
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json)
Hash identifier: 5f1+AMoCKLMMmm/Fo8rAPLl7BqgkcjLCJDxeGg4pcaQ=
Subject key identifier: C4:66:8C:F2:3B:39:09:50:9F:27:8D:6C:7A:BA:00:2B:5D:98:0F:9D
Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
Manifest number: 0187
Signing time: Sun 05 Apr 2026 03:59:43 +0000
Manifest this update: Sun 05 Apr 2026 03:59:43 +0000
Manifest next update: Sun 12 Apr 2026 03:59:43 +0000
Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: HlKUpZZ5zJVec6YyWSgo3gJaW0KLerJLDSF8WycL6hk=)
2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: hWA9sbtTP3vDnNyxUlzJU40/vhKF33Gp8Ll5fnOcEtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Validity
Not Before: Apr 5 03:59:43 2026 GMT
Not After : Apr 12 03:59:43 2026 GMT
Subject: CN=69d1de2f-4e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:e8:c1:cb:86:58:29:c1:d8:37:0d:ed:21:
c9:c9:f7:02:0d:62:54:19:24:a9:76:ef:82:0c:87:
c4:da:86:62:df:ac:cd:a5:72:1d:b1:c2:3d:1f:f8:
a9:70:b6:4b:5d:cd:b6:ba:da:40:03:e3:b2:03:23:
11:98:1b:c4:90:0a:ab:89:1d:27:b2:63:20:22:41:
9e:8d:2b:f9:cf:3a:5a:86:0a:74:69:fd:a0:e1:84:
58:b9:50:7b:8c:98:22:c8:37:77:32:fa:a7:7e:76:
e1:c0:65:fc:9e:96:a9:71:86:08:ac:09:a7:83:14:
b3:d3:e4:35:74:45:eb:24:5b:c9:2c:42:55:98:bf:
72:49:85:7a:1d:a9:88:29:09:4f:45:fe:67:75:4b:
ba:31:d5:fa:d7:e8:75:53:bc:df:e4:a2:d5:6f:1b:
39:af:90:98:5e:ad:db:e9:fb:9c:41:93:d1:58:90:
ec:cd:22:0b:3d:47:a0:94:ff:7b:37:21:98:f5:50:
1b:a9:01:b7:49:b5:f8:af:45:da:0b:dc:7d:b2:88:
e0:ac:cb:36:b9:fc:69:67:91:6d:49:7c:ff:25:bc:
5b:c0:f9:7b:a6:b8:8f:76:d4:b5:98:8c:57:a5:55:
11:1c:f8:29:41:19:44:b7:c0:34:dd:70:a0:6b:a3:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:66:8C:F2:3B:39:09:50:9F:27:8D:6C:7A:BA:00:2B:5D:98:0F:9D
X509v3 Authority Key Identifier:
keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:16:ae:d3:d4:7d:d1:17:b6:38:20:7c:d6:4e:f0:9f:55:e8:
45:44:06:13:c6:b6:5c:39:89:77:be:c2:39:88:f0:5a:00:a2:
bc:da:25:cc:16:b7:a9:a1:93:7f:c7:b0:2d:7d:0e:9d:94:b3:
1a:e5:fc:7b:ba:46:10:37:37:ab:f4:7e:0d:84:82:16:cc:b0:
19:a7:5d:78:2f:63:71:10:4d:1e:eb:a7:9e:d9:ef:67:18:e3:
87:f2:cc:30:e9:57:3b:63:98:3a:eb:d3:a3:1e:c7:1d:9c:b9:
18:47:97:c5:88:27:92:8b:32:50:b9:14:b5:bd:eb:22:ee:de:
2c:a4:0e:10:c3:c2:a9:fe:23:6d:b5:ed:17:37:19:3c:db:52:
3c:04:3b:b1:8f:48:46:45:01:10:95:a3:d2:12:91:23:c5:6e:
50:a1:9a:e5:4e:3c:5c:9c:ca:e0:26:23:78:8d:c8:f4:07:78:
df:dd:08:95:e3:cb:2a:ae:75:da:cc:49:32:92:15:5d:76:a1:
8b:53:b8:6c:74:ac:2e:cd:02:04:90:3c:a8:ae:ce:33:2d:dd:
62:33:95:f1:d6:96:0f:1c:a4:7b:9e:15:5f:d6:e7:3e:e2:16:
c6:f2:e4:be:66:89:d1:84:5f:3e:b7:84:a1:bb:8e:7b:95:bf:
01:1e:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:46 2026 by rpki-client