
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
File: amXibTSlO_J-8hE5NjBzuia52_o.mft (raw, json)
Hash identifier: RXZjwEGTKG8ldjXSKfphMd5BTJxPTaynoSOXSU+VTx8=
Subject key identifier: 9C:1A:17:14:9B:6D:D4:13:1D:CD:6D:2D:F1:53:62:47:AE:72:1F:94
Authority key identifier: 6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA
Certificate issuer: /CN=A914B46A/serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
Manifest number: 0649
Signing time: Sun 26 Jul 2026 23:32:26 +0000
Manifest this update: Sun 26 Jul 2026 23:32:25 +0000
Manifest next update: Sun 02 Aug 2026 23:32:25 +0000
Files and hashes: 1: amXibTSlO_J-8hE5NjBzuia52_o.crl (hash: RJFMZWoEFHeIxL9nua3WxvlzkJVTgO3V3i2AuxxE9r8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl
rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B46A, serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
Validity
Not Before: Jul 26 23:32:25 2026 GMT
Not After : Aug 2 23:32:25 2026 GMT
Subject: CN=6a669909-476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:57:2d:f8:bc:3d:7f:5d:da:a3:7a:b6:47:
b5:83:eb:2d:12:f2:30:15:f5:89:b1:e7:6a:cd:83:
56:7b:4e:74:58:e5:e9:a8:4b:27:5d:08:2c:d2:97:
d6:76:67:ce:e3:26:df:2b:81:93:b0:3a:61:cb:7f:
05:7d:81:36:f4:42:8b:84:7e:e1:66:02:63:20:a8:
78:38:34:cf:6a:fc:ac:c4:cd:75:b0:c9:33:cc:7c:
70:f1:89:99:68:43:04:93:fa:55:4a:a1:25:03:4b:
8d:09:89:47:44:18:0d:38:ed:e4:16:c5:60:13:31:
55:ec:89:91:83:25:e2:18:39:09:2a:49:e8:46:f8:
73:2a:01:54:94:70:06:f0:73:78:00:1b:c8:4e:2b:
90:21:11:6f:1e:94:83:81:ec:17:3c:de:66:a2:17:
b2:19:3e:2d:da:85:35:83:95:38:46:3e:f9:a5:23:
5e:ee:59:eb:9f:43:e3:a9:ee:d2:5a:f0:51:67:5e:
0a:ee:47:05:76:d1:5e:b6:c0:23:4b:83:5c:86:d8:
17:b2:65:f5:c6:0a:2f:59:64:e6:1f:be:25:13:a1:
05:1a:58:f5:b3:1b:64:cf:45:b6:38:3c:80:44:4e:
7d:9a:99:12:1b:1e:43:2b:d8:d8:92:20:14:53:e9:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1A:17:14:9B:6D:D4:13:1D:CD:6D:2D:F1:53:62:47:AE:72:1F:94
X509v3 Authority Key Identifier:
keyid:6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b1:88:f8:17:53:60:99:da:66:f5:6d:ee:f5:d8:49:93:f8:
5b:9e:b2:2e:c8:f4:66:f6:20:bf:e0:1c:8c:1e:6e:bc:65:40:
46:bf:48:6c:a6:e6:0b:91:9a:f1:0b:ef:af:76:37:e4:27:ab:
b9:57:6e:1c:10:29:c9:f7:a5:6f:5c:1e:f3:77:5d:7d:d3:73:
75:47:b3:04:6e:6c:ea:db:0f:a6:1d:13:8f:9e:d3:46:15:83:
b9:45:63:07:6d:bf:5f:34:0f:5f:30:02:d3:8b:31:d0:4c:09:
10:12:29:32:66:eb:be:8f:72:49:bd:eb:e6:85:b8:2c:25:28:
8e:b0:43:c0:c3:63:54:a4:91:16:00:1e:9b:1d:c8:cc:8c:f2:
d2:e8:94:7b:a2:f7:48:13:f0:6f:b6:0f:3e:57:c4:e4:8c:61:
c8:a5:c6:35:1f:b1:58:68:ad:cf:d2:98:84:94:8b:69:d2:bf:
36:f5:a0:ef:a2:e4:05:32:75:80:68:0d:6b:7f:47:92:03:c4:
8a:86:8a:09:60:53:02:a6:9c:8c:29:99:f8:59:12:39:e9:7c:
1b:a9:4a:d4:3c:77:78:45:03:b2:64:2b:04:ba:d5:1c:5e:50:
51:54:6c:ad:82:e7:bb:77:b2:8b:9a:94:c9:74:1e:1f:9e:11:
66:76:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:48 2026 by rpki-client