
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File: AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier: j5CzkdudSNCau/VQaOyNBqz8DoBCTBlJ5tFP6ATcfjA=
Subject key identifier: FF:96:A4:08:03:FD:66:3B:14:58:47:B5:A7:36:48:52:FA:09:86:9B
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer: /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial: 08D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number: 08CB
Signing time: Tue 20 Oct 2026 20:35:30 +0000
Manifest this update: Tue 20 Oct 2026 20:35:30 +0000
Manifest next update: Tue 27 Oct 2026 20:35:30 +0000
Files and hashes: 1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: du+YvrK7ceN1gqxyTcY6FtCbD17/6V1EgnDk/TAXI1g=)
2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aWZdTHvgfMYVR/0L0jLPnyxE2ddji7eLE0/+8pTBCcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 20:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Validity
Not Before: Oct 20 20:35:30 2026 GMT
Not After : Oct 27 20:35:30 2026 GMT
Subject: CN=6ad7d092-46c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:ec:e4:15:26:14:91:af:53:e0:85:d5:d7:
b6:81:1c:5f:2c:bd:f2:bb:67:be:cc:c0:65:92:3c:
69:b2:c9:30:b7:b4:0f:4e:6d:06:04:79:09:9a:36:
a5:b1:5f:91:3b:a6:45:e9:6a:2e:c0:ee:eb:5e:8b:
07:49:b6:20:4a:26:f7:89:44:9e:2f:ae:20:95:3d:
ae:b8:40:4c:e8:be:21:a3:85:da:58:4f:b3:97:60:
9b:84:6c:5f:8f:b3:da:28:b3:10:fa:d0:25:0d:82:
ac:ed:a5:41:7c:10:3d:57:e6:4b:c3:d6:78:3f:a5:
23:98:13:9c:61:f9:54:58:92:38:99:25:b5:8b:c2:
94:9d:38:7c:2c:90:57:4f:de:e4:38:75:76:d2:46:
ae:03:aa:00:40:65:ad:f2:29:2e:ad:fd:c6:b1:3a:
4a:4d:93:f9:72:cd:9a:23:0a:02:3c:4d:b8:08:ec:
a2:0a:5d:f1:b5:c8:40:44:a8:e9:c7:13:8f:f6:b0:
3f:81:42:b0:60:02:1f:9f:cc:93:7d:73:35:aa:41:
ad:10:55:2e:c6:33:6a:b9:36:aa:69:c5:6a:27:55:
24:7d:1e:96:56:7b:05:16:92:73:a0:00:12:a9:a6:
5d:8d:0b:da:db:11:2f:2e:ca:4d:f0:ea:71:8c:98:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:A4:08:03:FD:66:3B:14:58:47:B5:A7:36:48:52:FA:09:86:9B
X509v3 Authority Key Identifier:
keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:a2:5b:0e:c1:81:c0:1f:44:19:fe:38:12:ba:46:4f:32:54:
a5:86:84:d0:bb:61:a5:c0:6d:67:76:15:fc:0a:bd:20:99:13:
e6:00:60:68:67:15:50:ec:ee:0c:d7:04:64:1a:2a:cb:94:4b:
0b:b4:5f:a5:8a:f5:7a:26:65:82:59:39:e5:e4:85:55:69:06:
c3:a2:d0:49:9a:54:d0:7e:f4:62:1f:8e:15:da:f0:c6:c8:2d:
1d:6c:bf:90:ac:1b:35:e7:b2:df:9f:0d:b9:fe:fc:64:e2:ba:
5c:83:78:26:53:0b:6e:4f:cb:cf:fa:8a:08:ac:53:5f:13:79:
a2:6e:db:64:12:53:c8:a8:8b:a9:fb:94:39:dd:f6:a2:97:bc:
61:43:77:48:51:98:7a:d9:5e:e1:06:61:23:ba:40:29:1f:c2:
90:33:2c:ab:a0:6d:6b:ea:9b:ee:dd:91:41:8b:88:90:04:fd:
19:67:51:64:62:0e:02:5f:84:ad:30:96:0f:1f:58:05:d8:85:
8e:f6:f7:0e:6f:a6:f5:9e:6a:ea:b9:a2:9f:9e:fa:a0:bd:4f:
a5:15:cf:65:0b:ae:d6:40:c4:6b:a6:2b:a4:d7:db:48:6f:19:
bb:42:63:fe:ad:f9:4d:25:24:2f:cf:5d:e6:4b:0f:54:aa:30:
c1:74:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:36:23 2026 by rpki-client