
$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File: agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier: gKbXvV/vYcoieLrIlRBnktuxZ8BEpGZxtyIsCcQoWjg=
Subject key identifier: 21:5A:18:5A:C7:85:03:49:E0:25:FC:53:8D:0E:A2:8D:C4:1A:8C:61
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer: /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number: 0116
Signing time: Fri 17 Apr 2026 05:40:54 +0000
Manifest this update: Fri 17 Apr 2026 05:40:53 +0000
Manifest next update: Fri 24 Apr 2026 05:40:53 +0000
Files and hashes: 1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: PDr/l4dy7DOfkIdpROqBotG263YizU+SjIoMqvvzd1A=)
2: FD380306BD4D11F091CCAA18C4F9AE02.roa (hash: cFkFVqkyH5/Yzi/+1hjNwIGGMl+Q2mo1X7sF0INIyzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Validity
Not Before: Apr 17 05:40:53 2026 GMT
Not After : Apr 24 05:40:53 2026 GMT
Subject: CN=69e1c7e6-c562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:0c:9f:94:48:b0:a1:9a:48:b4:db:06:74:
ee:e8:60:dd:1a:7f:9f:62:67:a7:e4:1a:60:c8:53:
aa:15:35:18:88:84:69:41:d6:80:06:2b:e5:d0:5c:
e4:5e:e7:18:c1:81:a9:cf:79:92:ff:e6:70:88:3d:
12:81:7a:6f:0b:89:cf:24:de:30:5f:c3:9d:20:48:
76:1c:00:65:94:b1:8e:2b:7f:52:d7:dc:6e:63:2f:
55:74:0a:fd:84:c4:2f:0b:d1:09:85:78:ae:db:82:
23:06:16:56:b1:37:4f:f7:e5:a0:88:ae:70:8b:1a:
fd:44:e2:2c:08:01:46:87:7e:02:48:43:17:ca:eb:
a9:be:5e:9c:f6:93:6e:23:35:db:d0:68:dc:b6:89:
b5:4a:49:b3:99:62:2a:44:24:dc:28:45:31:b7:ed:
8c:3e:61:29:a4:13:a3:9c:58:1e:a2:63:ca:94:5f:
a7:b1:82:26:4c:6d:34:d9:e3:ce:4b:e3:7a:e0:61:
50:eb:29:2c:a3:e4:bf:da:a9:8c:0f:e0:93:3e:dc:
0f:35:01:87:1b:6b:bb:ca:9a:60:f7:d9:dd:9a:05:
36:af:3f:10:f6:d4:94:3c:89:e1:e4:d1:ce:30:03:
27:82:c6:17:31:51:81:e2:ea:f5:ff:97:7c:70:d3:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5A:18:5A:C7:85:03:49:E0:25:FC:53:8D:0E:A2:8D:C4:1A:8C:61
X509v3 Authority Key Identifier:
keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ca:0c:d6:49:ca:d0:b7:08:00:01:fb:15:90:87:b7:60:d2:
5c:23:8e:ca:17:ac:96:0c:24:26:87:e9:11:bb:c1:8b:cf:a2:
dd:b5:aa:46:58:f9:80:02:32:9f:76:2f:2a:69:91:b1:1f:38:
c5:f6:7c:3a:1d:c3:d2:09:dc:d7:b4:b3:e1:fa:1c:e0:6b:0e:
44:5c:73:0b:9c:44:c1:06:a3:b2:4a:33:88:3e:a2:91:af:34:
ee:46:ca:8f:50:a4:0d:5c:86:81:ca:fd:24:60:53:2c:e2:5b:
07:26:6c:cf:89:0c:31:8e:a7:70:4b:4d:69:30:13:84:52:73:
a6:64:6d:35:66:3f:60:1f:3e:eb:f4:b4:d0:61:2e:4a:b6:d4:
39:d0:e8:58:c7:52:f1:27:72:8e:c9:45:3f:82:be:80:10:d2:
32:47:b3:ae:3c:34:15:d5:a9:07:7b:0f:7e:36:8a:c8:36:b3:
6f:87:e8:f0:6c:52:64:9a:96:bc:3c:e4:d4:0e:ec:15:16:57:
cf:8e:c8:f5:c5:ec:27:5b:bb:3b:7b:fb:e2:53:5c:bf:95:25:
6e:dd:6b:43:b9:f1:1e:82:78:71:56:58:73:78:92:42:3a:b8:
30:e7:79:0c:47:f9:47:4d:02:64:ca:d9:b7:c1:a9:31:f9:67:
00:96:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:56 2026 by rpki-client