
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File: agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier: utI9Wvg1eSVarfYrh7pc5TNjf2Cly+PAFYTHBB7xwtI=
Subject key identifier: 6B:27:5E:65:98:29:95:78:26:C0:EA:55:93:BD:40:B8:89:D3:1F:A6
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer: /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number: 0158
Signing time: Thu 27 Aug 2026 04:45:13 +0000
Manifest this update: Thu 27 Aug 2026 04:45:13 +0000
Manifest next update: Thu 03 Sep 2026 04:45:13 +0000
Files and hashes: 1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: q4VfUtyolNJrlzW6tASHQgE4qBBrT6QbA1wSyoKOYRI=)
2: FD380306BD4D11F091CCAA18C4F9AE02.roa (hash: cFkFVqkyH5/Yzi/+1hjNwIGGMl+Q2mo1X7sF0INIyzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 04:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Validity
Not Before: Aug 27 04:45:13 2026 GMT
Not After : Sep 3 04:45:13 2026 GMT
Subject: CN=6a8fc0d9-4e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:0c:5f:ab:48:64:8f:59:79:bd:74:67:22:
8f:2f:dc:d0:c7:85:10:86:2a:dd:48:29:02:b8:e5:
d9:20:f4:93:32:00:ff:7c:ae:6f:a2:a8:43:68:cc:
09:a1:7a:eb:e1:f5:85:49:ea:ed:73:bc:4f:75:35:
0d:86:df:01:7a:a4:52:77:9a:c6:f1:0d:f9:62:c1:
6d:a0:83:24:8c:6d:87:b4:72:9c:af:6b:76:27:b2:
7d:ca:0f:de:9a:76:c2:65:6c:83:fb:2b:4a:e3:3f:
9a:cf:84:c3:5a:45:59:3b:b3:34:96:56:3e:4b:e7:
f4:92:4e:c6:ee:a2:22:d8:9a:0a:4e:a5:1f:ff:1a:
3c:af:c9:30:f0:44:6c:d0:c9:eb:cb:05:1b:ba:9b:
d5:1f:00:fa:e1:6d:d9:b6:c5:51:0f:73:8a:f9:6d:
ad:4d:58:5c:fd:8f:e0:b4:b6:a3:a1:d6:fd:fd:7b:
af:aa:ea:e6:3f:48:65:b3:f7:01:24:23:c4:7f:82:
37:e4:f7:91:7b:89:9a:78:2e:b4:d7:04:b2:1f:3f:
08:a5:5b:2d:ff:2f:f0:3f:7c:4c:6d:93:fd:88:40:
d8:c5:17:5b:74:51:6a:31:a7:e6:8e:8a:48:3a:4b:
4b:cb:47:92:24:d9:96:ae:94:2d:90:75:96:f5:de:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:5E:65:98:29:95:78:26:C0:EA:55:93:BD:40:B8:89:D3:1F:A6
X509v3 Authority Key Identifier:
keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9f:42:6f:cf:4b:2e:fc:5d:9c:dc:27:ba:0f:da:6d:f1:f5:
9c:b6:bd:82:fe:34:e7:18:9a:12:c6:79:12:ac:a1:5e:e4:1d:
c9:f1:65:66:9f:b7:6b:35:0c:07:a7:ce:ac:01:f5:6b:8c:cd:
70:e3:fc:a8:cf:d9:f5:11:fa:b5:64:bd:da:84:94:00:1c:75:
fb:b1:a9:db:93:4a:4d:fc:f2:66:f7:8c:2b:7a:fe:40:a9:c1:
8a:56:0a:a0:12:f8:42:1d:da:fb:d6:82:82:02:4d:cc:59:39:
6b:0e:51:36:93:39:51:91:64:9a:ed:be:aa:2c:0f:0a:af:89:
53:01:5f:75:df:ef:61:40:2f:40:8c:90:30:61:66:3b:64:f7:
7c:e8:8a:59:70:8e:a0:f6:44:91:c3:5f:86:59:61:76:6e:59:
0a:e5:d5:70:2a:5a:ce:5d:c0:a5:a1:33:e9:bb:54:4c:ed:69:
6e:60:85:07:d1:a8:8e:e5:4c:a0:ee:de:eb:03:0f:19:9b:95:
29:b7:74:4f:af:52:88:1d:dc:19:b6:e0:ac:0c:50:70:19:79:
81:f7:34:e4:42:08:26:25:ac:fb:c5:8e:f0:d6:d0:b4:ac:82:
1c:4f:51:f7:f3:4e:36:f4:6a:46:da:9a:ad:82:84:6f:90:85:
4e:ba:d8:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5MUExMTAvBgNVBAUTKDZBMDRFQjM0QTNERkYwNjVGRDBFRjMxMkUyQ0UzODNG
QUI1MDI0REUwHhcNMjYwODI3MDQ0NTEzWhcNMjYwOTAzMDQ0NTEzWjAYMRYwFAYD
VQQDEw02YThmYzBkOS00ZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqboMX6tIZI9Zeb10ZyKPL9zQx4UQhirdSCkCuOXZIPSTMgD/fK5voqhDaMwJ
oXrr4fWFSertc7xPdTUNht8BeqRSd5rG8Q35YsFtoIMkjG2HtHKcr2t2J7J9yg/e
mnbCZWyD+ytK4z+az4TDWkVZO7M0llY+S+f0kk7G7qIi2JoKTqUf/xo8r8kw8ERs
0MnrywUbupvVHwD64W3ZtsVRD3OK+W2tTVhc/Y/gtLajodb9/XuvqurmP0hls/cB
JCPEf4I35PeRe4maeC601wSyHz8IpVst/y/wP3xMbZP9iEDYxRdbdFFqMafmjopI
OktLy0eSJNmWrpQtkHWW9d4KYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsnXmWY
KZV4JsDqVZO9QLiJ0x+mMB8GA1UdIwQYMBaAFGoE6zSj3/Bl/Q7zEuLOOD+rUCTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkxQS80Nzg5MzE3OEEx
OUQxMUVGQkVCNTY5N0RDNEY5QUUwMi9hZ1RyTktQZjhHWDlEdk1TNHM0NFA2dFFK
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FnVHJOS1BmOEdYOUR2TVM0czQ0UDZ0UUpONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjkxQS80Nzg5MzE3OEExOUQxMUVGQkVCNTY5N0RDNEY5QUUwMi9hZ1RyTktQZjhH
WDlEdk1TNHM0NFA2dFFKTjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa59Cb89LLvxdnNwnug/abfH1nLa9gv405xiaEsZ5EqyhXuQdyfFlZp+3azUM
B6fOrAH1a4zNcOP8qM/Z9RH6tWS92oSUABx1+7Gp25NKTfzyZveMK3r+QKnBilYK
oBL4Qh3a+9aCggJNzFk5aw5RNpM5UZFkmu2+qiwPCq+JUwFfdd/vYUAvQIyQMGFm
O2T3fOiKWXCOoPZEkcNfhllhdm5ZCuXVcCpazl3ApaEz6btUTO1pbmCFB9GojuVM
oO7e6wMPGZuVKbd0T69SiB3cGbbgrAxQcBl5gfc05EIIJiWs+8WO8NbQtKyCHE9R
9/NONvRqRtqarYKEb5CFTrrYKQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:26 2026 by rpki-client