
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
File: Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft (raw, json)
Hash identifier: aCIhS1My+NZl9zBxQGxJrCqttMX2wCbqzjzPe993SrY=
Subject key identifier: A6:4F:F5:01:F7:BE:FF:D5:72:5A:9A:D0:D4:CA:FE:22:06:E0:62:03
Authority key identifier: 3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42
Certificate issuer: /CN=A91B6899/serialNumber=3A6EE6F015941F5072AE71391B172058A0190142
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
Manifest number: 28
Signing time: Mon 27 Jul 2026 11:09:57 +0000
Manifest this update: Mon 27 Jul 2026 11:09:57 +0000
Manifest next update: Mon 03 Aug 2026 11:09:57 +0000
Files and hashes: 1: Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl (hash: JS2gCVe6+Na/ygMzAPj34K9PtvY76hS1E+218CiN21Y=)
2: B70755C04C7311F1ACB58F89C4833773.roa (hash: LSxJplD9UL5reXwNEwfkGB8ity1ZcN9w6tgZf+NqgRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl
rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6899, serialNumber=3A6EE6F015941F5072AE71391B172058A0190142
Validity
Not Before: Jul 27 11:09:57 2026 GMT
Not After : Aug 3 11:09:57 2026 GMT
Subject: CN=6a673c85-45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:91:f9:4b:2c:64:17:86:6f:83:87:af:5c:
4c:9e:2b:60:4b:24:24:b2:be:b9:fd:b8:36:4d:f4:
c6:84:8e:19:e4:61:3c:0e:71:bd:94:fc:5a:15:74:
f0:25:e6:c7:52:93:83:cb:c4:45:e2:55:ec:a2:d8:
ce:9d:c5:e0:0f:e1:8e:c3:99:bb:5a:b7:61:45:b3:
f0:96:c1:75:7a:63:db:8d:1c:07:8e:96:1b:f9:a3:
1e:50:9f:20:15:f8:e6:c2:6a:ac:f5:5a:24:ae:f8:
e9:c0:1f:92:99:af:b4:08:06:67:75:ec:1f:d6:6e:
18:5c:e2:0b:9c:cf:33:35:f7:6c:d8:cd:94:5b:f1:
37:07:a7:20:63:70:27:4a:9f:8c:82:f8:bd:32:eb:
ba:5b:ed:19:10:4f:aa:87:a2:51:ee:48:81:58:bd:
e3:b0:b0:f2:e8:de:73:32:bd:4c:b4:cf:44:e1:24:
99:dd:f1:9f:e9:db:7e:47:b3:ad:11:e1:c1:b4:af:
4f:07:66:46:dc:6a:d3:37:6b:b1:5f:ed:d7:2b:d2:
a2:c5:f8:0f:2e:41:c0:db:06:94:24:a6:74:62:80:
b2:7c:36:0b:f2:8b:2c:85:74:ca:88:40:3a:de:de:
fa:ad:47:20:a2:cf:15:e0:0f:30:16:2b:f1:47:48:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4F:F5:01:F7:BE:FF:D5:72:5A:9A:D0:D4:CA:FE:22:06:E0:62:03
X509v3 Authority Key Identifier:
keyid:3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:57:09:6d:f7:d2:2c:81:be:f4:01:76:19:8c:71:e3:b9:89:
2a:c7:28:ca:d2:c1:f9:dd:75:d0:b0:0c:e4:e8:53:2a:4f:5f:
cf:3d:6d:e0:e5:a5:ab:2c:68:cc:a6:fb:34:35:59:80:64:77:
86:56:da:4e:ff:66:63:ce:77:67:3d:c7:e6:5c:80:0a:f8:49:
95:ac:b7:55:74:1e:27:07:09:26:c3:bc:3b:f2:d7:52:3f:fa:
36:c5:e9:04:9e:d0:af:3e:bd:40:c4:1a:03:23:48:34:ea:48:
a9:da:cd:d9:43:1d:f4:07:1b:47:3e:2e:91:9e:d0:74:90:f0:
b1:54:7d:a1:75:d6:21:03:f2:08:26:85:88:cf:d8:81:90:aa:
7b:15:ac:af:44:e1:4c:ba:00:42:ea:82:74:e6:c4:a7:80:a0:
84:fb:0c:c8:4c:e4:e8:3d:6c:1e:0f:5c:0d:d0:e9:a9:fb:0b:
e0:ea:70:46:18:50:09:1d:76:4e:0e:3c:f7:69:02:e9:72:74:
82:88:dd:14:fe:0c:f1:8d:c4:da:21:d7:0c:d4:b1:e6:4e:4c:
1d:37:7b:36:22:ff:80:e1:15:e7:1b:b9:f5:ee:08:a3:c1:14:
64:a3:76:ad:3c:2a:f1:71:1c:bd:22:2c:d3:9c:7a:d9:11:5e:
f6:e0:0f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:21 2026 by rpki-client