
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json)
Hash identifier: ToztNTuvh6HuOu4fOsGqIY/ki2vDnzzCXH9hEJ7GhIY=
Subject key identifier: E8:68:E5:A3:56:F7:67:4A:8F:E6:48:10:D1:F2:03:C6:3F:16:D6:02
Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
Manifest number: 0236
Signing time: Sun 01 Mar 2026 23:48:38 +0000
Manifest this update: Sun 01 Mar 2026 23:48:37 +0000
Manifest next update: Sun 08 Mar 2026 23:48:37 +0000
Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: hnN6TEteAsJCTIsgwrYg0TNEeWsym9EdaaVFpBe02Vk=)
2: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: i7fPg095F7w1Gp8Ev4N5gXFYKYbqtFZ/mtpgHv4F5ww=)
3: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: xhoAB8F3nbGTu7WfpGnVkOCBQJhj/jWvO8tM9P0b/FE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Validity
Not Before: Mar 1 23:48:37 2026 GMT
Not After : Mar 8 23:48:37 2026 GMT
Subject: CN=69a4d056-7de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:eb:2c:ba:9a:42:4b:a8:a0:1b:5a:9d:ef:
35:1a:cf:99:18:03:8d:3e:e1:e4:e5:f1:df:5b:cc:
3c:4e:fc:1b:cf:96:9b:b4:8d:77:13:eb:8b:4e:a7:
91:52:2e:14:14:7c:2d:98:a7:57:02:a1:5b:a6:a3:
fc:ae:5e:52:f4:01:82:63:d7:51:b7:2f:68:62:85:
c3:5c:15:01:4b:3c:49:e1:6a:65:f5:bf:0d:c4:a8:
e7:eb:51:e4:d0:47:b7:9f:bf:09:f1:81:41:41:5d:
af:75:e3:5e:4e:81:79:5b:df:ed:6f:dc:9f:15:52:
1c:03:5b:4b:87:f9:7d:14:e9:cd:78:f5:57:ef:7e:
aa:fe:a3:79:ec:73:4a:4a:31:8f:16:ad:b1:bd:68:
33:24:7d:50:bc:2e:74:43:ee:9e:9d:95:47:6b:35:
c2:41:d4:c7:fe:97:ed:b8:03:98:91:fa:11:1e:9b:
da:2c:bd:bd:0f:72:98:3c:73:22:ec:6b:33:4e:25:
61:33:38:07:2b:f2:e5:3f:fb:cb:2b:83:32:7a:53:
0a:58:82:ec:5c:ad:23:d7:6e:86:d6:61:a5:ec:83:
d0:c8:58:23:e1:cc:68:9f:66:e8:eb:19:4d:83:3b:
60:58:09:ff:81:09:33:c2:1a:01:26:14:6a:8b:7b:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:E5:A3:56:F7:67:4A:8F:E6:48:10:D1:F2:03:C6:3F:16:D6:02
X509v3 Authority Key Identifier:
keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:b7:0a:39:1e:ca:30:a5:9b:70:2f:ad:7b:84:b5:1a:04:1e:
17:ef:98:6d:4a:8e:7b:3b:b4:ff:b7:ee:2b:12:0d:c3:03:e5:
74:82:59:d9:ca:12:44:bd:08:c6:6e:41:77:8d:03:5f:fc:67:
a2:a6:28:b9:01:4d:43:10:ee:38:60:54:88:69:2e:66:9f:ce:
d1:6d:bf:fe:9d:c7:2d:5a:0a:63:51:e4:51:e4:f6:a7:f1:b2:
a8:9b:77:c2:30:d6:bb:db:a2:50:c0:3b:23:e7:72:d5:cc:7a:
57:53:27:f3:43:7c:53:c8:7e:32:64:ea:07:ff:90:89:1a:76:
1b:18:2a:9e:97:31:6e:9f:0b:c1:80:26:8f:02:17:ca:27:28:
a2:52:32:9d:4d:4a:05:96:20:4e:a6:6c:b2:36:05:4b:5a:0d:
30:a1:3f:de:6f:b0:c7:f7:12:ca:9f:84:75:68:f7:fc:3a:69:
e2:9b:cc:87:e2:2d:e4:c6:08:19:64:93:e3:6b:c6:07:4f:2f:
04:71:9f:29:d3:17:bd:9b:00:55:be:15:71:1e:4a:79:13:d3:
4e:33:92:97:5d:89:b3:de:7b:a8:27:1c:68:9f:8f:31:16:67:
d5:9a:57:7e:cd:58:4e:fb:5f:f2:35:ac:a8:4c:15:af:09:f8:
c6:a3:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:28 2026 by rpki-client