
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json)
Hash identifier: JzjwusCDGCOt9vdMBWEYuV/uha7PnMf7pMi3PvdH7N4=
Subject key identifier: 10:7D:36:23:3A:14:4C:F6:35:45:43:C0:0D:21:EE:67:80:3C:20:15
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial: 02DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
Manifest number: 02BF
Signing time: Sun 01 Mar 2026 02:20:09 +0000
Manifest this update: Sun 01 Mar 2026 02:20:09 +0000
Manifest next update: Sun 08 Mar 2026 02:20:09 +0000
Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: un5pLe+SNMCEujd4Yn9tYlU0/rV9oBu2E61VFux5Ag4=)
2: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IctexMIkkmuKRY28It4wmvJrqOn2UvVnqHfHqiMz3qg=)
3: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: bTu32emo4oNYJVA1lCeQHupAf6pJqBWu/TVi/rnIfJU=)
4: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: 5xlmT2kfel1cvCWV/wEirk2FPvjV62JTYKUe5pZJSHw=)
5: C124669A0CD811F1BF03794C353D8C67.roa (hash: aIl83ybzKIn2ULcvRaf2tve8Bv4UhBX/fARZRSyiDG0=)
6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: RaDP91UEhN5m0mKcwjFniZyRM8v4oThc8IlQpZodOMI=)
7: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: DvnuXlMxbSeKodLGBkCXBAwAbwtaoOVHkRHtB3pWfw8=)
8: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: LXwsroP8h2ediF7DOfVAsXACwu6J/MbgJS+T4Y1N2iE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Validity
Not Before: Mar 1 02:20:09 2026 GMT
Not After : Mar 8 02:20:09 2026 GMT
Subject: CN=69a3a259-4c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:b6:dd:78:1a:30:1c:ee:1a:f3:bd:68:54:
fa:2b:a9:7e:a8:1d:52:13:e3:bd:c7:e2:c4:60:9b:
dd:fb:f5:d0:24:fa:d2:03:27:4c:80:91:e8:54:98:
f6:34:19:50:71:bb:f2:34:ef:fd:e5:a0:50:88:7c:
65:c1:73:5d:4a:71:04:cc:02:30:cd:a1:d5:af:55:
fd:68:9c:db:2d:aa:19:c7:ef:5b:1d:a4:40:95:03:
4f:2d:bd:9e:00:91:5f:17:24:5d:83:3a:39:c6:d8:
1f:63:a5:8a:73:ed:1c:15:4c:d4:9d:0f:0a:6f:76:
dd:1b:da:32:6b:dd:12:a9:2c:f8:f5:5d:57:a9:7b:
8c:c0:35:b4:ce:2e:81:7e:53:ee:10:1f:e0:02:82:
14:7a:3b:a1:cb:8a:c2:15:48:47:5a:6a:df:fd:3b:
6d:95:68:c2:78:35:d2:35:0c:08:35:77:e8:1d:ec:
a5:1e:20:7b:75:d3:2e:73:79:d0:01:d2:6b:cc:7a:
7a:8d:10:fc:0b:92:ec:02:8d:d5:fa:7a:3e:34:2d:
6e:14:d6:3e:9f:bf:fe:0b:4d:13:74:fc:4b:79:65:
f4:b7:9a:ab:23:e9:7f:a9:66:e2:74:bf:8e:a0:74:
a2:56:f1:f2:94:cb:02:6b:5c:d3:b2:43:17:55:27:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:36:23:3A:14:4C:F6:35:45:43:C0:0D:21:EE:67:80:3C:20:15
X509v3 Authority Key Identifier:
keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:07:22:53:40:24:42:76:9a:6d:a5:e0:40:a0:3d:af:cf:d3:
b2:7c:50:58:44:99:9f:4f:9c:a9:a9:48:9b:e2:93:0f:ec:9f:
98:fe:d4:5d:33:9f:d2:e8:d0:07:ce:ab:21:a2:ed:09:4e:a6:
e9:5c:6f:d5:45:d0:79:5f:de:6f:e2:d5:d8:99:49:56:eb:1c:
25:71:22:c6:6b:ec:ac:1e:3b:c0:dc:ef:cd:c1:4f:40:12:15:
42:28:68:6b:ef:e1:c9:a4:0b:26:65:28:7d:95:fb:ec:8d:99:
6c:d6:78:9d:eb:5d:e7:8b:1c:b7:0f:bb:54:10:15:6b:cb:f2:
5b:b9:e4:f2:11:22:3e:49:59:a1:46:88:b2:2f:92:fc:e5:d6:
f0:bf:9e:72:75:1a:28:0c:52:9a:79:6e:a3:93:23:f8:3d:c9:
70:3d:f9:c7:f1:90:da:04:f3:9f:62:89:ac:a4:18:86:ab:be:
d4:ad:c7:1d:86:af:6f:08:22:b3:79:87:72:a8:d7:65:a0:03:
ff:a9:3d:c5:59:ec:55:7a:8f:9b:c4:83:63:09:84:41:23:e8:
1d:83:62:72:17:bc:e0:47:16:3b:91:14:ff:3b:cd:21:d3:cd:
af:50:0f:27:2c:eb:77:76:b1:2e:9f:1f:9b:93:e3:ca:e2:82:
e5:66:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:34:05 2026 by rpki-client