
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json)
Hash identifier: gQZW/zPvgDlXbE0Wa8UE7CZ/KOo+DaJBMpKk45wH2b4=
Subject key identifier: 19:9E:97:3E:A6:74:08:A5:E5:7D:8B:AF:2A:4E:3B:CE:94:65:11:0E
Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Certificate serial: 04DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
Manifest number: 04D1
Signing time: Mon 27 Jul 2026 00:47:52 +0000
Manifest this update: Mon 27 Jul 2026 00:47:51 +0000
Manifest next update: Mon 03 Aug 2026 00:47:51 +0000
Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: x7UI1WVqALeAiWy+wJM4vN0SCuQESE/HrxfCYxJAtFA=)
2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: ESb08CIldkA52UjTOgfIkYemevA0bqNjwn2hKZ9gCBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1243 (0x4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B32D, serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Validity
Not Before: Jul 27 00:47:51 2026 GMT
Not After : Aug 3 00:47:51 2026 GMT
Subject: CN=6a66aab8-28bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:35:fb:6b:2a:26:d4:09:13:db:39:bd:86:
c2:49:8b:59:e9:ed:2d:64:34:0e:0c:ba:0a:8b:d2:
d1:d2:29:6e:40:40:60:8e:2c:e1:f9:76:76:ab:3f:
94:00:0d:fd:17:eb:d0:61:48:fa:1d:8e:c9:6d:d2:
fb:1a:fc:c6:09:16:30:2c:54:2a:f3:e9:c7:ea:24:
27:b0:6b:24:0a:b7:6d:56:64:b0:8b:a3:4d:c6:1b:
aa:b5:28:dd:2e:71:19:5f:cc:63:a1:5a:b2:eb:3a:
6d:7d:1f:eb:7d:ff:1b:d7:43:b3:c3:11:d7:dc:f8:
a4:53:2c:ff:3f:d1:a8:87:7c:83:0f:05:e4:55:24:
64:1a:ab:ea:39:e3:8e:1d:7d:80:71:06:14:f2:14:
3a:b3:e2:2f:ec:74:46:4f:43:17:45:0d:67:78:4b:
55:4c:13:04:48:b6:41:3c:37:2b:2a:c5:ce:e4:42:
8f:d0:d1:35:63:1e:89:6e:20:c2:4f:36:3b:fe:36:
cf:9a:8c:19:71:01:11:f5:be:8a:a7:26:ab:aa:69:
3d:a1:f6:f4:fd:71:9b:b1:f3:36:1f:32:55:d0:23:
9a:67:9b:0f:47:c0:94:84:3a:e2:5b:98:f3:e9:41:
e8:de:67:6c:10:d2:f0:6e:cb:ba:68:ec:f8:1e:e7:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:97:3E:A6:74:08:A5:E5:7D:8B:AF:2A:4E:3B:CE:94:65:11:0E
X509v3 Authority Key Identifier:
keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:69:f6:00:cf:f5:af:68:5b:91:4c:24:6d:b2:ee:f6:9d:
59:8f:d1:12:99:2f:f7:21:42:23:5e:77:04:ba:49:8d:97:cd:
78:f5:f6:f8:e6:a0:f2:ca:86:a4:07:24:b5:e8:8e:b4:b9:82:
a6:e6:32:e3:af:bf:f6:52:0c:90:d6:77:8a:01:41:5a:a7:56:
d9:70:ca:c1:cb:c6:cf:d1:ec:97:bd:56:1b:6d:ec:d0:b1:b9:
5a:8a:a7:60:9a:31:69:5f:b6:03:1d:ec:cc:60:a4:8d:f6:f7:
fe:83:ee:b4:24:6d:05:64:52:15:af:e5:c9:0e:98:27:1b:54:
2b:d9:59:83:1b:b6:d5:14:29:de:0d:da:ab:1e:80:52:6c:32:
80:4c:4a:a1:18:52:42:74:98:e1:b4:65:00:4b:f2:d0:2b:cb:
89:38:10:92:20:f1:39:d8:be:c8:5e:27:84:39:d2:ef:bf:28:
dd:77:ad:87:7c:17:7b:a0:cb:72:6c:b0:48:65:0d:55:0f:bc:
a8:a9:4a:fe:e4:db:2a:4d:17:4c:37:05:84:4c:b8:65:17:41:
c5:75:26:80:51:a0:68:52:ce:e8:02:fd:a4:fa:07:8e:7f:d7:
aa:ba:82:35:4c:da:d8:84:6a:30:98:7a:50:03:db:5a:00:19:
2c:4d:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:51 2026 by rpki-client