
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json)
Hash identifier: KTmSBalHGwvJYo8akKbgztnGCVW6kwxzgc5XUeIalZ0=
Subject key identifier: E2:89:80:ED:D6:55:F6:01:45:B7:67:07:36:7C:B5:D8:52:D2:58:08
Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
Manifest number: 01BF
Signing time: Mon 27 Jul 2026 05:36:51 +0000
Manifest this update: Mon 27 Jul 2026 05:36:51 +0000
Manifest next update: Mon 03 Aug 2026 05:36:51 +0000
Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: s1caVYORqHbp67u9z46MljGE1EyI4EnTj3YbHfCPVLY=)
2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: hWA9sbtTP3vDnNyxUlzJU40/vhKF33Gp8Ll5fnOcEtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Validity
Not Before: Jul 27 05:36:51 2026 GMT
Not After : Aug 3 05:36:51 2026 GMT
Subject: CN=6a66ee73-72e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:72:00:42:72:13:cb:51:6d:f4:44:b8:68:
91:d0:dc:af:1d:7c:32:e2:7e:67:e4:76:59:2b:cc:
f3:e7:69:27:f4:c4:ca:6d:ff:88:87:16:d5:6c:9c:
09:25:e6:dc:1f:28:4b:0f:17:37:cb:aa:6a:61:24:
46:f8:fa:c6:1c:66:fe:23:dd:36:9d:4c:14:cc:22:
24:16:12:50:a4:dd:7e:31:f0:5b:9a:89:ef:22:06:
39:a0:84:4f:26:db:18:aa:71:9e:7b:7b:f1:f1:34:
0f:fe:cd:90:63:9b:5e:ca:6c:4f:51:2f:1c:3b:04:
c9:b2:6c:f0:8a:6b:96:e4:c6:4a:10:b7:92:3b:55:
1c:a0:e0:6c:c8:c7:8f:50:62:6c:76:cf:e5:0b:54:
1f:61:c4:31:8d:f3:59:ee:f4:0d:1e:f0:ae:f4:88:
99:ae:c7:d1:3b:94:d0:ae:17:03:6c:10:c8:11:60:
6c:a2:f6:09:7c:86:64:92:de:43:74:01:4e:97:f1:
e8:c6:41:0e:db:27:c9:45:09:b9:f6:be:e8:c6:45:
c1:13:a1:8f:0d:af:26:ff:c2:e4:7e:d2:62:05:f8:
0b:a3:af:88:cf:fe:75:c8:25:3c:37:03:51:d8:c3:
37:16:02:cb:ce:0b:0e:11:96:4e:a1:7a:0d:5a:68:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:89:80:ED:D6:55:F6:01:45:B7:67:07:36:7C:B5:D8:52:D2:58:08
X509v3 Authority Key Identifier:
keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ad:27:56:a6:04:aa:a9:18:51:86:d0:c8:ee:db:38:41:da:
5b:74:e9:8c:83:38:a7:0d:05:1c:13:f9:51:29:8f:98:ec:6a:
2b:8b:b7:d4:ea:1a:47:3c:5d:6f:44:4d:fa:c0:83:c7:16:3b:
41:c2:ac:d0:47:11:f5:2a:54:a8:43:2a:fb:38:1d:26:2e:39:
9e:b2:b8:37:19:82:9b:12:ec:ef:d5:7d:af:92:07:4e:1f:04:
b5:d0:ad:5e:8f:cc:7e:72:a8:49:19:8c:f3:12:d9:c3:97:c3:
fb:1c:6a:d9:43:71:73:b6:8f:3b:ad:e7:ce:21:ff:87:0b:e4:
57:b6:27:b6:73:d7:11:69:2b:f5:1e:3e:11:52:20:54:32:e6:
82:c0:ab:e2:18:08:78:32:98:39:c6:19:6b:6a:2f:e2:98:15:
3e:71:0a:26:5e:78:fd:73:12:f3:d6:3b:7a:0e:9b:f5:ac:25:
10:e7:ab:bb:06:f5:00:3a:e3:78:aa:56:f2:e2:66:c5:3d:14:
fa:74:79:01:fe:52:85:a5:3e:18:ff:84:4e:bb:09:21:f5:d4:
7b:5d:83:a0:68:41:5b:83:c8:48:a4:97:57:09:92:9f:2c:ff:
79:6e:2e:ad:cc:c2:60:b5:89:d1:07:78:5c:f7:c5:19:2f:4e:
9b:20:72:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG
NDlFN0Q1RDAwHhcNMjYwNzI3MDUzNjUxWhcNMjYwODAzMDUzNjUxWjAYMRYwFAYD
VQQDEw02YTY2ZWU3My03MmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjttyAEJyE8tRbfREuGiR0NyvHXwy4n5n5HZZK8zz52kn9MTKbf+IhxbVbJwJ
JebcHyhLDxc3y6pqYSRG+PrGHGb+I902nUwUzCIkFhJQpN1+MfBbmonvIgY5oIRP
JtsYqnGee3vx8TQP/s2QY5teymxPUS8cOwTJsmzwimuW5MZKELeSO1UcoOBsyMeP
UGJsds/lC1QfYcQxjfNZ7vQNHvCu9IiZrsfRO5TQrhcDbBDIEWBsovYJfIZkkt5D
dAFOl/HoxkEO2yfJRQm59r7oxkXBE6GPDa8m/8LkftJiBfgLo6+Iz/51yCU8NwNR
2MM3FgLLzgsOEZZOoXoNWmj9pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKJgO3W
VfYBRbdnBzZ8tdhS0lgIMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy
OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjIzRi82NzBDMkYyQ0UyOUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1L
eXRYeHpxTlFacnIwbm4xZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs60nVqYEqqkYUYbQyO7bOEHaW3TpjIM4pw0FHBP5USmPmOxqK4u31OoaRzxd
b0RN+sCDxxY7QcKs0EcR9SpUqEMq+zgdJi45nrK4NxmCmxLs79V9r5IHTh8EtdCt
Xo/MfnKoSRmM8xLZw5fD+xxq2UNxc7aPO63nziH/hwvkV7YntnPXEWkr9R4+EVIg
VDLmgsCr4hgIeDKYOcYZa2ov4pgVPnEKJl54/XMS89Y7eg6b9awlEOeruwb1ADrj
eKpW8uJmxT0U+nR5Af5ShaU+GP+ETrsJIfXUe12DoGhBW4PISKSXVwmSnyz/eW4u
rczCYLWJ0Qd4XPfFGS9OmyBy/A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:13 2026 by rpki-client