
$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File: agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier: XhrQp/2WaZ2EXZBbMuFqYx5eGPc0FXSCmrYdUe+j4kM=
Subject key identifier: 97:33:CF:F4:62:BC:85:7F:4D:6F:DC:2F:80:D5:14:65:7D:4D:F8:4A
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer: /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number: 0111
Signing time: Tue 07 Apr 2026 05:29:49 +0000
Manifest this update: Tue 07 Apr 2026 05:29:48 +0000
Manifest next update: Tue 14 Apr 2026 05:29:48 +0000
Files and hashes: 1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: YpA+0oW239cQzwaE8J0f2bdfwGTWIpMT2wvHuS+7gnc=)
2: FD380306BD4D11F091CCAA18C4F9AE02.roa (hash: cFkFVqkyH5/Yzi/+1hjNwIGGMl+Q2mo1X7sF0INIyzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 05:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Validity
Not Before: Apr 7 05:29:48 2026 GMT
Not After : Apr 14 05:29:48 2026 GMT
Subject: CN=69d4964d-928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:60:b7:84:87:7f:6e:ba:97:4e:99:e3:f0:
b4:ec:f9:d2:2f:3f:b6:3c:b4:4d:3a:6b:5a:86:d4:
3e:d5:3e:82:3e:83:78:a9:4f:b7:d1:da:3c:89:a6:
b9:68:9e:25:47:35:23:bd:30:4d:7a:61:42:06:c1:
0d:ef:47:81:fd:e9:e8:01:d2:71:cb:bc:61:aa:15:
4f:75:e9:b1:c9:5d:b6:b0:99:ad:27:33:57:20:20:
51:fc:1a:8d:24:43:49:46:a9:65:e0:4f:1a:a5:7f:
19:5a:2b:ee:11:ec:9c:54:e2:8e:16:91:82:da:7c:
a8:55:aa:d0:52:cc:81:6b:74:8a:66:2f:5e:af:a0:
71:aa:01:04:cf:16:7d:1e:79:8c:f1:fa:f1:0d:e5:
67:54:be:f1:40:7e:91:ae:7f:fe:5f:6b:4c:b0:22:
0c:a1:64:01:5e:30:95:0d:05:a5:6a:ba:bb:39:a5:
07:9e:ad:c0:34:a7:70:7c:f2:7a:86:5b:cf:ca:e3:
8b:ac:50:e7:0c:ca:4a:d6:71:21:2f:bf:87:9a:e0:
97:e3:98:4b:d1:3b:78:09:ee:32:06:5e:ff:c9:09:
b4:8e:26:92:8f:5e:c9:97:08:71:ec:df:08:e5:e8:
d1:e0:56:c3:d3:9e:ed:94:c9:43:68:09:e0:6b:f8:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:CF:F4:62:BC:85:7F:4D:6F:DC:2F:80:D5:14:65:7D:4D:F8:4A
X509v3 Authority Key Identifier:
keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:3a:63:bf:cf:4d:97:84:10:8d:69:a0:d0:9c:0c:1b:8a:
cb:0c:96:71:79:35:ae:88:c5:fb:51:0d:be:df:c0:fe:fc:29:
0c:a2:99:1d:09:61:20:1b:fd:17:9e:93:29:f0:9e:e6:b4:ef:
16:63:61:d1:2d:10:c2:54:42:6f:78:78:8e:8b:db:2d:2a:c3:
25:75:07:10:a6:37:c5:2e:d9:f4:66:15:f3:4d:1d:32:74:27:
cc:08:f3:e2:b4:37:be:5e:ae:79:8b:0a:8e:d8:e6:80:13:9d:
ce:9a:11:33:01:58:92:5d:af:7b:52:b1:52:20:a2:8e:84:c9:
b4:67:4e:97:c5:e4:3c:78:73:fe:db:ee:96:e2:05:56:9b:26:
fe:ab:76:2c:f1:d7:66:c5:a7:c3:08:74:33:fb:ca:17:38:92:
d3:56:e0:98:e8:0c:88:9b:f7:bf:e8:7e:7e:d9:2f:8e:c3:1f:
80:f1:a8:1c:cf:0d:66:ff:16:3a:85:b2:f8:ca:a1:04:fe:29:
d1:51:42:00:fa:ce:5b:9e:7f:5d:00:d0:79:c9:7f:87:1f:28:
9b:cf:72:c7:92:10:87:7e:e4:93:39:c0:64:bc:09:05:a2:31:
ee:7f:95:72:f2:c0:be:d0:2d:dd:e4:b9:12:70:2b:77:fe:d7:
4a:f0:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:17:17 2026 by rpki-client