
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File: AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier: GOCnH7sjES5BhIvObEQlNJCTM3Rrci5sF9n2FBCC9JM=
Subject key identifier: 3C:E0:FC:FC:FD:C1:A0:D0:9A:65:89:09:36:79:33:15:07:EF:74:32
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer: /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial: 08C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number: 08BB
Signing time: Tue 22 Sep 2026 20:18:40 +0000
Manifest this update: Tue 22 Sep 2026 20:18:40 +0000
Manifest next update: Tue 29 Sep 2026 20:18:40 +0000
Files and hashes: 1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: gV2mqDf5qwc1cW2hJHIeSseaX9n6gkB66FU5pP+tK/c=)
2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aJ1rzrX52ih0nJe0c9m5UvMOZxkTO0Kam9iVSQYKSgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2243 (0x8c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Validity
Not Before: Sep 22 20:18:40 2026 GMT
Not After : Sep 29 20:18:40 2026 GMT
Subject: CN=6ab2e2a0-763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:49:c4:88:ab:24:f8:52:26:e1:f6:a1:50:
f5:dc:54:26:84:28:43:c8:af:a4:1e:1d:48:be:ef:
a6:ee:ff:78:9c:50:8e:e5:79:49:bd:2f:1c:87:35:
79:3a:ad:74:68:01:74:79:1e:bb:0e:87:cc:fe:fd:
28:81:00:00:20:55:3a:47:6c:a6:7f:98:32:f1:74:
2f:45:d9:5b:b0:71:8a:c0:5e:72:f6:8a:14:41:e5:
6c:29:ef:ba:77:23:21:5c:ee:0e:07:ea:64:48:af:
77:e7:a0:60:ee:14:de:74:83:f4:dc:4a:f2:f0:80:
b4:db:0d:69:16:2c:30:ab:b8:f1:6c:09:10:ee:d9:
4e:ba:d9:ec:75:e2:0c:2b:52:f9:05:ef:a6:3a:53:
f6:23:e6:4c:53:17:05:3f:fe:20:25:e7:48:82:4e:
84:51:30:58:19:f5:28:00:6c:23:75:78:ab:62:47:
94:5d:3f:00:64:6a:69:17:10:97:95:17:fa:a9:46:
f7:e7:fe:c5:4e:a8:94:f6:30:7e:7f:9d:c4:d6:29:
7d:72:5e:ff:96:63:b1:f2:cd:da:09:9e:92:a7:0e:
89:b4:85:7f:54:8f:d4:37:4a:b3:6e:e5:88:12:5f:
20:70:8a:4c:dd:73:a3:45:60:b0:b9:9b:26:49:d2:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:FC:FC:FD:C1:A0:D0:9A:65:89:09:36:79:33:15:07:EF:74:32
X509v3 Authority Key Identifier:
keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:3d:f9:c0:26:d0:dd:c1:53:ce:a7:02:f3:01:e1:91:05:a6:
f5:53:5c:08:d8:d8:68:44:62:f6:75:ef:82:06:8e:9a:46:52:
af:b6:79:0a:36:18:ad:a4:73:aa:0c:da:49:4b:d3:3b:b8:73:
55:9b:e8:16:a2:8e:64:f9:48:57:a8:41:6d:ec:e9:ca:73:f2:
08:17:e4:28:7b:7f:8e:cc:cc:32:45:93:8e:36:18:ab:e0:9a:
b5:10:96:00:be:15:c3:7b:aa:80:7e:15:bf:9e:1e:53:c6:22:
3c:e5:2e:a0:52:09:69:0a:9c:d9:2a:05:36:10:f8:cf:aa:b4:
35:6d:cf:6e:e2:10:36:f6:e8:e5:c8:71:26:99:ac:c0:8a:75:
f2:48:08:9c:9b:05:08:23:19:63:5f:dc:4a:14:9c:a2:f0:f9:
04:8b:65:e2:95:0b:54:bc:29:b4:4f:93:6a:b1:5e:d7:39:97:
c2:0c:d0:cd:bb:af:c9:6f:06:c1:98:5d:b0:54:26:2c:ce:b1:
20:3e:79:e6:32:ae:43:e5:be:cf:4e:3b:66:e6:9f:df:dc:df:
cd:98:55:b6:42:8c:e6:27:98:15:08:98:76:0e:9e:0e:f4:b2:
46:26:b1:21:6a:c7:2a:ac:69:0c:23:e2:ac:ed:06:42:8c:77:
77:06:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:26:40 2026 by rpki-client