
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json)
Hash identifier: +vP8y3uz+nE6gCksEgCI5kbDUc4lRdD0LQ04H/ZEGDo=
Subject key identifier: B7:00:A8:FA:A7:78:66:59:63:29:55:ED:CB:45:5E:56:06:19:EA:29
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial: 0320
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
Manifest number: 02F5
Signing time: Sat 13 Jun 2026 01:19:27 +0000
Manifest this update: Sat 13 Jun 2026 01:19:27 +0000
Manifest next update: Sat 20 Jun 2026 01:19:27 +0000
Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: dGSUKYJN/VMMcmtcbg7Ckohcb/se8I5cIV1q21bZgvo=)
2: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=)
3: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=)
4: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=)
5: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=)
6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=)
7: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: 8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=)
8: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800 (0x320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Validity
Not Before: Jun 13 01:19:27 2026 GMT
Not After : Jun 20 01:19:27 2026 GMT
Subject: CN=6a2cb01f-756f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:6f:22:58:df:0a:2a:42:ca:63:88:eb:a9:
d7:84:87:96:e0:14:b6:d4:dc:a8:45:a6:83:e0:e2:
90:a4:8f:c7:42:64:38:58:ea:7e:4d:3a:1b:6b:93:
dc:10:ae:2b:a6:82:30:28:9b:71:17:80:bd:71:72:
a2:9c:d1:d5:3b:bf:55:92:44:19:f4:47:7e:92:e2:
20:41:7a:43:6e:54:d1:37:0a:ef:96:b0:e6:2e:2d:
32:9b:1d:df:db:a2:8e:13:4e:41:96:da:21:47:47:
2b:58:71:80:be:65:14:64:97:41:96:a6:51:81:9d:
7e:b0:70:fc:82:38:c5:48:18:ae:55:7f:5c:12:68:
1c:31:0e:4b:ae:13:7e:c0:d7:9b:ac:0a:2f:26:cf:
ab:5c:db:dc:49:d1:49:93:1d:1b:73:b2:dd:ee:1e:
ab:43:0f:d5:6c:37:77:7a:0e:6d:33:6e:32:36:2e:
b8:1d:db:a3:9a:fb:6a:b5:8a:00:df:cb:4d:5d:46:
9a:b4:55:c9:02:9a:d8:69:49:85:e9:70:a6:d6:43:
f3:19:f1:79:04:b1:b9:e8:05:03:1b:a7:80:04:69:
a7:3b:35:9f:1f:2e:9b:27:1a:a8:bb:40:6a:9f:67:
67:08:7b:68:08:77:94:9e:62:4c:e2:74:61:9a:60:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:00:A8:FA:A7:78:66:59:63:29:55:ED:CB:45:5E:56:06:19:EA:29
X509v3 Authority Key Identifier:
keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:8c:a7:31:94:8c:4a:a1:4b:2a:a2:d7:d3:65:45:a7:70:6d:
34:6b:46:13:31:f7:45:10:1e:3d:d9:46:c5:67:8f:aa:ab:e5:
ba:26:cd:88:d4:28:1b:5e:56:87:3d:fd:60:cb:50:54:71:09:
1d:57:54:5d:ff:ae:80:42:f5:4b:6c:77:79:0b:d1:ea:b4:fd:
a5:83:4a:34:8f:15:c3:73:bd:76:8e:86:be:d0:67:7f:85:68:
8c:1a:01:87:cf:7d:69:26:91:d4:d4:28:98:91:31:1c:37:81:
f0:6a:7e:02:dd:4a:ce:ac:3e:77:08:aa:cc:18:8d:ef:16:01:
26:2a:50:79:96:b5:e8:6d:17:d5:19:e0:15:29:3d:00:d5:45:
1e:5d:c9:61:0c:56:b6:b5:a5:f6:78:70:24:d8:c9:08:82:42:
dc:ed:f1:2b:75:38:47:56:40:b5:11:31:c2:f1:f6:5b:ed:2f:
c8:08:1d:1d:54:af:39:b6:20:3c:6c:79:e9:67:a6:82:5e:f3:
4c:c4:3b:20:b0:25:68:4c:5f:b3:74:b7:3f:ec:d8:06:1c:a7:
52:7b:37:d5:e9:84:7b:dd:05:2a:57:23:97:b1:72:5e:1a:fe:
4e:43:5e:86:25:6f:24:70:6e:46:9a:0a:90:93:b3:7b:7d:3f:
90:1a:02:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw
OUY1MjNCNEIwHhcNMjYwNjEzMDExOTI3WhcNMjYwNjIwMDExOTI3WjAYMRYwFAYD
VQQDEw02YTJjYjAxZi03NTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8KNvIljfCipCymOI66nXhIeW4BS21NyoRaaD4OKQpI/HQmQ4WOp+TToba5Pc
EK4rpoIwKJtxF4C9cXKinNHVO79VkkQZ9Ed+kuIgQXpDblTRNwrvlrDmLi0ymx3f
26KOE05BltohR0crWHGAvmUUZJdBlqZRgZ1+sHD8gjjFSBiuVX9cEmgcMQ5LrhN+
wNebrAovJs+rXNvcSdFJkx0bc7Ld7h6rQw/VbDd3eg5tM24yNi64HdujmvtqtYoA
38tNXUaatFXJAprYaUmF6XCm1kPzGfF5BLG56AUDG6eABGmnOzWfHy6bJxqou0Bq
n2dnCHtoCHeUnmJM4nRhmmA+TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcAqPqn
eGZZYylV7ctFXlYGGeopMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz
RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP
ckRmb0htSXN4RGdKOVNPMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKYynMZSMSqFLKqLX02VFp3BtNGtGEzH3RRAePdlGxWePqqvluibNiNQoG15W
hz39YMtQVHEJHVdUXf+ugEL1S2x3eQvR6rT9pYNKNI8Vw3O9do6GvtBnf4VojBoB
h899aSaR1NQomJExHDeB8Gp+At1Kzqw+dwiqzBiN7xYBJipQeZa16G0X1RngFSk9
ANVFHl3JYQxWtrWl9nhwJNjJCIJC3O3xK3U4R1ZAtRExwvH2W+0vyAgdHVSvObYg
PGx56Wemgl7zTMQ7ILAlaExfs3S3P+zYBhynUns31emEe90FKlcjl7FyXhr+TkNe
hiVvJHBuRpoKkJOze30/kBoCNA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:57:11 2026 by rpki-client