
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json)
Hash identifier: /H1ftGrbQktk2TkD2AiKbvofDvJ9qxYs5mvK7TX3b/0=
Subject key identifier: 1E:57:70:5E:78:94:D3:ED:48:B3:BB:26:F7:92:FD:2C:F9:36:D3:FB
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial: 02FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
Manifest number: 02F3
Signing time: Sat 05 Sep 2026 00:52:50 +0000
Manifest this update: Sat 05 Sep 2026 00:52:49 +0000
Manifest next update: Sat 12 Sep 2026 00:52:49 +0000
Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: 6qHbaV10/ngZjFNG82RDIeSfVdthq2qSjWOmpYRw78M=)
2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Validity
Not Before: Sep 5 00:52:49 2026 GMT
Not After : Sep 12 00:52:49 2026 GMT
Subject: CN=6a9b67e2-a80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:3f:74:55:64:fd:01:f0:54:59:a9:db:28:
da:c6:e0:63:cb:6c:ce:5a:a0:b0:85:9c:76:80:c7:
cc:f2:74:c0:67:74:0c:5e:e0:13:18:42:3b:13:d8:
4b:36:e2:48:8b:c7:dc:2e:d0:1e:72:b6:4c:10:f0:
f6:2f:95:23:cc:4e:3f:3f:bb:11:28:79:c8:7c:50:
ce:b1:55:27:3f:b3:51:c5:46:e6:4d:30:4f:06:69:
a8:04:50:70:19:40:cf:7a:ae:e6:7a:0c:d6:6f:ba:
c7:c3:f3:55:95:1e:e0:92:04:3d:4a:12:83:c3:e8:
91:1b:47:f7:d0:9d:3c:cd:ef:d7:94:1c:bf:9f:24:
8e:ca:3f:33:2f:1d:43:d4:2f:5e:da:83:64:da:d4:
4c:2b:85:58:fa:4d:6d:77:33:ac:ff:a8:7b:9b:05:
43:ee:56:f7:e1:9c:21:b8:bb:cc:07:86:27:9f:76:
cb:4b:bf:f4:27:fe:b9:4e:eb:e6:45:a7:98:e7:c7:
4f:3c:9b:12:d3:3e:5d:2c:48:f9:1f:16:2b:0b:01:
79:ee:d5:a5:c4:a6:9c:e7:ec:5d:28:5c:bf:fb:5f:
d0:06:e2:60:dd:71:a0:73:fb:6d:51:61:44:02:d2:
98:99:6d:7a:e9:bd:f2:f9:87:d9:1b:dc:d5:71:bb:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:70:5E:78:94:D3:ED:48:B3:BB:26:F7:92:FD:2C:F9:36:D3:FB
X509v3 Authority Key Identifier:
keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cb:73:42:03:f2:f4:09:2e:a2:12:a3:ae:da:7b:e4:43:ac:
19:40:78:10:08:20:01:eb:51:a5:7c:48:c3:93:53:00:84:65:
37:cc:55:f2:d8:90:8f:e7:5b:10:4b:b8:40:4c:92:33:a5:4c:
ae:64:ad:6a:aa:cb:60:e6:9f:1a:b4:17:7c:4e:3f:19:55:33:
2a:ed:4b:7d:29:94:90:c3:5e:31:ed:42:93:eb:f5:86:a7:dd:
e6:70:b2:1f:a6:ce:cb:d2:1f:91:9f:52:09:47:3c:81:52:f3:
9d:fc:a1:f9:aa:7f:53:6d:47:bd:62:05:23:c1:d4:8d:a1:37:
a8:60:29:09:81:ee:82:3e:e1:bd:69:eb:d6:bc:d8:c5:08:eb:
f1:49:49:f0:54:e4:3e:46:b6:79:37:a3:ac:5e:00:b1:69:3a:
90:6c:50:6b:ad:37:00:1e:7e:dd:30:91:b8:6b:3f:7b:02:4b:
d3:fa:07:b9:4b:97:6f:b5:be:09:e1:9c:d3:71:44:a3:f2:b4:
13:20:4c:30:52:10:e6:d8:5a:3b:27:89:0e:90:7a:e0:1f:ef:
ad:20:aa:84:a4:47:15:78:84:a3:4b:27:aa:9a:e4:d8:0e:5b:
46:01:f1:96:fc:c7:87:7d:cf:7d:20:8c:ce:f4:c8:d0:3a:6b:
db:b8:88:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:12:45 2026 by rpki-client