
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json)
Hash identifier: vzw74umwpp6AgKn6g5luD8Eq3XOFO9JRTI2U1BJlQww=
Subject key identifier: 0F:19:1E:56:2C:34:91:D0:BC:F8:49:75:21:6D:76:DE:B1:83:2A:83
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial: 02C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
Manifest number: 02B7
Signing time: Mon 11 May 2026 01:31:49 +0000
Manifest this update: Mon 11 May 2026 01:31:49 +0000
Manifest next update: Mon 18 May 2026 01:31:49 +0000
Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: 7ThtAAKorGSZraWyfOHlIk1k6WaZDRVAWMFxOcK6qLU=)
2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Validity
Not Before: May 11 01:31:49 2026 GMT
Not After : May 18 01:31:49 2026 GMT
Subject: CN=6a013185-3935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:ab:0f:90:5e:20:98:0a:3c:cf:23:90:61:
a3:50:6f:0f:12:0d:dd:6c:ec:6f:7b:2f:50:bf:f1:
05:a9:a3:ee:18:53:07:cf:c4:d0:41:b1:fb:4f:b4:
6d:ca:57:26:ad:98:1e:57:de:4f:c2:c5:34:9e:4b:
d4:f6:32:a1:c1:fe:80:23:d5:c2:d8:64:db:12:ae:
ee:b5:87:e4:f8:eb:48:5e:38:c0:47:e6:3f:c4:3f:
3e:d5:11:c8:23:f6:84:fc:44:20:c5:b7:a9:3e:10:
de:aa:9a:c7:1d:23:d4:52:d7:34:51:fb:26:75:7e:
80:91:f0:9f:e7:31:66:b5:0b:77:e9:7b:f1:64:5b:
e2:08:1a:24:69:ef:47:cc:f7:f8:b3:33:c0:39:ee:
e2:88:51:15:b0:f8:4a:97:fd:43:d9:c5:e2:0f:1d:
76:d5:b3:3d:4a:53:0c:99:2d:43:41:a3:0d:b6:7b:
00:76:2f:36:6f:cb:31:39:3c:cd:cb:2e:b2:a9:1a:
7a:b4:98:b6:2d:6c:1b:83:09:96:e4:16:f1:9f:11:
23:46:97:05:ee:df:93:90:6a:be:4a:0f:b1:9d:71:
ce:37:4f:30:8c:9a:de:68:47:14:15:0c:36:60:2c:
fc:ac:41:06:57:17:0c:be:9c:27:3c:5e:c1:be:55:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:1E:56:2C:34:91:D0:BC:F8:49:75:21:6D:76:DE:B1:83:2A:83
X509v3 Authority Key Identifier:
keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:e7:dc:8c:64:49:78:67:84:f7:a0:3c:13:f7:43:06:c8:ba:
f7:18:90:b4:46:03:07:7c:9c:f8:b1:f8:e8:ae:50:6f:a3:ed:
bc:99:d3:0b:9a:0d:22:f6:da:0a:03:c2:28:c2:7e:95:ee:76:
36:bb:56:9f:02:16:d9:3e:32:86:2d:68:38:4a:f2:9a:34:43:
5f:1f:db:2c:21:ea:b0:2b:ba:11:3e:8f:6a:38:c9:d6:6e:f2:
e7:39:1d:5b:9b:d1:1c:73:1e:34:03:c2:bf:82:8a:03:25:29:
64:af:df:5f:c8:fb:aa:eb:91:ca:78:1b:5d:ed:d3:78:83:c7:
93:aa:aa:16:64:af:91:66:eb:b4:f5:80:83:8b:83:2a:fd:f2:
b9:73:63:8b:e4:f6:5d:dd:b9:e0:18:32:19:be:f2:84:ca:62:
db:f2:50:bf:9e:0d:f0:26:e4:8e:8d:b6:6a:3e:84:8d:99:bc:
b4:0c:10:20:fc:a6:2b:1a:20:4f:42:c0:79:86:80:b0:61:21:
00:ac:c4:f7:21:60:f6:ac:63:c1:7f:4b:ff:25:26:5a:b6:e7:
6d:47:53:bf:a3:06:5c:16:33:b6:8f:fb:72:05:f8:36:62:6a:
61:af:ba:93:c7:e6:ce:6a:cc:f8:34:ba:ec:af:ba:c1:a8:81:
3a:4d:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:21 2026 by rpki-client