$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft File: AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json) Hash identifier: +vU1IBNT9WYlr9bDNsuwyzJ+7kaMQytfKNyYT2E7lBM= Subject key identifier: 9A:EC:9F:B6:D8:5B:FA:DF:3A:9C:5B:A5:45:16:89:C0:89:A3:FC:67 Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft Manifest number: 029F Signing time: Wed 25 Mar 2026 01:08:57 +0000 Manifest this update: Wed 25 Mar 2026 01:08:57 +0000 Manifest next update: Wed 01 Apr 2026 01:08:57 +0000 Files and hashes: 1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: wsBXF/ZCeAAsB0odyw3+UGf9deGX+/GXZg6BGsD/vd8=) 2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: Mar 25 01:08:57 2026 GMT Not After : Apr 1 01:08:57 2026 GMT Subject: CN=69c335a9-6d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:04:30:85:c3:90:72:0c:9d:e4:41:1f:32: c6:1f:2e:56:b7:e8:20:d1:a9:c5:8c:0c:d6:bb:d1: a5:81:0a:3d:bb:35:7b:83:39:73:57:03:c9:ea:a5: 26:9f:d6:9d:a0:d5:38:cb:00:93:03:50:7a:86:a2: 55:3e:0e:b7:69:be:d2:47:07:2b:28:5c:f3:9e:f1: 6f:59:87:bc:83:12:a8:49:55:0e:4e:9c:21:69:a2: f1:81:59:9f:ca:17:f4:16:d3:04:49:e8:94:9c:3d: 67:40:f1:9a:e4:07:9f:59:5e:ba:b8:04:cf:4e:9e: 6e:a6:77:d6:f8:2f:f8:4c:b9:54:9c:0a:fb:24:17: b5:45:42:8e:76:04:bb:e5:92:76:ff:77:59:24:82: ed:b2:c5:0b:27:1f:d6:49:ba:5a:9a:cb:86:ce:7d: c4:a6:4c:1d:45:62:bf:d7:63:ee:cc:c8:98:10:66: a8:2d:45:bf:57:ac:51:6c:89:ef:bd:71:d2:3e:7a: 5d:f6:75:1b:2a:61:7a:18:39:3e:8a:98:62:da:69: 25:c2:ff:a5:9d:7b:90:b9:1a:43:f1:59:62:d2:cb: a1:84:4d:61:9f:72:03:5b:9f:26:70:4c:67:72:0a: 58:17:ea:af:94:56:35:bf:a2:37:99:d3:eb:f2:b1: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:9F:B6:D8:5B:FA:DF:3A:9C:5B:A5:45:16:89:C0:89:A3:FC:67 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c3:9d:16:59:ba:1e:08:5b:87:9f:f3:41:d4:61:d6:26:25: 58:59:1f:c3:54:34:17:e0:5e:cf:9a:2e:6e:74:db:d6:5e:2c: f7:7e:1c:28:c4:06:1f:68:18:ff:a4:f5:86:e2:5e:07:b0:6f: d0:a7:57:b8:92:0d:83:36:f5:0e:9b:8f:b5:fe:8f:80:49:19: 28:8a:a8:10:0d:af:18:53:ac:f2:71:8a:c0:90:0d:9f:51:2e: 76:8a:c4:27:44:79:27:7e:b2:b5:92:7f:2c:ae:b8:43:77:e3: ce:56:d6:bb:61:97:e7:1e:47:bc:0d:85:72:25:92:23:f2:d1: d9:4c:2c:58:86:25:bf:74:54:a4:12:71:23:de:c3:78:96:8a: 7b:e7:4b:6b:f2:8b:6a:e1:b2:2d:0d:03:46:b4:fe:58:5f:9f: 22:73:77:ac:c5:54:87:b9:cc:0e:4f:b6:2c:1f:04:da:3f:6d: 9c:36:2d:9f:de:52:65:18:3b:00:3e:f8:c1:a8:25:6a:ca:5c: c9:5c:5d:de:7e:f9:83:48:a2:c3:66:99:60:57:33:e9:f3:c4: 2d:e8:d3:9a:8e:e9:dc:9d:94:43:78:7d:cb:47:82:61:84:0e: 0d:0c:e2:25:12:2d:db:b6:96:d1:89:2a:24:43:39:82:e0:1e: d8:52:6c:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjYwMzI1MDEwODU3WhcNMjYwNDAxMDEwODU3WjAYMRYwFAYD VQQDEw02OWMzMzVhOS02ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhwEMIXDkHIMneRBHzLGHy5Wt+gg0anFjAzWu9GlgQo9uzV7gzlzVwPJ6qUm n9adoNU4ywCTA1B6hqJVPg63ab7SRwcrKFzznvFvWYe8gxKoSVUOTpwhaaLxgVmf yhf0FtMESeiUnD1nQPGa5AefWV66uATPTp5upnfW+C/4TLlUnAr7JBe1RUKOdgS7 5ZJ2/3dZJILtssULJx/WSbpamsuGzn3EpkwdRWK/12PuzMiYEGaoLUW/V6xRbInv vXHSPnpd9nUbKmF6GDk+iphi2mklwv+lnXuQuRpD8Vli0suhhE1hn3IDW58mcExn cgpYF+qvlFY1v6I3mdPr8rFE5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrsn7bY W/rfOpxbpUUWicCJo/xnMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ cDlYZlhxSEtQWmxnS09kZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANsOdFlm6Hghbh5/zQdRh1iYlWFkfw1Q0F+Bez5oubnTb1l4s934cKMQGH2gY /6T1huJeB7Bv0KdXuJINgzb1DpuPtf6PgEkZKIqoEA2vGFOs8nGKwJANn1EudorE J0R5J36ytZJ/LK64Q3fjzlbWu2GX5x5HvA2FciWSI/LR2UwsWIYlv3RUpBJxI97D eJaKe+dLa/KLauGyLQ0DRrT+WF+fInN3rMVUh7nMDk+2LB8E2j9tnDYtn95SZRg7 AD74waglaspcyVxd3n75g0iiw2aZYFcz6fPELejTmo7p3J2UQ3h9y0eCYYQODQzi JRIt27aW0YkqJEM5guAe2FJswQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:20:36 2026 by rpki-client