
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json)
Hash identifier: kwx2yS0D8AkroJs1EqWH72N3uJDt4bFEEToMj5RDjIE=
Subject key identifier: 25:72:6E:95:D3:BA:41:F6:A4:8A:65:53:3F:85:70:5C:FD:32:E1:86
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial: 0336
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
Manifest number: 030B
Signing time: Mon 27 Jul 2026 02:23:14 +0000
Manifest this update: Mon 27 Jul 2026 02:23:14 +0000
Manifest next update: Mon 03 Aug 2026 02:23:14 +0000
Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: Xr0s5BU8bnQhRfVpogCZ0mIWXjQ5JulwpL1Tja/kwQw=)
2: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=)
3: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=)
4: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=)
5: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=)
6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=)
7: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: 8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=)
8: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Validity
Not Before: Jul 27 02:23:14 2026 GMT
Not After : Aug 3 02:23:14 2026 GMT
Subject: CN=6a66c112-ae83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:d5:84:24:47:86:a3:ad:df:af:20:61:95:
09:3b:48:71:7b:26:ff:52:49:b4:3c:c6:e3:9d:86:
7d:92:1d:38:d5:97:3b:76:64:28:29:5f:09:6b:7a:
f7:92:ea:b4:19:6e:0a:90:87:5f:df:49:9e:36:3e:
d5:5f:c8:2d:75:3c:91:44:53:f2:8c:a9:86:26:7c:
f7:f0:43:a0:e9:d0:b0:a2:70:37:7e:80:0d:e9:fe:
c5:91:5b:ab:80:b5:3b:d5:67:38:39:e2:d9:22:44:
54:dc:3a:52:e4:d0:fb:5a:0f:75:96:3e:c9:b8:f5:
9c:37:f1:d4:cb:fe:1f:54:b0:0b:aa:90:59:90:4f:
f0:83:68:73:d1:93:1d:71:01:e8:26:77:8b:86:d8:
1b:d9:83:1e:a1:5f:70:9b:9e:a2:e4:54:7f:a6:3f:
c9:2e:f6:d6:ea:d4:59:37:25:c9:c9:77:77:a6:bf:
8f:f2:63:40:66:72:35:c4:9d:29:3c:37:8c:68:e1:
ef:d4:ff:13:ad:0c:25:4a:4e:cc:7e:30:91:5f:09:
98:f6:3e:ea:45:b0:a9:c4:92:29:ff:b1:7e:8e:e4:
45:41:08:c9:e5:ed:d3:ce:2a:3c:8b:e0:6a:d2:c8:
cb:7e:ad:1a:9c:1b:02:46:0a:4f:f1:8e:a2:a9:5e:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:72:6E:95:D3:BA:41:F6:A4:8A:65:53:3F:85:70:5C:FD:32:E1:86
X509v3 Authority Key Identifier:
keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:3e:4f:8f:7a:81:cf:64:2d:e3:b3:da:e9:ba:dd:69:95:
dc:4a:04:92:22:f2:e2:a9:46:62:a1:ff:4b:e2:3a:1f:16:cd:
b0:99:1d:7c:2e:5c:79:d9:59:10:a5:a9:18:41:ca:a7:f9:b6:
20:e7:8f:e5:cd:76:4d:16:b6:43:2f:2e:b5:36:ac:58:9a:30:
3e:68:95:52:44:ef:34:58:a9:c3:a2:24:94:04:1a:b8:9f:3e:
72:ea:85:c7:0c:a7:f6:fd:ee:ff:d5:2f:d4:54:fd:2d:ef:23:
c7:95:a4:aa:cc:25:c8:13:8f:71:b4:c1:67:01:f5:ea:81:e8:
ea:24:ba:f7:c0:93:76:e1:56:40:cf:cd:7f:b7:eb:5e:9e:ab:
12:ca:76:9e:4b:4c:e5:f0:f6:71:4e:c1:88:5c:53:3f:d3:0b:
7d:ff:a1:73:f7:8f:84:49:be:5b:cc:6e:2b:ed:a5:94:9d:b3:
9c:e5:d2:88:e2:ed:5e:0f:fc:ea:bc:7e:73:05:28:38:49:ff:
fc:9c:95:b9:73:da:15:2f:a5:0f:58:8c:e7:b2:e9:b3:34:c1:
b2:41:5d:c4:88:bd:d4:fd:c4:e9:43:67:4b:63:ad:a5:57:4d:
1a:39:1c:5d:8f:82:98:53:e9:fd:36:11:70:29:20:b5:6e:63:
b2:60:11:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:58 2026 by rpki-client