
$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File: agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier: pOwyV4v+AfALICTNKO5ERPMKNi64NO+VsbLUDfNyrc8=
Subject key identifier: 5E:15:71:1E:56:DB:16:F4:13:E5:E4:9D:55:E4:44:AF:3A:6A:E7:2F
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer: /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number: 0148
Signing time: Mon 27 Jul 2026 07:19:17 +0000
Manifest this update: Mon 27 Jul 2026 07:19:16 +0000
Manifest next update: Mon 03 Aug 2026 07:19:16 +0000
Files and hashes: 1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: 2Pnk4UBOo4xPrxvWN8PsEsaldOXoVai34WPITe91pZE=)
2: FD380306BD4D11F091CCAA18C4F9AE02.roa (hash: cFkFVqkyH5/Yzi/+1hjNwIGGMl+Q2mo1X7sF0INIyzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Validity
Not Before: Jul 27 07:19:16 2026 GMT
Not After : Aug 3 07:19:16 2026 GMT
Subject: CN=6a670674-d483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:66:05:75:08:02:28:83:45:53:3f:73:56:
a6:ff:87:1b:0e:a2:3c:0e:ef:a1:29:82:9f:7d:c0:
ec:2e:7d:3f:49:90:c2:81:d3:62:1d:e9:b5:c3:11:
5c:6d:a8:fb:1d:88:52:8b:bf:95:07:4f:b3:c7:99:
28:b8:63:db:c8:ab:44:45:c6:74:24:aa:e1:d5:9c:
38:cc:1d:00:c3:cf:93:d5:75:46:d1:f5:4a:c6:15:
6f:98:ba:c8:e4:91:8b:90:c9:76:1e:ca:ff:49:a7:
d7:d9:a8:6e:44:d8:d2:56:42:1e:ca:f9:67:19:82:
1b:c2:af:da:6f:cf:64:7c:98:33:05:55:28:f9:71:
3b:d8:ee:7b:0e:75:99:11:33:6d:b7:d3:ae:a2:f3:
28:7f:a7:53:b2:ca:e7:ab:4d:af:74:91:38:d8:25:
52:5c:20:dd:18:b3:f1:cd:4b:96:57:e5:b2:d0:7d:
61:05:51:c8:b4:3d:05:fd:9f:fb:9c:a5:e7:f2:a0:
d6:71:8e:0b:56:75:09:b2:79:44:1c:d2:18:2e:ed:
38:43:81:46:1e:d5:77:fb:05:46:42:c5:9f:c7:c5:
4f:4e:da:aa:b9:83:49:81:39:19:77:f5:37:0c:69:
37:f3:c4:51:bf:1a:91:11:f0:01:f6:6e:a4:f9:cc:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:71:1E:56:DB:16:F4:13:E5:E4:9D:55:E4:44:AF:3A:6A:E7:2F
X509v3 Authority Key Identifier:
keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:07:a6:63:38:3d:6f:d5:4f:c5:b7:8d:cc:f5:5c:c0:39:
9b:cb:f3:e4:7c:75:57:34:53:db:01:a1:db:c7:5c:7e:e3:6f:
36:6e:24:c4:40:7f:12:6d:70:78:44:54:c3:1a:67:1b:d6:8f:
5f:40:61:1c:70:21:e7:6a:b2:13:1e:22:58:64:69:91:05:0f:
03:cd:b9:b6:e2:ad:a7:69:ec:37:ef:26:5a:e2:3f:20:1e:29:
d6:b5:dc:4a:3d:81:d3:97:7c:a4:00:ff:b2:04:6f:de:d9:ad:
6f:3f:4d:3f:b9:06:7d:d4:5a:fb:85:93:34:e7:9a:97:12:99:
2b:6e:ff:3c:41:ad:38:63:67:8d:fc:56:a5:c3:95:d3:81:42:
00:f7:28:e4:46:ea:89:40:f0:a1:3d:2a:d3:c7:80:71:a0:81:
d4:69:18:c3:f5:f0:8e:14:90:47:69:b2:d1:78:6b:3a:9e:e0:
89:cd:78:13:68:84:50:66:ce:a3:e8:9a:8d:ab:48:ec:78:dc:
e0:42:07:50:74:98:ee:1d:3e:2a:7f:e4:a1:cf:ae:d2:66:59:
f1:8c:b7:5e:0b:47:46:4c:f9:89:76:b4:9f:da:ab:fc:7d:63:
37:6c:41:d2:ee:0a:47:a9:3a:2a:56:bf:07:bc:ea:a7:b7:46:
41:c1:35:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:27:01 2026 by rpki-client