
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json)
Hash identifier: GkIUOY1JETbBA8Rd5S0a7PPRLhAk/cieTnlOCtslUTU=
Subject key identifier: 3C:8A:E1:5E:F0:68:5D:D9:10:2A:3E:00:23:CF:15:38:E7:BC:A1:A3
Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
Manifest number: 024E
Signing time: Fri 17 Apr 2026 02:14:53 +0000
Manifest this update: Fri 17 Apr 2026 02:14:52 +0000
Manifest next update: Fri 24 Apr 2026 02:14:52 +0000
Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: HWE9yEOoSTqBYnse/yi2QmOWBzKsTkYEEafo/V4qOAk=)
2: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: xhoAB8F3nbGTu7WfpGnVkOCBQJhj/jWvO8tM9P0b/FE=)
3: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: i7fPg095F7w1Gp8Ev4N5gXFYKYbqtFZ/mtpgHv4F5ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Validity
Not Before: Apr 17 02:14:52 2026 GMT
Not After : Apr 24 02:14:52 2026 GMT
Subject: CN=69e1979d-5985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b1:1b:c1:b1:20:b3:d9:a4:e2:0f:f9:48:26:
45:69:ad:b5:b0:6c:4e:41:30:14:23:0b:11:49:fe:
f8:b0:11:63:05:c0:2e:f0:62:e9:3e:6d:5d:52:d4:
40:d3:b8:19:a5:14:3e:ca:1a:95:40:90:cf:5d:b0:
e2:f7:03:1f:6a:ce:36:45:06:6e:7f:75:d3:56:35:
a0:66:d6:1a:3c:e1:78:c7:af:68:b1:6d:74:27:14:
e8:76:e0:00:82:46:ab:63:c3:05:a0:a9:d4:9e:90:
c6:d6:db:cb:69:aa:48:e9:12:e2:76:77:59:93:f1:
f3:d7:c5:ff:ec:2d:ad:40:d4:43:58:a7:75:84:a5:
cd:b1:22:f3:ab:6b:aa:c6:94:47:69:b1:1a:03:d7:
0c:d2:6e:84:c4:9f:33:e2:d9:5f:a6:6e:e3:97:1b:
8a:6f:8e:f7:ed:2d:25:3d:64:a1:23:14:98:b2:30:
b8:35:a7:dc:6b:5b:08:77:d8:2f:21:88:69:64:35:
aa:78:4e:48:5f:51:6f:9b:34:bb:9e:fe:7e:58:65:
ea:1d:75:61:4a:c5:6c:b6:4f:61:bd:89:b7:7b:88:
a0:e0:19:2d:5f:3e:15:e7:7b:8e:b8:ea:13:df:cb:
75:0e:02:4d:47:4e:de:30:e8:64:58:99:ed:f3:99:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:E1:5E:F0:68:5D:D9:10:2A:3E:00:23:CF:15:38:E7:BC:A1:A3
X509v3 Authority Key Identifier:
keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:38:e3:93:38:69:cb:a1:c7:28:b0:81:b9:e1:ef:54:07:b8:
1c:96:14:ae:dd:cf:d0:f2:51:be:89:57:b7:2b:e2:f0:43:b0:
39:0e:d3:1a:91:02:c6:87:26:ef:9c:e4:ed:3d:0b:d2:79:30:
96:8a:0f:a9:9d:bb:c1:72:75:f2:9a:25:39:45:f2:2a:cc:7b:
fb:99:6e:cb:e1:6e:ba:38:0b:4b:ca:98:4b:2a:fd:40:7f:4a:
3d:78:4b:39:2b:ad:cb:b2:89:4a:06:3d:c0:dc:13:55:a9:30:
5a:7c:31:60:ae:37:e4:f5:b7:13:58:4d:71:14:2a:9b:55:d0:
ba:b2:e3:ca:d8:a7:9b:e5:ba:0b:90:cc:e9:e3:a3:c1:8e:2e:
c6:d6:b6:19:94:67:39:1a:06:ff:5f:1d:91:54:55:26:60:ed:
71:3c:f7:b9:40:1d:75:c7:f7:c5:50:fc:3b:0b:06:8f:74:82:
6e:5e:8a:f8:02:32:c8:f0:47:8c:1b:0a:c9:26:c8:9a:bf:75:
87:7c:c7:18:93:2b:2d:d7:9b:ac:11:68:4d:b3:7d:66:39:bd:
71:39:01:82:59:84:8f:b7:39:91:7b:ad:33:11:79:c9:91:61:
e2:af:3b:b0:ac:01:eb:0f:7c:06:f7:6b:bb:36:a9:ac:99:73:
b4:5c:93:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1ODg3RDQyNDlC
REVFN0JCQTIwHhcNMjYwNDE3MDIxNDUyWhcNMjYwNDI0MDIxNDUyWjAYMRYwFAYD
VQQDEw02OWUxOTc5ZC01OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg7EbwbEgs9mk4g/5SCZFaa21sGxOQTAUIwsRSf74sBFjBcAu8GLpPm1dUtRA
07gZpRQ+yhqVQJDPXbDi9wMfas42RQZuf3XTVjWgZtYaPOF4x69osW10JxToduAA
gkarY8MFoKnUnpDG1tvLaapI6RLidndZk/Hz18X/7C2tQNRDWKd1hKXNsSLzq2uq
xpRHabEaA9cM0m6ExJ8z4tlfpm7jlxuKb4737S0lPWShIxSYsjC4Nafca1sId9gv
IYhpZDWqeE5IX1FvmzS7nv5+WGXqHXVhSsVstk9hvYm3e4ig4BktXz4V53uOuOoT
38t1DgJNR07eMOhkWJnt85lbewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyK4V7w
aF3ZECo+ACPPFTjnvKGjMB8GA1UdIwQYMBaAFDjAscWNAN4/c61bWIfUJJve57ui
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwMC9GNUE5NTJFMEND
MDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNqOXpyVnRZaDlRa205N251
NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09NQ3h4WTBBM2o5enJWdFloOVFrbTk3bnU2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTIwMC9GNUE5NTJFMENDMDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNq
OXpyVnRZaDlRa205N251NkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjjjjkzhpy6HHKLCBueHvVAe4HJYUrt3P0PJRvolXtyvi8EOwOQ7TGpECxocm
75zk7T0L0nkwlooPqZ27wXJ18polOUXyKsx7+5luy+FuujgLS8qYSyr9QH9KPXhL
OSuty7KJSgY9wNwTVakwWnwxYK435PW3E1hNcRQqm1XQurLjytinm+W6C5DM6eOj
wY4uxta2GZRnORoG/18dkVRVJmDtcTz3uUAddcf3xVD8OwsGj3SCbl6K+AIyyPBH
jBsKySbImr91h3zHGJMrLdebrBFoTbN9Zjm9cTkBglmEj7c5kXutMxF5yZFh4q87
sKwB6w98BvdruzaprJlztFyTiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:29 2026 by rpki-client