:03:e0:
b3:b9:ad:b5:87:91:0a:5f:8c:b9:59:ab:f9:dc:7c:
13:ff:66:b6:24:25:35:f2:56:ae:12:a5:98:5a:db:
7f:aa:7b:3d:a5:31:14:36:1d:9e:7b:48:72:e0:96:
1a:07:12:81:47:21:ba:d1:91:61:4f:72:ae:25:8f:
aa:bf:dc:1e:72:0a:a6:17:96:1d:fb:e7:7e:c9:eb:
fd:90:d5:e7:2c:57:95:47:7c:60:b9:4d:08:dc:ab:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:25:91:9A:3A:3B:B5:1F:29:21:37:12:B5:7A:42:8A:FA:4D:8C:72
X509v3 Authority Key Identifier:
keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:14:2c:63:98:68:cd:88:3b:6a:5c:d2:7d:1c:58:0d:a2:79:
0f:09:a4:2e:07:2f:cb:29:b0:eb:5d:fe:6c:83:ff:72:fe:8e:
5a:09:ae:d6:ae:db:14:fd:18:d7:1d:9b:6e:e9:2a:5e:e9:dd:
cb:42:73:87:3c:bd:1e:09:4e:b6:20:43:1a:46:84:27:15:30:
4e:d0:29:82:c5:76:92:31:f7:69:9e:ca:d8:df:0d:13:1f:bc:
ed:22:a7:bf:94:0d:27:9d:65:3b:8b:18:fa:db:3c:39:64:2d:
57:0d:1f:42:0f:25:80:8d:e4:5c:56:77:d7:18:b1:7b:d3:45:
3b:77:01:c1:76:b2:ae:ab:d8:f6:f3:6d:6c:cc:7e:45:94:fa:
26:e7:84:0a:3c:f7:eb:a6:15:39:a1:e7:85:8c:e7:04:5a:c0:
56:95:34:3a:8c:6f:a4:f8:db:79:3a:91:ce:7c:ba:cc:d8:a2:
60:4d:50:2c:94:b4:27:c9:43:68:01:00:4a:c1:63:de:5f:80:
d9:f0:8f:38:2a:6f:65:c0:0a:ed:2e:7e:9a:9a:07:53:30:e2:
f4:22:22:e5:7c:95:1e:33:df:c3:2c:32:38:a0:f6:c3:71:48:
a4:90:1b:15:ab:f9:54:56:a2:29:e4:5d:92:9d:ae:3a:81:ed:
6e:4f:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:28 2026 by rpki-client