
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json)
Hash identifier: 5LN7QtRvDeKjlq9JQoS4NgCQ7PYPPvTYBgf6Z7tXqZc=
Subject key identifier: 75:5C:9F:81:0A:CE:FC:AF:C2:32:58:AB:85:D9:B0:37:D0:6F:BA:8B
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial: 0331
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
Manifest number: 0306
Signing time: Fri 17 Jul 2026 01:54:58 +0000
Manifest this update: Fri 17 Jul 2026 01:54:57 +0000
Manifest next update: Fri 24 Jul 2026 01:54:57 +0000
Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: ucl5mPaWhlbLZ5LWhY6Fnxvv18dbRwpuCizJn6gvazI=)
2: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=)
3: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=)
4: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=)
5: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=)
6: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=)
7: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=)
8: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: 8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 01:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Validity
Not Before: Jul 17 01:54:57 2026 GMT
Not After : Jul 24 01:54:57 2026 GMT
Subject: CN=6a598b72-3a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:48:5f:47:ab:05:5f:40:be:50:e9:f7:72:
22:19:1c:b6:d6:ae:34:4b:66:3d:f6:b2:06:ea:b2:
7a:93:77:89:cd:4c:73:a5:25:c4:aa:61:11:a7:ae:
57:b2:c3:e8:03:a3:ce:0a:9a:39:7e:16:69:25:a6:
6f:fa:58:67:f2:0c:f5:4e:69:d6:14:7c:5b:77:ec:
0b:d9:12:a5:33:f1:31:66:06:13:bf:f2:13:e2:c5:
80:d8:a6:db:73:cb:b3:76:11:4e:f1:68:bd:1e:04:
ec:ed:39:0c:e2:48:8f:00:f0:b5:c6:dc:62:7f:19:
31:63:bb:86:4b:f3:90:c7:68:c2:82:3c:15:b7:cc:
b8:5f:91:b8:ab:a3:14:32:3b:b1:90:a5:8e:69:c1:
f4:4c:2c:97:9f:d8:2b:89:73:d0:d2:02:b0:97:20:
7e:f4:1f:70:b1:24:ac:70:5c:f0:6a:ea:08:c4:79:
8b:a9:fc:fb:67:c0:c0:66:b5:8c:18:03:36:80:9d:
fe:a3:d0:c8:96:9b:1e:22:db:96:b0:f8:2c:fd:8e:
82:8c:54:e4:27:28:20:62:62:9c:47:21:5c:e8:89:
c6:29:5d:1a:76:71:7b:e8:3e:a2:49:b4:fb:b9:52:
81:2d:3a:26:b4:a8:6a:1f:b0:6c:02:83:d7:0d:cd:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5C:9F:81:0A:CE:FC:AF:C2:32:58:AB:85:D9:B0:37:D0:6F:BA:8B
X509v3 Authority Key Identifier:
keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1a:9d:bd:13:ae:b1:60:b1:b5:17:eb:3c:51:15:e4:c9:1a:
63:3c:c9:da:ee:fb:e0:c5:01:07:53:85:af:86:de:7f:1c:09:
74:72:13:9f:c2:d3:c1:39:cb:dc:06:ab:25:96:e5:0f:57:7b:
d4:7a:3f:5f:be:05:76:47:81:a5:c4:85:5a:93:6f:11:19:c5:
1d:0c:59:3d:9c:d0:09:f2:94:0c:a7:41:21:e7:d2:cf:ea:43:
ff:8b:00:be:c8:91:0d:3e:ba:f0:dc:55:be:c4:bf:52:83:26:
ec:25:38:c0:a0:17:77:c5:09:4d:fa:da:c9:63:03:44:f6:39:
e1:cd:bc:a7:f3:27:e8:24:fc:41:5b:eb:be:bb:82:5e:61:60:
a8:29:ee:aa:ae:46:af:5e:e8:4f:d8:7b:42:ad:17:54:07:4e:
ea:9d:18:59:22:d5:08:4e:8f:de:0c:eb:08:1a:89:ce:05:04:
04:9e:31:48:f9:64:e2:a4:77:34:4c:5a:70:36:56:90:94:f4:
2d:cb:9f:bc:ac:af:e3:d5:7e:80:f0:e5:18:94:4d:56:d6:fb:
07:ad:b2:ad:04:8a:df:79:ba:58:37:06:1b:a2:c4:33:30:05:
94:8c:9e:34:af:1e:1a:74:4a:49:37:04:c7:be:9e:dc:a9:c9:
12:76:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:38 2026 by rpki-client