
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json)
Hash identifier: FhCNyNWzryZbKzwNQY+U0Zq0AJAYi08AhAhDMaR6wL4=
Subject key identifier: CD:E2:97:A7:EB:0B:9F:4F:38:57:6A:22:52:4B:86:C5:67:7D:5C:C5
Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2
Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
Manifest number: 88
Signing time: Sun 05 Apr 2026 06:59:04 +0000
Manifest this update: Sun 05 Apr 2026 06:59:03 +0000
Manifest next update: Sun 12 Apr 2026 06:59:03 +0000
Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: TT/CfKdusSqjBGTVTEUT3THkn6gqxkhXgunAUUbQepc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
Validity
Not Before: Apr 5 06:59:03 2026 GMT
Not After : Apr 12 06:59:03 2026 GMT
Subject: CN=69d20838-9408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:7c:2e:4f:3e:6a:13:e5:d7:6d:2b:e9:64:
a0:53:ee:c5:8d:3f:11:46:02:82:ef:20:f5:1d:0e:
7f:f4:91:eb:c1:df:cb:0d:9f:57:31:8e:70:21:a1:
02:51:76:2c:9f:ca:60:7a:cd:ea:fd:3f:a3:50:4f:
fb:77:45:9e:06:be:43:32:52:9b:d1:e1:56:29:ef:
2e:9f:c8:5b:6d:df:ed:c6:35:23:b0:0c:a5:65:b9:
41:60:d5:03:76:2d:b9:78:f9:b1:c0:92:33:27:6f:
db:1a:d5:75:46:c3:79:ba:f4:af:68:69:be:03:20:
8e:71:fa:35:6f:d2:2d:b4:38:03:25:b5:25:f3:73:
af:c8:89:3a:71:fa:0a:47:36:de:15:df:77:b6:8c:
52:b0:ee:77:6c:74:2a:be:be:be:d3:44:dc:c7:8e:
33:55:31:ac:8c:e9:ff:ba:72:77:8a:6f:eb:8d:08:
70:47:fc:00:03:c7:62:b4:65:6c:83:0f:ec:9b:f2:
5e:cb:0e:9b:53:6b:e3:61:33:09:09:35:c1:9d:76:
b7:f4:80:a4:65:bd:9c:9e:8c:1d:54:4c:82:48:82:
1a:11:7a:fe:6f:02:d1:5f:a5:cb:80:a5:1f:69:29:
a2:11:34:ff:36:7b:e4:89:3a:91:c7:b7:f4:24:f3:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:97:A7:EB:0B:9F:4F:38:57:6A:22:52:4B:86:C5:67:7D:5C:C5
X509v3 Authority Key Identifier:
keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:e1:3a:e5:3f:14:af:d7:04:de:01:b0:44:c8:48:87:57:
a3:fd:7d:f8:88:3b:cc:67:45:fd:18:5c:b5:e9:6a:81:b4:2f:
b4:09:cd:3e:a5:32:5b:55:14:ef:c2:d7:5a:09:5b:b6:26:cd:
1a:d6:14:a6:bc:49:a3:d3:1e:f3:26:fb:73:46:88:9b:2c:5a:
17:73:d4:e5:2b:71:bb:fb:bc:76:d8:6b:22:35:73:57:4d:12:
8a:aa:e3:6c:0e:a3:0e:fe:11:85:8d:0c:da:00:92:aa:45:e0:
81:39:5f:82:de:c8:20:31:8e:07:af:58:48:90:fa:cc:36:44:
1d:78:6a:81:9f:3c:59:a2:35:f9:15:61:1f:9b:e3:f3:d0:ed:
38:5a:74:1a:50:90:d3:c4:54:47:4f:63:40:f1:89:65:99:18:
91:80:52:89:5a:c5:84:33:ab:21:84:ed:38:cc:45:5b:d1:a0:
1b:e3:d6:a6:a3:d6:6c:b3:97:e1:e6:b3:cf:3a:7c:f0:18:0e:
3c:c2:f9:1f:db:f1:2f:5f:b1:73:bf:2a:af:3d:1a:71:f4:21:
9c:d1:a4:93:e6:87:c5:0b:c5:db:54:fa:c4:93:46:42:ed:81:
d0:71:ec:fa:10:e0:6e:eb:4b:b3:a4:ee:da:4e:4a:40:d1:2c:
27:02:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:18 2026 by rpki-client