
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json)
Hash identifier: jf7aVtNiPNaq2zsrYUai1cceCi4DurAZSemXmEiVk34=
Subject key identifier: A5:82:4B:44:13:A2:30:5B:61:2B:AC:0C:69:52:29:7A:5C:8E:9E:74
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
Manifest number: 0293
Signing time: Tue 22 Sep 2026 22:01:14 +0000
Manifest this update: Tue 22 Sep 2026 22:01:13 +0000
Manifest next update: Tue 29 Sep 2026 22:01:13 +0000
Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: SkWiXC2BScqvV9snqjqQ9bhOPojH1+Fe9vZNNhmIIAY=)
2: s3xkSQHzEdFO4I2KYl3LMKz8C1Y.asa (hash: 9tDF8q7eOrLgT3kFt2UIUzdSOGl4yuXaC8hqhp50Q1o=)
3: 15F2CAD0D0AD11F08058D727C4F9AE02.roa (hash: vrl0lYNHs37wtxPcg7yovGdeUO7eOyJKB+w1BJ+7/tM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Validity
Not Before: Sep 22 22:01:13 2026 GMT
Not After : Sep 29 22:01:13 2026 GMT
Subject: CN=6ab2faaa-dc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:c1:12:0f:b7:d8:49:2f:c3:33:e7:4f:4c:
4b:ab:a6:f1:cc:87:bd:84:5d:b3:6b:ee:a6:cb:20:
e2:f5:33:52:78:72:2b:a6:10:7f:65:84:53:37:96:
10:4c:06:2b:86:64:8b:4a:57:1a:8f:e8:b6:40:d2:
00:3e:0b:40:cc:7d:1e:93:1f:2b:fc:bd:ca:bc:1c:
b0:c0:79:51:4e:ae:74:fe:18:ec:a5:64:15:38:09:
e3:d3:7e:37:d6:6c:ef:df:04:95:d8:0a:f2:4e:9b:
5c:d7:55:a6:7d:1c:74:4a:4b:44:ac:7d:79:c7:91:
71:df:77:c3:49:21:2e:30:35:25:6e:45:b1:df:23:
77:de:4e:0a:8b:72:8b:69:38:e4:28:2c:bc:bf:56:
0b:9e:37:7f:26:c2:d7:ac:e7:79:cd:ba:a6:07:80:
a9:1d:e2:b0:b6:25:a1:9e:7a:a8:16:27:f5:d9:f5:
e8:9d:f0:2e:e7:4a:2a:9a:a5:e0:6e:ef:6b:30:9e:
54:93:e0:aa:f8:ce:0e:a6:98:c6:94:fa:74:a5:34:
6e:4d:77:51:9d:80:5a:c4:04:8a:5a:fc:b3:99:01:
33:d3:af:ee:99:84:ca:34:81:1c:f5:28:33:91:a7:
7a:2a:09:79:32:80:ea:b2:60:f6:ef:c1:b1:4f:4d:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:4B:44:13:A2:30:5B:61:2B:AC:0C:69:52:29:7A:5C:8E:9E:74
X509v3 Authority Key Identifier:
keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:81:35:3c:aa:1e:55:34:94:f1:73:3c:16:92:38:c8:64:92:
b5:1d:4e:8f:3c:a7:b5:f1:89:20:cb:2c:33:22:c7:bc:83:c3:
7b:bb:1b:88:1d:4a:74:bc:9a:76:02:e8:7e:12:c0:b9:77:af:
7b:fa:36:10:2a:92:8a:54:df:b3:09:c7:56:e8:33:0a:80:05:
3c:30:96:f8:d3:74:6e:32:e2:3f:23:af:1d:b4:0b:b7:70:b0:
fd:c8:4f:cf:5b:a5:34:39:a4:a5:3a:61:f0:ff:67:8b:71:8f:
1d:b3:c9:f1:0b:61:0c:2c:2f:41:08:7a:80:2a:7f:bf:dd:8c:
39:32:8f:64:1e:34:4e:83:f0:33:b7:be:66:47:37:79:f6:e9:
4a:8d:6a:3c:7f:28:fe:2b:1d:37:9d:74:ea:4b:9c:53:3b:ff:
2d:20:31:41:01:66:52:11:45:61:42:26:5f:8f:fc:12:38:cd:
ff:86:2f:3b:eb:8e:dc:7d:a0:d9:6d:58:a7:4e:70:20:69:0c:
99:76:2c:90:aa:c7:a1:6b:2e:32:8b:84:81:d2:b2:ad:e5:10:
85:c0:74:8f:b1:7d:1d:72:31:dc:8d:0f:c1:82:41:f7:ab:a4:
d6:15:7d:f4:f4:ac:d9:f6:55:3c:e0:6b:7b:65:e7:57:a8:c8:
e9:9d:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:36:55 2026 by rpki-client