
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
File: 0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json)
Hash identifier: 4UsGMw8oxsfrt0B6dgk6Z+bcdj8lXrBNaAawpA/tk7w=
Subject key identifier: 5E:D4:8D:F5:7C:82:69:2B:97:CB:A5:97:85:F9:64:7A:DE:24:69:91
Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
Certificate issuer: /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Certificate serial: 0A4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
Manifest number: 0A42
Signing time: Tue 28 Oct 2025 19:36:58 +0000
Manifest this update: Tue 28 Oct 2025 19:36:57 +0000
Manifest next update: Tue 04 Nov 2025 19:36:57 +0000
Files and hashes: 1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: krDaG99SlZbiNL5XkMk5OFvY405n8BJjW2w4Bl/VKIE=)
2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: 3+/t3J2iluPwHXxOgZE7j6ggbnPpq8pNrSyJFTrrBZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 19:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2639 (0xa4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180758, serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Validity
Not Before: Oct 28 19:36:57 2025 GMT
Not After : Nov 4 19:36:57 2025 GMT
Subject: CN=69011b59-cb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:d9:2d:2a:3a:e6:2c:ab:56:68:3f:84:94:
c9:6b:02:52:aa:25:92:c2:de:c7:59:b4:f4:f1:56:
2f:cb:39:3b:4b:79:46:41:51:ef:54:24:15:cb:3b:
dd:89:33:61:ff:04:1d:b0:62:72:45:77:21:67:67:
d5:b0:ff:fb:d0:4f:60:a0:fb:54:a0:a3:36:3f:d0:
f8:d4:d6:ef:2d:bb:a1:55:46:c4:c1:85:62:c6:93:
a9:45:d5:0e:d2:9e:60:4a:70:99:c3:20:82:4e:21:
cc:8c:c5:d0:ad:ad:07:d9:cf:11:e9:52:f9:d4:dc:
e4:ed:e0:3b:4e:01:47:ea:d4:a5:66:1a:92:7a:8b:
f8:4f:66:9a:6e:2d:49:2d:27:9b:50:bb:8f:b9:c0:
6e:2b:07:fb:fa:e7:5a:61:5a:df:7b:e5:09:7e:32:
0e:5f:06:d5:7a:68:93:ed:b4:8d:76:e7:a6:a8:34:
7c:92:22:10:0d:e3:5e:74:94:86:55:63:56:7d:7e:
8d:ce:08:8a:c5:68:f6:fb:3a:25:0e:a5:16:ee:a9:
8b:16:70:a2:47:57:95:4e:25:5e:7a:75:3c:54:38:
a0:f7:60:a8:1a:de:44:00:14:c7:bd:c8:88:83:df:
20:e7:f3:4e:51:88:77:e9:37:10:77:42:b3:2f:57:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D4:8D:F5:7C:82:69:2B:97:CB:A5:97:85:F9:64:7A:DE:24:69:91
X509v3 Authority Key Identifier:
keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:de:13:59:20:1e:58:bc:40:86:a4:f7:8a:2b:f4:30:0a:0e:
1d:a9:5b:97:fb:0b:c4:db:e8:7d:9f:cd:a6:bf:31:7e:f5:ac:
c1:c8:9e:c3:56:3c:d3:42:a6:38:98:93:a4:54:f8:97:c9:a9:
22:3c:0f:fd:8a:1a:55:b0:19:73:06:d4:ca:09:24:76:21:6c:
39:8c:8e:0b:f3:2a:d2:04:ca:ac:1d:57:f6:70:e3:b4:fc:9e:
bb:58:5f:ac:58:99:7f:e2:0c:74:19:bf:8b:47:80:9c:be:cd:
2f:f6:12:e9:08:50:b8:5f:a7:04:f8:bd:a7:c7:4b:08:a4:63:
49:cb:63:02:a7:77:61:41:53:a3:1f:6f:fb:1d:04:39:d5:6c:
eb:21:54:b3:6a:49:93:96:26:2d:cb:c8:a9:45:3a:b1:84:97:
35:4e:40:0c:8b:e3:1b:40:ea:4f:e4:bb:be:09:22:4e:39:cf:
ad:1e:62:65:90:cb:39:c4:0e:a5:cb:94:eb:89:b1:72:b2:ab:
0f:b8:20:3d:84:68:8b:74:2a:c1:4b:79:f8:f9:02:37:c9:94:
78:cb:20:22:73:22:35:16:0b:e3:fd:f1:72:a9:73:52:8d:67:
b9:4a:79:e1:fe:19:16:82:21:01:59:01:8f:76:60:ff:3a:64:
f5:3e:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 19:40:06 2025 by rpki-client