
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json)
Hash identifier: JhjJDSlSCS37rxmAUvu/0NECYXBpPkjJ9WX+r1mF6yQ=
Subject key identifier: 62:16:A1:67:FC:9B:E3:14:DC:E5:B1:E9:84:D8:B2:73:4E:3D:43:40
Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Certificate serial: 04C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
Manifest number: 04BB
Signing time: Fri 12 Jun 2026 23:54:30 +0000
Manifest this update: Fri 12 Jun 2026 23:54:29 +0000
Manifest next update: Fri 19 Jun 2026 23:54:29 +0000
Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: M92s7xHULnqGwDtKDW7cZmW/qCNTS47DyuOAVfKhwJc=)
2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: ESb08CIldkA52UjTOgfIkYemevA0bqNjwn2hKZ9gCBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B32D, serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Validity
Not Before: Jun 12 23:54:29 2026 GMT
Not After : Jun 19 23:54:29 2026 GMT
Subject: CN=6a2c9c35-ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:f9:61:c2:c4:fa:20:a9:96:ee:b5:ee:12:
8e:f2:22:a3:6e:ff:22:c8:49:ca:a6:05:a8:ee:ae:
37:bb:ff:aa:9d:05:41:8e:29:e4:80:d7:49:02:60:
fe:b3:4a:9e:a1:48:25:90:95:c0:94:11:27:03:c2:
38:b1:9d:29:ba:e2:6b:f7:59:c3:15:32:a6:a2:a3:
64:3a:50:59:26:9d:95:df:67:3b:d7:59:fd:2d:fb:
86:d6:28:f4:76:30:9f:5c:d5:b4:f3:28:c0:bc:80:
a5:1a:d0:78:ba:b9:04:3c:ed:8d:f1:b6:9f:fe:43:
12:5a:73:03:b9:62:4f:7a:f6:09:93:4d:b8:49:08:
84:4b:e5:a4:d9:b9:3a:38:4e:7d:78:ec:9f:97:69:
1e:81:2e:68:ef:da:e7:06:3e:87:96:df:f5:4d:bc:
ff:54:ba:d5:d1:53:ef:d5:57:68:7d:00:63:2f:ec:
05:7f:f7:c1:36:d9:c4:62:da:6a:50:e3:ea:d8:1e:
1d:0d:1a:7c:60:a5:c8:d3:e7:06:46:8d:b0:b7:a5:
22:db:ab:72:5c:be:fd:cf:5b:c3:06:87:97:62:a5:
88:0b:29:fa:76:16:05:1c:ce:7f:41:5c:19:65:9e:
27:22:65:37:c4:d7:34:24:39:66:29:75:e7:65:ec:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:A1:67:FC:9B:E3:14:DC:E5:B1:E9:84:D8:B2:73:4E:3D:43:40
X509v3 Authority Key Identifier:
keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:84:20:bc:70:34:f5:e4:35:4e:47:6c:3b:7b:ef:e0:de:
d8:4b:8f:04:82:34:a3:3b:1c:5f:91:2c:50:54:dd:b5:82:1d:
19:64:6a:44:cb:89:c0:e0:33:16:31:d2:dd:9f:5c:87:09:f4:
33:7c:e3:86:43:16:99:d7:a9:31:90:57:3a:7b:46:4f:54:de:
06:63:13:9f:e6:ee:37:b4:15:e2:f4:cb:fa:88:7a:c6:a2:58:
68:6a:31:24:05:d5:30:9b:0f:91:9e:c1:d6:b7:db:49:0e:24:
8d:13:bd:82:1f:7e:e5:c3:08:27:1f:2f:5d:78:47:27:64:78:
1c:ca:8c:c3:51:75:e9:30:11:00:0b:3f:75:36:f6:52:e7:93:
b2:93:20:58:63:dd:26:e1:93:75:5b:c6:b1:d4:93:fb:47:88:
2f:3d:c1:f9:34:2a:26:24:36:43:e9:f0:6e:ca:2d:53:49:05:
ca:aa:fd:4c:58:30:ee:04:95:36:f9:db:ac:89:dd:4d:61:9c:
ea:61:bf:fa:03:e1:6b:6e:95:43:81:ff:61:65:8c:58:e3:97:
c3:83:78:18:4e:54:ee:fa:f8:15:d2:e0:2b:bd:6e:ca:a7:68:
75:57:b0:39:b3:f3:45:26:49:6c:fc:03:57:98:b3:25:0a:ac:
0a:a6:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:52 2026 by rpki-client