
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
File: amMZbMzcZmzLXDgP7RbG8O-w-10.mft (raw, json)
Hash identifier: axPyxK0crr3zWJvigEYlo/CpWYpBoFuJa2BUGYY3DSY=
Subject key identifier: 24:21:EE:88:FF:94:35:E0:4E:7F:43:18:4D:6D:5B:D6:FA:89:66:C3
Authority key identifier: 6A:63:19:6C:CC:DC:66:6C:CB:5C:38:0F:ED:16:C6:F0:EF:B0:FB:5D
Certificate issuer: /CN=A91C175F/serialNumber=6A63196CCCDC666CCB5C380FED16C6F0EFB0FB5D
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
Manifest number: 20
Signing time: Tue 19 May 2026 08:45:42 +0000
Manifest this update: Tue 19 May 2026 08:45:41 +0000
Manifest next update: Tue 26 May 2026 08:45:41 +0000
Files and hashes: 1: amMZbMzcZmzLXDgP7RbG8O-w-10.crl (hash: /RkGb6xfi2qTIU0siXB4e7FCLv6sdt/4StUmSb369rU=)
2: 32F3695A24D611F183242288AB833773.roa (hash: cN0LkN23o7Jd+cV1/heAkHiokcHf45cviCoxSSBhd58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.crl
rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C175F, serialNumber=6A63196CCCDC666CCB5C380FED16C6F0EFB0FB5D
Validity
Not Before: May 19 08:45:41 2026 GMT
Not After : May 26 08:45:41 2026 GMT
Subject: CN=6a0c2336-6472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:fb:a9:9a:0f:64:e1:19:b1:d6:a2:3c:91:
40:1c:a6:81:f8:aa:e8:82:07:4f:36:b6:f0:d1:16:
7a:b7:69:53:f1:dd:d2:2b:a8:59:54:17:4e:9d:46:
7c:35:3f:d1:f3:2d:96:e7:ce:1e:cb:00:c3:c1:10:
24:fa:61:ae:11:75:b7:19:b2:2e:8f:65:7f:92:48:
38:74:7f:2a:b8:ea:ae:2f:b5:03:7b:1b:3c:3a:9a:
df:4a:c7:41:e6:42:79:d2:9b:e3:44:11:b2:35:ed:
3b:36:0a:60:27:f9:b3:20:b9:69:56:a6:6e:63:77:
4c:dd:89:81:dc:1c:bc:ec:51:e0:bf:87:9e:49:70:
a0:52:91:a6:44:00:58:f4:64:82:cc:05:e6:80:8d:
66:96:54:a2:62:a2:1f:4e:57:50:36:ef:1d:77:63:
a5:c1:b5:c9:76:1d:90:6c:80:87:e9:68:de:69:66:
e4:b0:1a:33:dd:d4:04:33:98:dd:6f:e4:75:11:ec:
f2:df:ea:66:94:5b:2c:e4:17:a2:77:e1:3e:2e:1e:
7c:eb:14:1d:7a:12:df:75:5d:7e:d0:86:d8:0e:53:
cb:3b:35:46:e0:13:82:12:04:ea:13:25:a8:e3:ed:
17:d5:c1:a5:d3:e4:7b:80:f1:5b:ad:bc:8e:58:1f:
59:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:EE:88:FF:94:35:E0:4E:7F:43:18:4D:6D:5B:D6:FA:89:66:C3
X509v3 Authority Key Identifier:
keyid:6A:63:19:6C:CC:DC:66:6C:CB:5C:38:0F:ED:16:C6:F0:EF:B0:FB:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:38:ab:e6:ea:e3:0c:37:bb:4a:81:76:b4:46:ae:19:0b:cd:
83:9c:9f:36:ac:28:97:0f:06:2c:db:34:be:82:a6:a2:5d:0f:
a3:66:ad:31:86:47:c4:ec:68:a4:16:f3:50:91:f9:3f:98:a6:
a5:ca:28:76:cb:d5:74:11:21:57:9d:71:f0:3b:6d:11:92:06:
a8:6c:bb:aa:1a:62:89:15:19:56:4f:6b:1a:42:fd:66:c2:7c:
af:be:19:ae:a2:13:c9:a0:14:f5:c1:a6:67:cc:0a:74:07:96:
1e:57:0c:02:d1:b0:e7:ae:8b:d5:b3:7b:56:f8:a6:88:05:87:
05:40:c9:a1:b7:36:52:98:15:6e:84:68:3d:6c:e4:ab:d1:b5:
80:f7:14:33:23:a8:c5:d9:5c:8c:73:43:47:1e:f9:6f:e7:ce:
26:59:fb:c7:a3:6b:24:b4:50:55:d3:74:b1:93:92:db:66:fd:
8b:88:d0:a8:83:1a:53:ba:e2:08:21:b8:7e:3d:46:fb:44:53:
d9:7c:55:ce:5f:e1:be:84:35:b2:6a:25:e2:8e:b1:22:4e:1f:
3b:66:d5:fa:d3:dd:44:1a:a0:bb:cd:4d:10:a5:e5:d6:7b:02:
3d:e7:b4:59:dd:25:1b:f6:e5:91:f1:4a:47:e1:77:d4:0a:7c:
0b:54:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:42 2026 by rpki-client