
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json)
Hash identifier: MsBo6y9uvbX3zGQ9og81ECy+VckeSo0txCdsDRnkq4k=
Subject key identifier: 3A:FB:BB:6B:9A:71:03:A9:26:E3:AC:96:8E:CD:9D:B7:8E:56:C7:C1
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
Manifest number: 02DE
Signing time: Mon 27 Jul 2026 02:27:52 +0000
Manifest this update: Mon 27 Jul 2026 02:27:52 +0000
Manifest next update: Mon 03 Aug 2026 02:27:52 +0000
Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: VExKitDJYe2gmglQhaU00O3gcCnBdFOmHOHxJaivZ/U=)
2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Validity
Not Before: Jul 27 02:27:52 2026 GMT
Not After : Aug 3 02:27:52 2026 GMT
Subject: CN=6a66c228-672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:ce:d6:ab:f4:c1:74:d0:1d:42:26:cd:88:
64:f7:61:6e:e3:83:e3:01:93:de:25:d7:40:9e:24:
74:d9:70:2c:43:56:ea:f7:86:3b:7f:db:80:10:68:
1f:d3:39:b5:fd:f5:0c:41:66:1c:f3:61:2d:85:6a:
a8:2b:ce:87:65:4e:17:f6:93:c8:aa:1e:7b:30:49:
60:78:22:4e:94:0e:86:23:7b:cc:a6:f1:2a:bd:19:
0c:fd:fe:96:b1:09:eb:c0:32:73:2a:3c:1d:2d:79:
c5:46:6b:4e:d6:b3:5a:02:83:98:d2:5b:76:b4:72:
e5:fb:d9:f7:d2:9c:d6:a0:32:7b:ef:35:53:52:bf:
2b:53:7d:8e:01:4e:2a:2d:3d:b6:da:44:b9:6c:6d:
3e:be:ea:a6:77:52:6a:5f:ab:f3:65:de:25:8b:78:
8c:59:6a:6d:b3:fe:cd:54:f3:59:96:00:72:7a:e4:
57:e8:90:f9:df:e1:73:a3:65:5a:ed:1c:92:76:5b:
d1:43:99:fc:ab:b2:08:72:92:b5:68:22:dd:6c:f7:
72:50:4e:92:f4:96:05:13:d4:6e:c6:51:ec:f4:c4:
42:9d:05:a1:a3:73:26:93:ff:b6:9c:8f:ed:ba:05:
b9:61:e7:ba:4f:bf:81:9d:76:5a:68:df:be:c0:98:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:BB:6B:9A:71:03:A9:26:E3:AC:96:8E:CD:9D:B7:8E:56:C7:C1
X509v3 Authority Key Identifier:
keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:bb:e5:4e:b8:ae:e4:e1:7d:1f:55:c8:46:5a:70:ab:cc:f6:
42:12:03:03:d1:35:f2:04:73:16:ad:2b:1c:ad:02:9a:b7:bf:
b9:06:54:35:0e:39:dd:9c:45:e7:23:04:5d:05:61:85:2a:f5:
4b:2a:62:b0:c0:92:bd:1a:bd:13:14:80:12:c5:96:60:9d:00:
0d:c1:b9:7d:4c:7b:7d:22:e6:01:64:db:fe:f3:09:a3:22:b3:
3b:53:cf:e7:7d:40:56:4c:8e:38:22:0f:d1:b9:a5:c5:26:fb:
21:82:5e:9a:56:f6:64:cd:3b:c6:e3:21:56:d4:1d:d4:aa:87:
9b:49:09:ca:c1:c0:5a:a2:13:1f:fa:9c:7f:c8:a2:9f:4a:65:
b2:99:c7:c4:bd:88:59:c6:fe:db:5d:24:1a:8e:0d:80:87:4f:
d5:6c:b9:59:2f:ad:e3:f3:78:bc:9b:23:9d:e6:e4:b2:b5:b9:
94:5d:6c:3f:d8:40:7e:4e:0d:cf:ad:6a:89:47:b0:98:8a:85:
e9:68:96:91:f4:ad:a8:d7:6a:e5:e1:29:33:b4:bb:82:87:63:
0a:c3:a0:2a:c7:3e:07:00:04:af:ca:c3:90:a7:2e:91:e6:dc:
a8:e9:f7:69:78:8a:cd:2f:d9:4c:d9:14:42:b8:10:2c:35:20:
03:3e:21:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:03 2026 by rpki-client