
$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json)
Hash identifier: S7Sd1Z7KTHkWHd+beQuCGNtjH2m0j2jBJckSXRb+I8Y=
Subject key identifier: 9E:D8:45:15:6B:C2:02:B8:0F:0D:6D:4E:3A:F7:E7:56:54:56:72:49
Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Certificate serial: 03E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
Manifest number: 03E4
Signing time: Sun 01 Mar 2026 01:21:27 +0000
Manifest this update: Sun 01 Mar 2026 01:21:26 +0000
Manifest next update: Sun 08 Mar 2026 01:21:26 +0000
Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: 8ydoHs7QU9X4oa60pzX5nYnY0K9HKO8UE8DbomZxc1c=)
2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Validity
Not Before: Mar 1 01:21:26 2026 GMT
Not After : Mar 8 01:21:26 2026 GMT
Subject: CN=69a39497-fa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:d6:3f:c9:a7:0b:40:5c:42:ee:df:64:2a:
6a:c6:95:2c:8b:ea:80:74:68:62:20:2f:a0:24:0a:
fe:6c:2d:a1:9a:c5:54:36:b9:7a:b8:a1:3f:a5:e3:
8d:6d:91:01:bb:67:2f:ee:f4:b5:51:14:72:37:43:
03:92:82:e7:5e:49:b7:5e:1c:8c:7d:e2:6d:76:4e:
b9:96:2e:9b:48:6f:07:d3:33:ab:10:c7:ff:b7:8a:
ea:0e:0d:bf:cf:b7:be:00:1d:4b:1d:f3:e3:c5:c4:
88:e8:23:4f:8d:00:e4:80:8b:5f:c3:45:97:81:bb:
6d:48:36:8a:db:2d:2d:9f:2c:41:4a:80:45:85:60:
ce:7d:97:74:95:78:a6:53:72:2b:d0:98:47:7a:81:
b9:1f:b5:f5:55:5d:86:3e:4b:dd:74:bc:e5:56:5c:
71:76:07:4f:f5:4e:10:2f:92:9c:40:e2:8d:16:7f:
8c:4f:61:64:20:bb:5e:cb:2b:a0:59:d5:54:ef:51:
41:07:ba:ad:b9:7b:58:e4:a1:50:1d:96:cb:e2:ff:
84:7b:a6:9a:c1:f1:c6:24:bf:10:3f:3e:bf:9c:90:
6a:20:22:cd:c4:14:87:c9:da:52:f2:8e:4e:36:98:
01:9d:d7:7b:ed:a9:69:d2:37:57:9d:61:03:3f:53:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:45:15:6B:C2:02:B8:0F:0D:6D:4E:3A:F7:E7:56:54:56:72:49
X509v3 Authority Key Identifier:
keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3f:0a:70:86:7e:2a:f7:b4:f8:ac:9d:39:ae:2e:c3:95:45:
8a:41:08:51:54:87:e7:6b:c9:b6:4e:5c:38:aa:dc:fb:98:0d:
53:6e:bd:d5:42:e4:c9:96:ad:ca:ac:1f:f8:b4:c9:8d:2d:4e:
3f:c2:10:4a:00:3c:f7:1c:87:eb:7e:67:46:c7:16:1a:c4:a5:
8d:16:ef:9d:38:ef:16:db:28:23:cd:af:8c:e7:57:1c:61:2b:
d9:05:ec:ec:5c:b2:83:9b:d9:af:a6:22:a7:6c:d7:0e:e2:d1:
0e:8b:52:49:d8:1e:fd:78:40:46:d4:17:02:df:93:4f:f7:c1:
6c:6b:6a:18:56:5e:a1:e1:0e:40:d4:70:f0:43:66:33:4f:90:
19:0c:b8:6a:b8:b3:5b:9f:7f:03:fc:9e:47:9a:4e:5b:8d:16:
b4:0a:1c:4c:9e:a9:a9:d8:a2:0b:82:d0:68:50:83:fc:9f:74:
56:e9:87:11:1a:9b:0f:0a:79:18:c7:aa:c2:53:8e:79:82:3c:
df:0b:14:52:8b:e3:40:fb:6b:63:66:95:d6:ae:b8:f2:0c:94:
b7:2e:38:97:a1:ef:12:eb:f0:c9:eb:23:04:30:1e:cc:e8:5c:
dd:6d:93:e4:d5:e1:a7:7c:be:8e:c5:a3:64:3f:a7:9e:5c:aa:
ad:c2:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:31 2026 by rpki-client