
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json)
Hash identifier: 3plNMStaSZSazf7WLSUHB3QXcmP/RAKxVkSa8YX7SyM=
Subject key identifier: D6:71:F6:12:54:70:AD:0E:53:DD:34:B5:7C:5B:0C:94:0D:CC:20:86
Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
Manifest number: 022F
Signing time: Thu 19 Feb 2026 01:32:45 +0000
Manifest this update: Thu 19 Feb 2026 01:32:45 +0000
Manifest next update: Thu 26 Feb 2026 01:32:45 +0000
Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: k7FQJUEy3P9lkKhb3DhpP375kr3KN0LjyIm7c6vSHMU=)
2: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: y5xiYH+E4HYqH1SblkLZqyCJBhm93J5XtdfEMZPQc64=)
3: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: GwFZaSvuCVOFbdFdtZmys4ibTnEED7fiZiFkSAJJVzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Validity
Not Before: Feb 19 01:32:45 2026 GMT
Not After : Feb 26 01:32:45 2026 GMT
Subject: CN=6996683d-f490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:22:1e:f8:02:83:8f:40:b0:3a:52:68:f4:
63:79:0c:9e:f7:2d:86:71:fe:2c:2c:e9:3c:4c:71:
36:c3:20:32:bd:e1:f5:48:5e:fb:3a:4a:d1:9b:51:
fe:64:da:8b:cd:c6:8e:d9:77:52:c0:68:f9:22:71:
c0:93:64:de:f5:77:8b:3f:66:73:8f:c7:03:fa:a0:
33:a3:62:95:ed:b2:2f:c7:ba:ae:8c:42:c0:e5:19:
9f:33:69:e3:e1:a0:4b:d5:02:3d:49:d0:e0:d0:39:
ac:35:ed:fb:b8:06:ff:d6:ba:d0:0b:a1:a2:da:2a:
b4:ec:3e:e8:d0:6c:c1:05:b0:d6:79:c1:9d:46:85:
77:3e:6a:7f:a1:6e:a8:2f:36:f6:4c:56:de:49:20:
53:6d:fc:79:03:62:61:f5:7c:6a:8b:33:45:4d:92:
6d:c4:69:86:c2:3e:c7:cd:30:06:13:e6:f7:a2:77:
14:00:96:64:17:30:f3:e1:59:8b:0b:95:a9:a5:f9:
65:30:4e:67:f5:ac:66:e2:5b:a6:17:77:b7:38:05:
86:8d:6c:34:c1:b7:5e:35:d2:6a:3c:44:ac:e2:c4:
5a:b3:76:0e:93:1b:20:c9:0c:e2:3a:0a:62:f5:a1:
72:43:e9:e2:55:e1:22:91:ce:51:81:ab:f9:8e:bd:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:71:F6:12:54:70:AD:0E:53:DD:34:B5:7C:5B:0C:94:0D:CC:20:86
X509v3 Authority Key Identifier:
keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:12:26:4c:09:9b:40:81:24:d5:6d:7c:45:b7:24:2c:7a:0d:
a8:17:79:dc:ca:45:78:c5:5f:fa:99:36:6c:7a:76:35:38:73:
7a:9b:b5:b8:44:bf:04:2b:ad:8d:99:3d:b7:fb:e8:8a:41:87:
fc:59:c8:b6:d6:ef:f1:1e:0c:b3:86:0a:d9:5c:c4:1e:b6:6a:
a2:23:05:88:c0:b4:b5:80:52:44:6f:99:f9:eb:80:22:5f:b6:
65:64:05:40:72:2a:32:48:66:e0:52:5d:49:1e:4d:a3:da:06:
72:f7:96:a2:20:1f:02:a0:df:dc:eb:41:fb:17:ff:b8:dd:f4:
aa:89:00:55:a8:a1:89:61:e0:50:02:a0:78:ea:1a:1c:32:ad:
98:d5:65:6a:3c:f7:c5:f0:ee:5d:60:46:4b:3a:34:24:9e:69:
c9:0d:cf:4b:82:16:54:3f:54:da:6a:75:81:34:df:b3:ab:06:
68:c2:f1:ae:ef:6f:f4:34:e0:ab:54:30:da:b4:fc:1b:d8:97:
28:39:02:09:68:ad:3c:03:97:eb:1b:70:69:e1:a7:c5:19:c9:
f0:ae:03:fb:71:3e:aa:ba:65:d2:1e:39:65:5f:23:c6:1e:1f:
dc:b3:09:18:c4:be:25:3d:f8:47:cf:64:4b:98:c5:b5:11:66:
b2:ef:34:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:14:17 2026 by rpki-client