
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File: AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier: E2/CQUa8JDJgPv0wICv+wq5XzGGO8aVImHGVzzw9ZQM=
Subject key identifier: 69:F5:FA:52:46:BD:7A:30:32:36:08:65:0B:DB:3A:C0:01:E4:4B:9E
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer: /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial: 0872
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number: 086A
Signing time: Thu 16 Apr 2026 20:36:32 +0000
Manifest this update: Thu 16 Apr 2026 20:36:32 +0000
Manifest next update: Thu 23 Apr 2026 20:36:32 +0000
Files and hashes: 1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: TBreFjeMb128FuJi2ZkVxL/wfUQIOxt+oNcAI/SPnyo=)
2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aJ1rzrX52ih0nJe0c9m5UvMOZxkTO0Kam9iVSQYKSgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Validity
Not Before: Apr 16 20:36:32 2026 GMT
Not After : Apr 23 20:36:32 2026 GMT
Subject: CN=69e14850-63b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:22:e8:07:ea:71:f1:3a:a6:24:37:97:98:
ea:75:23:38:08:1a:56:83:da:9e:72:31:bf:5f:ac:
aa:7c:1d:9d:67:b0:8f:a5:39:9b:70:cb:8b:86:29:
bf:59:0c:7f:01:f2:74:93:72:cf:fa:f0:e5:29:9b:
f6:5c:ff:fb:74:e3:7e:fd:5e:14:a9:5a:18:68:91:
35:6a:79:88:ae:0e:a2:9e:9d:09:ed:21:d0:2c:da:
f8:77:62:b9:dd:89:c2:1e:2a:56:44:41:5a:47:f5:
a7:0b:01:0a:22:83:4b:1d:a3:4c:52:0f:c9:db:f9:
6a:4a:4b:71:ac:25:b5:e5:d8:f6:d0:22:37:f1:6f:
0d:da:4b:74:d8:e3:f7:33:4e:13:27:1e:6e:11:15:
f6:2d:fc:a2:f5:d4:f9:a2:b4:c5:09:e3:65:00:c6:
0e:ec:e3:a4:d6:07:86:8a:11:73:5e:79:f2:7c:ad:
d7:08:d8:b3:2c:a0:3e:7b:e7:43:04:7a:b4:fa:6d:
e9:ee:93:bb:a0:b1:ea:7c:b6:08:af:1d:5e:ef:57:
6f:cc:69:cc:29:3f:db:9c:df:ec:71:2a:f6:d7:07:
80:9d:d0:a2:dd:cf:fe:c8:22:50:8b:76:91:83:00:
cb:fd:86:97:e1:e0:d1:71:c7:48:d6:00:aa:4a:85:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:FA:52:46:BD:7A:30:32:36:08:65:0B:DB:3A:C0:01:E4:4B:9E
X509v3 Authority Key Identifier:
keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:31:6d:23:7c:b7:aa:4a:42:f0:d4:d1:f3:59:f5:e1:44:0c:
8d:9b:05:07:68:26:86:fe:2c:ae:3e:98:76:68:74:50:17:c6:
10:ef:59:e4:5a:6b:ba:67:e4:d4:61:da:3c:d6:ad:e3:26:dc:
f8:2f:53:15:16:7d:36:bb:26:81:74:a8:31:3c:92:fc:d5:4a:
5b:38:89:8b:67:90:bf:d6:d8:ed:40:a3:93:3e:e9:66:1e:48:
ae:5e:aa:df:3e:89:38:bb:4c:9e:91:9a:6d:7b:df:73:e6:64:
1a:77:c0:5b:38:97:c2:3e:c6:05:8d:4f:50:bd:65:fc:60:cc:
c2:8f:8f:64:4a:a1:7f:6e:15:98:76:3f:c6:a5:c0:c9:53:5b:
f9:b9:ba:43:68:e2:45:46:79:b2:83:db:eb:1c:34:ad:95:8e:
76:b2:ab:06:b0:ed:97:1f:60:73:df:84:67:6e:9b:e1:27:2d:
54:47:dd:9a:25:d2:d6:ab:1f:2d:d9:85:cc:19:40:dd:33:34:
39:08:26:83:d9:c1:9e:2b:e3:19:17:2e:84:75:af:3c:03:eb:
83:9b:56:a9:1b:b6:89:c2:87:04:97:c9:a8:ae:4f:71:ac:30:
97:c8:88:4d:ba:df:41:c6:45:1c:dd:d7:66:f9:50:8e:cb:33:
9a:30:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:06 2026 by rpki-client