
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json)
Hash identifier: 6YJsdS02riPhSVFm3YYSSaaLOdTgqvhDdg0r22jNjE0=
Subject key identifier: 68:74:0F:04:BF:FB:35:EA:D7:9A:C3:58:55:7A:6F:64:3A:C4:83:12
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
Manifest number: 0222
Signing time: Mon 02 Mar 2026 02:51:47 +0000
Manifest this update: Mon 02 Mar 2026 02:51:44 +0000
Manifest next update: Mon 09 Mar 2026 02:51:44 +0000
Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: Elx5wwQrnBAtWcm4AXb1Y/hJPDcqCJhnOFFo1IK5t2o=)
2: 15F2CAD0D0AD11F08058D727C4F9AE02.roa (hash: YLMA9nTAlWfeJbokNuZSOeyCNtPrV//prQQ6jsVgAzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Validity
Not Before: Mar 2 02:51:44 2026 GMT
Not After : Mar 9 02:51:44 2026 GMT
Subject: CN=69a4fb43-e552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:93:cf:fc:eb:b2:96:f2:fe:72:89:52:2e:
83:64:a0:5f:e5:f2:71:aa:03:40:a1:74:a1:19:b3:
94:d0:73:36:59:3d:f1:42:9b:93:2a:66:13:c4:51:
f7:a0:e9:fc:12:97:17:43:a5:b9:1b:89:e4:0f:ec:
48:46:e1:7c:19:5b:7e:d6:62:09:16:ec:d9:a5:f6:
29:87:43:22:ae:0e:7a:4e:a4:c9:94:fe:c1:44:54:
ec:0a:32:42:9e:56:a9:df:e3:10:07:e9:69:e0:2d:
43:53:d4:54:80:07:70:46:c2:d0:bf:4f:30:ad:53:
49:49:ac:1f:76:98:f8:ee:07:ac:99:00:0a:b6:cb:
3e:a6:48:76:bf:a6:4d:48:72:a7:bc:04:b9:78:74:
78:8a:d7:ec:c5:a9:89:57:1b:32:4a:16:22:1d:60:
cc:b5:02:32:21:54:06:e5:89:cb:c4:0e:68:a1:79:
02:bb:96:09:c9:b3:5a:6d:76:56:3d:06:52:7e:ea:
de:39:77:0f:dd:88:e1:47:b1:ca:7e:59:eb:ef:83:
f2:7a:d2:3c:ea:2c:54:e2:40:c1:93:0e:4a:6e:5e:
54:d2:60:18:52:ea:24:b0:ca:c7:e9:e6:af:bd:a0:
6d:a5:12:f5:de:6e:36:77:c3:2a:6a:84:96:66:32:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:74:0F:04:BF:FB:35:EA:D7:9A:C3:58:55:7A:6F:64:3A:C4:83:12
X509v3 Authority Key Identifier:
keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:76:33:f6:ce:f5:d3:fa:10:13:26:d5:33:b2:48:33:90:a8:
29:5d:1d:b7:92:12:e5:af:3f:19:d8:b1:32:8f:ce:86:05:29:
9b:11:be:13:b6:e5:04:13:33:db:8b:89:51:76:47:d9:fd:e6:
57:90:bc:03:33:ba:99:26:c6:39:09:d2:a9:94:70:bc:59:6b:
e6:c2:c9:4a:24:8d:bd:6f:b9:8d:80:a3:e9:8f:33:52:bb:70:
6c:05:35:09:1c:6a:3d:1f:82:bf:b7:dc:15:da:87:9c:7b:95:
77:9f:aa:97:08:f7:97:18:e3:02:5a:f2:76:0b:2b:72:a8:d3:
5b:8c:1c:61:eb:d7:c0:59:89:f4:0d:86:10:23:b2:1c:3e:22:
38:00:43:b7:19:7f:27:73:39:7d:ca:1d:b0:8f:fb:db:5c:22:
28:55:80:a2:e3:fa:2a:f3:7d:c7:09:17:d9:2a:68:f9:17:c0:
7e:c7:a8:df:ae:a0:98:4c:56:a4:fb:8d:78:52:17:f9:b0:54:
78:89:cd:b0:f1:da:8a:bf:73:8e:0f:be:ce:1e:b6:c9:31:40:
3d:f1:fd:02:fe:08:17:b8:8c:f5:84:b5:a5:ee:06:7c:8f:d9:
a7:4a:2b:fd:23:21:bc:c7:4c:af:9c:5b:ee:96:6f:ee:3e:5f:
16:d8:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:29 2026 by rpki-client