
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File: AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier: C5wsRUQJL8XjHMJzheroimHglRXQ2GfxXwgP1pRohoM=
Subject key identifier: B1:FF:9A:82:34:D9:70:51:41:64:77:6B:8C:79:5E:52:04:BB:CC:70
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer: /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial: 087B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number: 0873
Signing time: Mon 04 May 2026 20:43:34 +0000
Manifest this update: Mon 04 May 2026 20:43:34 +0000
Manifest next update: Mon 11 May 2026 20:43:34 +0000
Files and hashes: 1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: ZXSsFO3zq9jyXb254gxmfsJKwJSOY/FokAQwOi7o4rY=)
2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aJ1rzrX52ih0nJe0c9m5UvMOZxkTO0Kam9iVSQYKSgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Validity
Not Before: May 4 20:43:34 2026 GMT
Not After : May 11 20:43:34 2026 GMT
Subject: CN=69f904f6-f2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:32:de:29:bf:13:fd:4d:2f:2c:24:05:f7:
14:5c:7e:14:8a:a7:09:93:ef:f9:df:4e:55:c3:16:
a2:54:d4:2f:51:b3:10:6d:fc:95:c2:90:0f:12:9c:
c0:31:b0:02:67:83:50:99:a4:ff:d7:f3:31:62:4f:
4e:1b:e8:8d:01:24:11:25:c4:04:81:9e:a0:82:ac:
90:ee:32:f0:e8:c5:9f:68:6a:f9:f1:35:bf:5d:4c:
a0:44:fa:54:d5:69:2c:dd:c3:33:fa:19:a8:82:ec:
0e:c0:3f:c3:7d:32:95:3c:d2:9c:90:b0:18:98:1b:
81:5e:eb:80:bc:3f:c5:3c:18:19:e6:cd:23:ce:02:
a1:72:0e:34:3a:c2:4f:32:95:82:c5:2f:d0:c4:45:
bb:64:08:e9:f4:e9:67:ff:fb:c0:fa:4b:b9:03:5d:
1c:19:88:13:e9:db:bf:f6:ec:13:f6:38:53:79:56:
eb:53:1a:24:3c:72:4d:dc:be:6f:a0:3c:9d:4c:df:
03:96:bc:ba:16:51:6f:ab:3b:f2:1f:79:87:6c:2c:
c1:9e:91:4b:bb:17:6c:cf:a6:81:b5:21:ac:2a:0c:
bd:ea:f7:bd:ea:c5:79:dd:28:c0:fb:bb:48:f3:d4:
72:fd:f1:00:c5:5c:0c:be:1a:a5:26:67:d6:49:37:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:9A:82:34:D9:70:51:41:64:77:6B:8C:79:5E:52:04:BB:CC:70
X509v3 Authority Key Identifier:
keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:fd:b7:5e:fa:82:77:b6:78:09:3f:7e:d0:1f:9b:cc:ae:7c:
1c:f3:33:c7:22:35:5c:4e:7b:f5:92:fa:32:97:52:f2:7c:fb:
9b:c6:63:fb:ff:38:df:e4:3b:d3:ba:a3:49:ca:31:cf:2e:fd:
d7:8a:c2:12:d8:04:85:0f:f9:c0:37:e2:af:6b:67:f9:fa:e2:
72:2e:a4:c1:87:89:ff:4a:15:27:59:23:d5:96:f8:81:ee:82:
47:4b:4e:6a:f0:60:7d:8f:bc:9e:51:55:8f:61:2a:a5:88:d9:
37:b1:f3:c6:72:26:4c:e9:0d:fd:48:e8:8d:c1:d4:35:92:68:
a5:59:f7:1f:b9:c8:73:62:2c:5a:70:6c:9a:3c:8f:ce:14:22:
65:c0:9a:56:a8:06:75:f5:19:51:96:15:00:dc:b8:8b:fd:69:
0f:df:2d:27:8b:1b:52:b2:57:04:25:01:da:39:2f:e5:f1:50:
17:86:a3:e5:ae:b5:5b:a8:08:35:05:13:64:32:59:a7:e2:10:
b5:cf:2e:ac:ba:50:13:2a:47:0c:44:04:bd:bf:0e:29:68:f2:
05:da:ce:a0:98:62:de:f9:57:4f:85:6d:65:13:bc:da:28:4f:
31:b2:e8:08:43:ec:10:63:30:df:ed:02:e8:d3:50:29:72:1c:
38:a8:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 06:32:47 2026 by rpki-client