
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json)
Hash identifier: w66saX3eWxEc2i/sD00upsB1SASoXoBFnde08imw89M=
Subject key identifier: 58:6F:99:EA:A3:3B:6C:8B:59:7D:2A:E3:B1:C5:8F:A5:44:87:0B:A5
Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Certificate serial: 0C4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
Manifest number: 0C42
Signing time: Tue 22 Sep 2026 18:36:08 +0000
Manifest this update: Tue 22 Sep 2026 18:36:08 +0000
Manifest next update: Tue 29 Sep 2026 18:36:08 +0000
Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: kBwcI0fSvOeGQqu8RWnQnnzgOZeVP4+rgs1LBSC56Hc=)
2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: jQEsRXKGQd/Fm36zrxqAJNpuT36PbNJ9lnCBkWVizjk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Validity
Not Before: Sep 22 18:36:08 2026 GMT
Not After : Sep 29 18:36:08 2026 GMT
Subject: CN=6ab2ca98-5c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:14:88:38:43:2f:49:ff:ad:34:00:2c:75:
ab:5d:db:b0:97:68:ac:81:6c:70:cc:bb:8e:8d:1f:
ef:b2:1f:b0:75:28:b7:e0:88:f9:86:9d:a7:33:f5:
3a:59:e0:f3:02:ab:11:e5:cb:9f:7d:10:be:35:b5:
29:ab:12:e1:46:33:b7:a4:6d:2b:9c:19:59:37:60:
46:34:cb:49:90:6e:ad:2e:8d:e0:5b:6b:41:39:51:
1d:d5:cf:36:ad:85:4b:d0:d7:a6:e5:4b:ad:88:13:
00:3c:c7:47:ba:4d:11:c2:05:97:0e:08:cb:d0:1f:
1b:e4:c1:4a:c2:8a:28:b4:9c:cc:47:00:06:c4:88:
44:31:89:df:7a:f5:1a:04:f5:a1:0a:d6:8e:58:e2:
b5:db:ab:1e:7c:bb:d9:e1:cc:d1:27:9b:84:85:a4:
19:3f:ed:c6:23:b3:3c:ff:07:95:7b:17:a4:92:6c:
d2:03:bf:8d:cc:8c:04:58:e1:4d:47:36:a8:2d:04:
85:24:ff:ca:52:fd:48:8b:f9:f6:76:1d:95:b8:14:
8a:ce:74:58:d7:f6:e8:5f:0b:6f:e8:a4:9a:4f:5d:
20:e7:07:ed:ee:4c:6e:61:bc:4e:5b:6d:52:39:75:
15:67:6f:ff:78:14:6c:d5:e7:72:a6:64:ef:1d:e4:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:99:EA:A3:3B:6C:8B:59:7D:2A:E3:B1:C5:8F:A5:44:87:0B:A5
X509v3 Authority Key Identifier:
keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:06:82:37:c5:a5:34:cd:b2:74:0d:13:29:1c:c2:ef:85:
35:63:31:f5:a1:29:aa:8f:5b:a8:01:55:fb:6f:ed:c3:f7:75:
16:39:6a:93:85:c8:08:98:09:72:8d:77:1e:88:31:fc:52:64:
2e:84:1e:e6:d5:6b:ab:02:1e:83:7b:0c:89:b6:48:71:86:8f:
74:72:09:1c:52:15:ad:fe:db:42:c7:94:b5:a0:60:95:a7:fe:
49:ea:58:20:0e:41:57:7a:a2:02:85:4b:aa:73:ef:4a:8a:4b:
ef:3f:10:ed:0a:92:cc:bc:82:56:90:11:03:2a:76:55:c9:6d:
b8:5d:28:e8:af:d2:85:54:7e:ad:b3:10:d8:29:ec:08:e5:f5:
b1:cf:ee:a8:40:13:e8:1b:ed:6e:c9:ac:6f:c2:44:f1:72:31:
07:b7:a7:8c:03:84:d5:05:f4:74:70:54:58:4b:00:94:22:8b:
1d:9f:14:38:a7:f4:5b:0a:7b:1c:50:f7:6c:f6:9c:0d:d4:ca:
c9:98:79:f0:a6:48:1d:b4:40:56:cc:85:a7:f7:dc:5f:12:6e:
5d:20:0e:a7:60:26:22:5f:4a:be:db:f2:5b:67:29:4e:16:c4:
42:fe:f5:af:95:c3:35:2f:09:ca:e0:2e:f5:a9:63:7a:4d:f4:
ad:d6:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:15:15 2026 by rpki-client