
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File: AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier: m1ZQZ+EXnZhIYmEBKqjuXNFBSt7wCnMB686a6XG8sRM=
Subject key identifier: B5:63:71:83:1C:DF:AE:06:70:B8:C6:E3:C1:83:39:8A:5A:25:1E:F3
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer: /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial: 0893
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number: 088B
Signing time: Sat 20 Jun 2026 20:34:28 +0000
Manifest this update: Sat 20 Jun 2026 20:34:28 +0000
Manifest next update: Sat 27 Jun 2026 20:34:28 +0000
Files and hashes: 1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: bG5hvBkV15Eml4waVFw7cnvgCWsEEu0Tzg+25UgiEKA=)
2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aJ1rzrX52ih0nJe0c9m5UvMOZxkTO0Kam9iVSQYKSgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 20:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Validity
Not Before: Jun 20 20:34:28 2026 GMT
Not After : Jun 27 20:34:28 2026 GMT
Subject: CN=6a36f954-2f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:66:07:f2:66:1c:84:c6:cb:27:44:0f:c8:
48:2f:b9:b5:fb:e9:eb:b0:cd:05:25:90:65:5d:80:
f7:f6:9b:6a:d3:d8:b5:99:d3:37:1f:dd:15:43:a0:
a0:82:a4:d1:1e:ed:f9:9a:9f:a0:fe:94:4a:83:21:
ca:94:2b:3b:f0:67:5f:bd:38:16:7c:95:ba:78:25:
e7:32:8c:07:f6:29:8e:c6:10:db:ba:02:9a:ab:4d:
24:82:6f:3a:ab:95:e4:19:46:3a:4e:8c:57:56:fc:
b9:5c:1a:cc:81:36:cd:a8:e2:3b:22:0a:d3:f0:23:
86:5e:e2:19:87:23:38:13:fb:e2:fc:79:20:fb:1e:
1f:df:be:e0:ae:01:99:ec:6b:c7:8f:b8:63:40:4b:
89:14:7e:63:8d:b6:c4:f3:c4:51:2d:e0:cc:cf:3b:
ef:2a:e0:a1:bf:50:c5:d0:9d:1e:cb:aa:fc:6e:43:
55:c8:88:15:a4:77:d8:93:91:2f:7a:51:c8:ef:e9:
51:3b:7d:f6:ee:2d:8f:45:e2:fa:09:47:f9:8e:ea:
14:38:3e:12:fd:31:f3:99:89:0b:e8:71:3d:92:8e:
1d:77:01:0e:e6:16:4c:80:fc:4b:ef:bf:8d:01:15:
d6:63:c8:1e:dd:05:ff:ba:6d:c3:0d:ad:73:62:01:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:63:71:83:1C:DF:AE:06:70:B8:C6:E3:C1:83:39:8A:5A:25:1E:F3
X509v3 Authority Key Identifier:
keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:64:f0:4c:14:a2:f8:ab:77:19:5d:bd:41:fa:3d:b1:ac:cc:
e5:b9:f4:99:3f:f9:c5:b5:e1:ae:71:d4:e8:0f:b9:0f:16:ca:
db:ba:25:67:2f:a2:f9:81:b1:23:f8:4f:2b:e0:02:2f:84:16:
fd:4a:24:ac:5b:73:11:18:31:51:56:20:b8:2c:68:47:50:c7:
9b:01:c8:76:76:80:e9:2b:a7:ce:be:3c:1a:9e:d9:9b:fe:4d:
24:cc:49:48:40:b6:8e:d2:2d:6c:2f:68:4d:67:c4:d0:99:0c:
db:64:77:43:a9:7f:54:66:98:7b:a2:7e:75:6b:6e:8f:a1:18:
d0:8b:cc:af:93:60:5b:25:19:a2:00:cc:0f:a9:43:63:7b:dd:
81:92:da:38:93:7c:09:f0:eb:21:bc:59:39:b1:b2:43:e8:16:
dd:67:f8:32:d1:f0:80:42:60:4e:b9:ae:52:9c:0d:bf:7d:70:
00:53:53:1c:8f:79:94:21:a7:6e:ff:d2:a2:58:9b:6b:89:ac:
b2:03:94:6c:4c:99:0a:ef:56:28:a7:14:4e:eb:7a:8b:08:94:
c8:09:45:61:56:b4:35:c9:35:16:60:ec:a7:00:d3:72:12:ce:
fe:1a:a4:4b:f6:6d:86:b3:9e:52:aa:57:4c:08:c8:4b:0c:08:
cc:31:c2:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI1M0QxMTAvBgNVBAUTKDAwQzEzMUU2NjhCNUZFOTRFQ0I0MzkzMTg0N0E3MjhB
QUNFODJENEIwHhcNMjYwNjIwMjAzNDI4WhcNMjYwNjI3MjAzNDI4WjAYMRYwFAYD
VQQDEw02YTM2Zjk1NC0yZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmHRmB/JmHITGyydED8hIL7m1++nrsM0FJZBlXYD39ptq09i1mdM3H90VQ6Cg
gqTRHu35mp+g/pRKgyHKlCs78GdfvTgWfJW6eCXnMowH9imOxhDbugKaq00kgm86
q5XkGUY6ToxXVvy5XBrMgTbNqOI7IgrT8COGXuIZhyM4E/vi/Hkg+x4f377grgGZ
7GvHj7hjQEuJFH5jjbbE88RRLeDMzzvvKuChv1DF0J0ey6r8bkNVyIgVpHfYk5Ev
elHI7+lRO3327i2PReL6CUf5juoUOD4S/THzmYkL6HE9ko4ddwEO5hZMgPxL77+N
ARXWY8ge3QX/um3DDa1zYgFMowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVjcYMc
364GcLjG48GDOYpaJR7zMB8GA1UdIwQYMBaAFADBMeZotf6U7LQ5MYR6coqs6C1L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjUzRC84NkIwRDczRUY3
MUYxMUVBQUU5NkIyMjVDNEY5QUUwMi9BTUV4NW1pMV9wVHN0RGt4aEhweWlxem9M
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FNRXg1bWkxX3BUc3REa3hoSHB5aXF6b0xVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MjUzRC84NkIwRDczRUY3MUYxMUVBQUU5NkIyMjVDNEY5QUUwMi9BTUV4NW1pMV9w
VHN0RGt4aEhweWlxem9MVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcWTwTBSi+Kt3GV29Qfo9sazM5bn0mT/5xbXhrnHU6A+5DxbK27olZy+i+YGx
I/hPK+ACL4QW/UokrFtzERgxUVYguCxoR1DHmwHIdnaA6Sunzr48Gp7Zm/5NJMxJ
SEC2jtItbC9oTWfE0JkM22R3Q6l/VGaYe6J+dWtuj6EY0IvMr5NgWyUZogDMD6lD
Y3vdgZLaOJN8CfDrIbxZObGyQ+gW3Wf4MtHwgEJgTrmuUpwNv31wAFNTHI95lCGn
bv/Soliba4mssgOUbEyZCu9WKKcUTut6iwiUyAlFYVa0Nck1FmDspwDTchLO/hqk
S/ZthrOeUqpXTAjISwwIzDHCpQ==
-----END CERTIFICATE-----
Generated at Mon Jun 22 21:05:19 2026 by rpki-client