
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json)
Hash identifier: 473R83P6/OmQh/Fvu31o0BR/0ETpkfbWCY2J7fwY2t4=
Subject key identifier: 47:8A:93:EA:51:13:A6:87:4A:A1:6A:6D:22:5D:8D:D5:12:1C:08:90
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial: 031C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
Manifest number: 0310
Signing time: Thu 29 Oct 2026 01:18:29 +0000
Manifest this update: Thu 29 Oct 2026 01:18:29 +0000
Manifest next update: Thu 05 Nov 2026 01:18:29 +0000
Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: UV52VNAsl4bn7IrrtfLqDEL6wPv1+DBE0VsOjGttl0g=)
2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: Fx9tNnf6epH1wWdace4xf+HTZe0yAfSHzm8tJeJl4qw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Validity
Not Before: Oct 29 01:18:29 2026 GMT
Not After : Nov 5 01:18:29 2026 GMT
Subject: CN=6ae29ee5-1164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:b9:8c:4d:89:4f:7d:11:b2:4b:24:9d:93:
dd:24:c3:48:63:a8:ef:f6:2b:a2:aa:0e:03:88:70:
7c:f5:23:e0:cd:1e:cc:0b:c2:58:a7:c6:94:28:89:
95:81:bc:8b:ce:4d:83:54:c4:ff:de:14:4e:8b:ba:
d0:81:20:3a:f3:8d:f9:c1:97:23:5a:a9:39:0a:bf:
e5:10:5c:c8:c0:9d:08:67:67:47:1f:69:bc:50:8b:
8a:99:68:7e:31:cb:8b:4a:f0:eb:0a:42:cb:e0:03:
5e:c2:b5:49:49:3f:14:b6:cf:22:df:8c:0b:6a:35:
91:3f:e7:e1:c8:d5:6b:60:9b:dd:25:01:34:fc:d5:
69:60:a8:f3:f8:93:3c:41:0e:d7:c4:ea:0a:02:5d:
71:8b:cd:1f:9a:98:19:6e:c1:1a:43:71:e4:22:c1:
ea:6b:c9:eb:99:06:7e:cc:1e:16:6a:b8:db:56:e1:
fc:be:69:d3:5f:e2:ff:61:c0:c0:31:5b:b3:bc:02:
df:90:af:38:5e:97:84:60:c8:d0:80:2c:74:89:bd:
1e:75:29:3f:50:12:2e:30:bd:87:50:f8:d4:38:f6:
6e:63:41:7b:97:84:16:69:e2:89:09:55:83:8a:1f:
6d:91:88:45:74:b3:f8:93:94:61:ad:d6:b1:52:11:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:93:EA:51:13:A6:87:4A:A1:6A:6D:22:5D:8D:D5:12:1C:08:90
X509v3 Authority Key Identifier:
keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:8d:9e:40:05:6c:f9:19:e1:67:72:d7:b5:20:c2:07:15:
54:f3:38:4b:39:55:27:49:d2:6b:6c:6b:6d:36:65:c6:e9:84:
53:39:9a:f1:c5:7c:c5:94:77:47:22:19:0c:92:46:c2:ad:88:
93:35:57:4c:27:9b:9d:4d:78:31:c3:5c:d5:b4:68:12:92:5a:
2b:81:7e:f1:e4:70:11:d7:57:9b:82:8a:10:4b:be:fa:4f:57:
65:83:3b:4d:96:2c:f1:fd:1e:a0:12:83:43:57:00:dd:e2:77:
7f:a1:82:1b:9d:ed:e4:f9:dc:14:e9:2d:e4:c7:8e:b3:58:4e:
7a:f3:33:79:a1:b6:03:bb:fd:60:52:43:41:09:f8:21:ea:fa:
07:7f:74:28:27:b7:60:8b:11:e1:76:72:d1:ea:e7:af:4a:c7:
53:73:20:be:b7:70:5b:27:79:24:69:42:60:09:cc:00:6d:a1:
ce:e3:07:b1:c5:16:c9:3b:bc:56:44:85:e8:4d:56:42:0f:5a:
ea:d9:28:13:86:30:f2:93:0e:0e:2d:b3:87:bf:c8:6e:42:ad:
7d:0b:c9:8c:88:96:f2:ab:3a:09:3b:49:0b:4f:61:23:e6:88:
df:c3:8d:95:d1:02:e6:c6:f9:16:19:ad:7a:75:ff:45:90:9a:
85:88:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:07:57 2026 by rpki-client