
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier: Zf3qLDQtth0RVT2JCalL4/FW/vKOA64iT3Dsd6S+mZ4=
Subject key identifier: 51:B7:0F:39:F7:92:1B:42:5A:8C:69:75:66:3B:90:EF:30:74:28:25
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 0BA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number: 0B9A
Signing time: Wed 22 Jul 2026 19:25:26 +0000
Manifest this update: Wed 22 Jul 2026 19:25:26 +0000
Manifest next update: Wed 29 Jul 2026 19:25:26 +0000
Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: yD/JSMAa/a5XvdS+V5g8Cv9iYeXtUOiVBhATHbHLYmk=)
2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: HwZqMM9CCAKrNJ/ljMcsv3VZ0uDCep1MPwtiH6UgXOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2980 (0xba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Validity
Not Before: Jul 22 19:25:26 2026 GMT
Not After : Jul 29 19:25:26 2026 GMT
Subject: CN=6a611926-3e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:37:49:1f:0e:2f:0a:f1:ea:38:87:1b:84:
6b:e4:bc:9e:65:ec:f5:8c:ae:1f:da:7e:b2:00:2e:
47:13:bd:84:1d:c2:ca:af:58:ec:97:56:e7:9c:df:
93:0a:9a:5e:77:4f:6a:59:44:c6:3d:c2:9b:37:fb:
a3:08:93:6e:81:3f:87:ef:00:97:96:b1:d8:0b:63:
4a:02:ff:17:5d:69:b4:f0:40:15:1a:a9:e5:f1:4f:
d4:d4:dd:6e:79:f5:b7:e8:04:ed:d9:66:33:b2:9d:
fa:7a:31:64:40:00:4d:f2:b0:17:3d:1a:70:cb:cf:
8c:59:97:09:75:5e:7a:5c:e3:57:61:01:52:6b:2c:
b6:1e:a9:bc:9d:2e:1d:76:d8:7c:17:2d:99:44:2b:
bf:83:b9:4d:8d:0e:43:bb:f0:04:60:fd:17:7c:9c:
9c:ef:3b:ce:a5:b1:62:db:a1:1c:ef:d0:d3:c2:f1:
b0:25:66:c9:f6:78:49:ee:69:b0:c8:29:22:08:87:
1c:71:45:fd:1b:6a:05:ab:8c:1d:84:c6:fc:7b:2f:
c7:05:1c:ba:1b:4a:ff:57:71:39:f5:82:f3:40:b3:
a0:76:a5:f8:e4:9a:66:a0:ab:ec:5d:ff:2f:8f:7a:
97:18:e7:c3:fa:20:e5:1d:98:0c:e6:3c:b2:63:7f:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:0F:39:F7:92:1B:42:5A:8C:69:75:66:3B:90:EF:30:74:28:25
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:81:65:e2:1c:c5:32:45:65:e0:39:39:5a:62:17:b3:dd:
54:47:48:1f:72:cb:4d:9e:6b:78:d8:b4:3f:b4:b5:d6:bb:cd:
28:ea:fd:9e:f3:cf:b9:d8:21:4c:12:31:0a:3d:17:c1:ad:e4:
c2:84:9a:7b:c2:79:91:c3:74:fe:39:e3:05:e1:e1:6c:48:16:
1c:bf:c4:2b:a0:21:aa:e8:5a:71:2d:9f:9f:18:c6:3c:f0:cb:
fe:7f:b7:84:c3:47:a3:1d:dd:ee:17:95:46:3e:7e:84:ee:da:
c6:dc:f9:3e:b4:31:da:82:52:95:9f:d7:9e:a9:35:df:50:fb:
7c:86:6c:3e:e3:2a:df:2b:fe:53:2e:0d:d8:d2:c2:99:83:19:
04:c4:42:25:a2:e2:ce:c3:cf:95:5f:f2:de:3d:6a:f7:bc:da:
d5:1b:38:31:44:f7:4d:3e:0a:f4:3c:de:e8:4e:eb:01:40:ce:
58:84:e1:50:1e:50:a8:ea:a6:22:46:1a:e2:46:80:a8:17:5d:
1c:8a:36:47:a5:af:9d:7d:e3:72:47:90:45:79:24:7f:3c:ed:
5c:83:1b:4f:1d:89:2a:40:c8:0d:fd:bd:f5:7d:f9:6f:b6:93:
01:04:16:fa:be:57:56:9d:b0:cd:0a:e0:7a:42:17:8b:37:53:
01:40:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:19 2026 by rpki-client