
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File: AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier: aYJQ0J+KFgn3J8vImgTP7TG05V2sBtcctoB+l2Aahyo=
Subject key identifier: FE:5B:04:B0:6D:09:9B:C4:4B:39:A8:50:86:EA:E1:90:B9:D7:7F:97
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer: /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial: 08A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number: 089E
Signing time: Tue 28 Jul 2026 20:58:42 +0000
Manifest this update: Tue 28 Jul 2026 20:58:41 +0000
Manifest next update: Tue 04 Aug 2026 20:58:41 +0000
Files and hashes: 1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: PRvNsAtKs5K3GCIsoJUnNDy1z4+dFnmibP37dp+0cmk=)
2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aJ1rzrX52ih0nJe0c9m5UvMOZxkTO0Kam9iVSQYKSgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Validity
Not Before: Jul 28 20:58:41 2026 GMT
Not After : Aug 4 20:58:41 2026 GMT
Subject: CN=6a691802-d032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:24:2d:3e:4f:b0:d2:ac:86:ef:d6:6a:e5:
aa:ed:c1:ed:af:bb:d8:ed:2a:fa:b4:76:84:55:c4:
36:74:27:0b:f8:a5:16:47:32:16:49:ce:ae:fc:9f:
1f:1f:07:17:7a:e2:79:be:2d:a0:d7:d8:fe:b4:54:
4e:bf:d4:a3:5f:7b:19:5b:ae:44:d4:62:d9:22:1f:
53:1e:21:52:18:53:fb:0c:b3:2f:d8:b9:47:9a:5f:
ff:fa:89:74:7b:c3:24:0f:7c:3c:22:ff:de:0d:f8:
39:44:bc:7a:bf:8d:12:cf:9b:bd:60:e0:f4:02:f4:
2d:14:a9:50:95:07:49:ea:37:38:00:82:77:36:c1:
d7:0c:fe:14:1e:aa:93:fb:9d:14:f0:99:1b:61:0d:
7b:29:24:6a:b8:52:f0:fd:61:47:8a:9f:3c:18:eb:
09:87:cf:87:13:b0:57:90:92:fe:55:28:e4:7b:dd:
1d:8b:4f:da:58:0f:79:10:d0:4e:35:f3:c3:16:b1:
c2:c0:e3:7e:da:28:57:69:27:9c:70:35:f2:9e:3d:
19:56:44:e0:09:c4:0e:44:3c:cf:c5:61:cc:42:36:
43:35:c2:e1:29:2b:5f:df:ed:6a:81:d2:68:b8:54:
cb:d4:74:de:97:c0:e0:41:0b:ed:b5:b5:69:51:1d:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5B:04:B0:6D:09:9B:C4:4B:39:A8:50:86:EA:E1:90:B9:D7:7F:97
X509v3 Authority Key Identifier:
keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:36:df:1c:1f:3a:fb:a5:64:f6:dd:01:8d:ca:9e:89:e3:ef:
88:5d:81:c0:3f:f6:90:fc:1f:d7:96:bd:f5:09:3d:79:e2:2b:
b6:e7:0c:49:af:12:30:ca:92:1b:d4:44:6a:33:4c:95:33:bc:
46:86:7e:d7:26:fe:a5:b0:07:8a:19:87:4c:bd:cc:75:44:0f:
d7:c1:2b:23:ec:bc:bc:15:ef:e1:c0:87:e9:b9:0f:76:ac:d3:
df:09:db:4b:c4:0d:ce:a1:06:12:4d:df:3d:5e:05:6b:d3:c8:
72:38:c2:f2:de:4d:ae:d5:3a:13:55:6c:0a:9f:34:f5:c6:ab:
ea:fd:5f:3f:2b:89:06:3a:ca:ed:18:35:38:cd:b0:a4:59:bb:
21:49:fd:fa:69:7e:65:46:a7:30:8d:a4:6b:16:0f:3b:17:e3:
25:d9:ea:3e:e6:5a:0e:1b:fd:c8:9f:94:39:8a:e6:7e:1a:5c:
f2:2c:72:de:8f:bc:88:e9:5a:59:17:ee:ac:cc:ae:43:26:fb:
32:3e:1b:f8:ff:0c:1b:60:b1:d4:0b:1e:40:f2:44:22:83:90:
5e:7e:6a:9a:00:fe:6a:0c:93:30:12:53:85:ce:c8:c6:71:97:
07:1f:ce:3a:4e:cd:94:47:55:15:85:8f:33:f1:47:32:d7:33:
88:f3:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:03 2026 by rpki-client