
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
File: aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json)
Hash identifier: P7NHkdWsPJNdmOgMoPflfqZOI0ZGeylHzcvOLSO/hBY=
Subject key identifier: 2F:15:32:06:E4:31:98:B0:8B:AC:26:AE:FD:FB:48:3A:27:EF:24:4B
Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
Certificate issuer: /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
Manifest number: AD
Signing time: Mon 11 May 2026 07:18:41 +0000
Manifest this update: Mon 11 May 2026 07:18:41 +0000
Manifest next update: Mon 18 May 2026 07:18:41 +0000
Files and hashes: 1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: AjaarK+id9MWHkrbJ54eem/af87GA5B7b8LCUADnCZM=)
2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: 53IvHKTdXwEXSRnOFpf3vxlzT+INgjItjJHDBhfEtMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl
rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Validity
Not Before: May 11 07:18:41 2026 GMT
Not After : May 18 07:18:41 2026 GMT
Subject: CN=6a0182d1-22af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:48:9c:b7:85:ec:7f:7e:23:59:7c:82:c3:
eb:8f:a6:d7:c4:4c:da:77:1a:86:16:7f:24:a6:8c:
ff:a7:f4:b3:eb:92:a8:a0:c5:c6:1f:61:38:87:5a:
af:9e:3d:d5:7d:a2:55:f8:cf:c9:9d:72:4a:e0:2c:
18:af:b0:41:ee:2e:c6:1d:6e:7a:eb:a5:93:be:ff:
a9:9d:54:d3:7c:0f:da:10:d1:fb:07:f9:3e:07:cc:
f9:ef:47:85:06:38:7d:38:cb:0d:ca:59:c3:33:3b:
06:1f:db:ae:28:fc:66:01:e1:7b:87:64:65:42:fa:
fd:ed:14:4d:2e:9b:d8:d2:8e:e2:2d:1b:cd:84:00:
a4:1c:3e:87:6f:13:06:8b:92:9c:88:dc:16:ac:81:
eb:58:4c:57:1c:2e:0d:05:8e:d9:1d:7c:c2:3f:e2:
03:4a:fe:ca:72:a2:8d:1c:18:ae:32:82:17:3d:83:
7e:c5:49:68:03:dc:65:c7:bd:60:e7:88:d8:c6:fa:
0f:54:63:7b:51:37:8a:db:69:1e:a1:4c:14:c8:ac:
e8:f0:5a:70:b1:2b:e1:88:93:4b:53:e1:d6:e0:26:
ab:25:7b:30:69:0e:27:9c:49:52:69:08:e7:b1:05:
73:7a:60:a1:28:91:62:59:ce:f7:f9:be:b5:28:f2:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:32:06:E4:31:98:B0:8B:AC:26:AE:FD:FB:48:3A:27:EF:24:4B
X509v3 Authority Key Identifier:
keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8d:94:a1:ca:08:17:b8:17:f1:28:37:bd:0b:01:ab:80:7a:
2f:22:8f:73:cc:34:1d:c0:bb:73:39:06:b3:47:d3:10:f7:e1:
8d:eb:56:9a:28:cc:d4:b6:fa:70:6e:e0:65:55:f6:04:b9:1f:
71:ea:a6:6a:d2:d5:d1:a6:28:b6:5d:90:4a:f8:e2:ff:9b:fc:
f7:bb:32:98:03:3d:41:34:57:a7:20:47:5c:b6:85:28:23:80:
3a:eb:2c:3e:b8:3c:2b:0d:75:f4:1d:56:61:cc:89:84:e6:bd:
95:b6:51:0d:b7:b5:e9:5e:d9:fe:f9:63:dc:bd:2b:32:b9:46:
98:7b:ad:5c:7c:5b:92:cb:70:b1:37:1c:5d:2c:4c:07:c6:c6:
ee:74:97:aa:f2:19:45:f3:72:f6:ef:91:41:ad:8c:fd:fb:97:
a6:09:a2:02:2c:ba:94:59:01:5f:62:80:b7:c8:3d:46:90:11:
74:b3:9f:52:b7:d8:43:17:3c:0d:2c:71:15:a3:b5:6a:ea:92:
a6:32:69:18:63:d0:9e:a1:a6:3a:d3:39:cc:23:d1:68:c7:7f:
dc:e2:ef:ce:43:28:9f:75:d2:c6:b8:7f:3b:81:ee:ef:0c:26:
cb:1b:49:df:28:3f:42:81:49:65:40:fc:36:f9:50:a2:a2:3a:
33:df:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:51 2026 by rpki-client