
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json)
Hash identifier: BcjKxoche4YEj9gdehOIcxWG5P15OCsurTLxtlofcFM=
Subject key identifier: 56:75:DF:E0:BC:24:C3:5E:6A:82:22:05:60:F3:DF:12:77:D9:80:E6
Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
Manifest number: 01CD
Signing time: Wed 19 Aug 2026 04:23:41 +0000
Manifest this update: Wed 19 Aug 2026 04:23:41 +0000
Manifest next update: Wed 26 Aug 2026 04:23:41 +0000
Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: 4TfNgDvCjnM98JmSPr2xpblRsCHG0aBhklvjmX4bhY0=)
2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: n00ZEfN+RQLQShEfABDiTugTxIvMJjAyQgEVggYMj0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Validity
Not Before: Aug 19 04:23:41 2026 GMT
Not After : Aug 26 04:23:41 2026 GMT
Subject: CN=6a852fcd-ccef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:1b:87:cf:35:8f:90:fd:e2:2e:a0:89:5c:
4b:25:15:2b:a6:69:9f:04:cd:5f:60:f3:a8:3f:b1:
82:34:2a:96:d8:3b:d6:f2:1f:b6:fd:0d:8c:45:e9:
d6:7f:c9:83:c3:17:92:f8:95:6d:e5:bb:14:fc:8f:
6e:fc:b1:13:4c:f7:ce:69:6e:44:35:6f:8b:8c:3c:
4c:f6:03:99:e4:bd:a8:a0:26:65:8a:e0:16:3d:8c:
f6:db:30:fc:e6:ce:ad:16:66:f9:06:8f:c3:ed:6d:
f6:17:14:c0:f9:bb:5c:6b:0d:36:11:4a:52:7d:d6:
b9:f6:3d:bf:bb:b4:9c:bb:e7:61:b2:8c:60:ac:e0:
ee:45:de:83:c6:f0:41:eb:e6:c5:56:78:f3:8d:85:
27:04:d2:f2:e3:06:3b:c0:11:97:ac:f4:1c:9a:67:
ea:4c:7b:50:5c:86:d0:1e:84:41:36:b2:6a:26:94:
3f:28:1a:db:41:06:93:35:5b:ca:fb:83:51:5a:3c:
88:4d:84:22:89:0e:0e:99:c6:7a:39:0b:af:21:2c:
04:15:1a:7f:86:ad:06:73:70:52:48:3a:71:4b:5d:
12:ec:46:a4:09:aa:ba:c5:fe:73:a9:fc:dc:7e:39:
19:02:40:98:5a:9a:14:e2:99:2c:9f:4f:74:05:42:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:DF:E0:BC:24:C3:5E:6A:82:22:05:60:F3:DF:12:77:D9:80:E6
X509v3 Authority Key Identifier:
keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:01:2a:5f:14:77:86:77:9c:06:7b:af:fb:2b:b2:bb:72:3f:
b4:ae:4d:94:cc:bd:e0:c4:e0:61:b6:76:fe:f3:23:0a:f3:a5:
f2:4d:e3:bc:ea:57:9d:26:30:62:99:5a:ea:41:53:6a:69:32:
50:37:0c:4a:47:d3:1c:7c:c3:e7:6c:6d:44:69:d0:7e:0d:e8:
01:c7:06:ba:85:66:9d:c6:6a:6f:f0:47:5f:da:9d:6a:7c:73:
76:7c:12:70:54:e5:db:ca:0c:a3:16:77:18:75:7c:44:0e:df:
6f:9a:b7:c1:ce:29:81:a9:fe:3b:3f:f9:5c:64:63:ee:c5:21:
6c:f7:d6:2f:62:5e:b2:85:09:dd:29:84:c7:e5:57:5b:58:b4:
b6:b6:a3:fd:e5:9c:89:42:d5:d1:8f:00:40:f0:c4:fc:8e:0f:
52:f9:ae:f0:ea:e3:ff:9d:31:f6:35:7c:26:2b:81:d0:f2:dd:
e2:d1:c4:37:55:fe:d7:81:9c:36:7a:00:84:12:56:e1:7b:b6:
78:d1:1f:dc:88:73:1a:76:27:83:03:7f:89:3f:28:e6:a9:7b:
bf:96:5d:ab:90:9e:37:ea:3e:49:88:3c:44:74:41:3d:ed:cd:
a2:eb:59:2a:f1:01:80:78:b3:28:5b:78:cb:5b:80:b9:59:9d:
d1:f2:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:27 2026 by rpki-client