
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json)
Hash identifier: M0r8mFvTKmmlNTn2QwhbRoeuAIrpSA+jyBYwZmjTRJ4=
Subject key identifier: 28:74:42:EC:FE:2B:D9:BA:CF:10:1E:C3:3D:FC:F6:9F:7F:7B:D8:A6
Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC
Certificate issuer: /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC
Certificate serial: 1964
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
Manifest number: 1947
Signing time: Mon 02 Mar 2026 01:26:55 +0000
Manifest this update: Mon 02 Mar 2026 01:26:53 +0000
Manifest next update: Mon 09 Mar 2026 01:26:53 +0000
Files and hashes: 1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: 5ZTs02L7Homb6qNMryt37ODf165KLx8KQOQxIN0viTE=)
2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: YvchA+iLWK2KzcsGlB5LZ4NkqNmPfmKmRFBKloh/k0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl
rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6500 (0x1964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC
Validity
Not Before: Mar 2 01:26:53 2026 GMT
Not After : Mar 9 01:26:53 2026 GMT
Subject: CN=69a4e75e-dbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:16:48:6c:51:4e:ba:55:0a:62:98:52:5a:
e6:ba:29:92:dd:51:be:54:60:31:9b:04:4b:5d:20:
cf:9a:6d:64:f5:07:0e:9f:8a:b3:71:7d:aa:36:02:
b1:0e:f4:d0:4f:70:e7:00:d9:d3:41:07:3a:02:eb:
7c:b3:b4:d7:e6:48:b2:35:38:a0:f1:db:80:eb:31:
e4:7e:06:d5:70:aa:63:a6:dc:c8:0f:7f:3e:a5:cd:
1c:48:1b:15:27:65:b5:ce:36:e8:21:22:4f:76:42:
75:f6:3e:59:85:ed:d3:b0:ab:04:a2:9d:45:44:b2:
a0:d5:e5:a9:bc:87:c4:77:f0:85:36:0e:3b:c8:5f:
73:31:53:ea:ed:83:6b:41:99:84:10:b9:c1:97:9f:
e6:40:55:d7:71:36:ee:d4:cf:d2:41:2b:b5:ee:57:
64:eb:ae:d8:83:45:a1:ef:ea:66:6c:0a:e8:fa:b3:
1e:3c:b3:48:ac:e2:ad:91:25:db:8d:a8:95:38:68:
5b:e2:72:74:37:97:fb:27:ba:18:db:06:f7:86:ae:
a5:a2:b0:b8:2b:5b:e6:48:dd:ac:2e:aa:89:2a:82:
f6:12:71:34:f9:6a:0b:9a:ce:ff:11:ab:00:c1:24:
10:e1:3e:ab:fd:76:95:6e:00:24:bb:14:1c:90:88:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:42:EC:FE:2B:D9:BA:CF:10:1E:C3:3D:FC:F6:9F:7F:7B:D8:A6
X509v3 Authority Key Identifier:
keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:69:02:82:20:33:6c:72:e2:b2:8e:49:3e:fa:9a:e2:8c:70:
96:f1:44:3e:a2:b0:55:83:e8:8a:12:29:b8:f4:3e:ec:1d:a3:
34:a0:b6:ff:4b:55:7e:95:a3:c7:09:5b:1a:11:6c:1b:25:3f:
5a:00:0d:bf:d2:e4:76:69:23:01:23:4b:1e:0e:d4:9e:db:04:
98:a7:89:c7:4b:14:a4:9b:ff:0d:48:60:fe:05:00:cb:d2:e7:
8c:a4:f0:f9:43:e9:c8:35:d4:5e:3c:8f:c3:f1:f8:89:c5:6c:
17:fb:a8:f2:07:0a:91:3e:80:dd:11:68:10:7c:3b:70:6d:7d:
96:cf:17:38:4f:e1:24:a8:78:7f:44:fd:cf:3f:62:76:cf:42:
70:bf:a7:01:37:36:ee:36:72:1d:3a:4b:22:d5:e0:38:78:b6:
94:a8:e5:e8:e4:9f:37:e1:e5:79:2f:f0:e2:41:b3:14:3b:ad:
7f:c1:ad:c5:1f:ee:63:9f:86:b6:4c:f4:bf:5b:15:97:de:6a:
df:ef:6c:6e:87:19:87:84:69:cd:22:66:21:cb:ef:67:7f:9b:
8f:95:3e:ce:e4:9b:6d:bb:e5:2e:eb:19:ba:9f:00:74:25:d2:
87:96:cb:73:67:28:0c:2d:35:e7:2b:da:c1:dd:3c:29:82:36:
02:45:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:08 2026 by rpki-client