
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier: a3U5BHlV6ZEmGBXGItbUMZIXoI9FYJ6Ac2xocMQ7RIc=
Subject key identifier: EE:59:CE:DD:A5:CE:80:57:DD:DD:73:31:7A:FF:85:0F:03:7F:C4:8A
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 0B80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number: 0B76
Signing time: Tue 12 May 2026 19:11:53 +0000
Manifest this update: Tue 12 May 2026 19:11:53 +0000
Manifest next update: Tue 19 May 2026 19:11:53 +0000
Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: CAoQd7W1LjMy78bR4F3+LiBT/d/B7LLGDoEXo4rO5qA=)
2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: HwZqMM9CCAKrNJ/ljMcsv3VZ0uDCep1MPwtiH6UgXOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2944 (0xb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Validity
Not Before: May 12 19:11:53 2026 GMT
Not After : May 19 19:11:53 2026 GMT
Subject: CN=6a037b79-a5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:f0:5f:ef:1b:f7:bb:22:42:09:4e:79:16:
ea:8a:0d:1e:5d:60:72:4a:b8:8b:96:91:3d:e4:1b:
0b:e3:b7:fb:1f:89:b2:da:1d:fc:af:ea:ac:d6:7a:
0d:db:23:3a:ec:06:5d:12:73:24:e5:70:0e:35:5f:
40:83:23:2e:67:b3:d5:8c:e2:b5:5b:aa:8d:ba:ce:
cd:7d:51:2d:84:15:77:53:7e:c0:be:34:19:39:77:
0f:2e:af:3a:d7:59:dd:80:f4:9d:78:8d:05:20:97:
d1:c7:f2:4f:ce:8e:5f:ee:84:9f:f6:f2:4f:90:34:
d3:e2:38:f1:f6:1d:28:b4:64:33:ba:f9:fa:5e:9c:
e5:a4:83:59:35:2f:b1:35:d0:fb:b2:92:75:ad:33:
ad:a4:e2:94:10:db:56:b7:73:80:d1:a8:95:55:5b:
66:4e:78:e7:82:07:e2:5c:9d:2e:e7:38:8e:21:42:
fa:b2:21:c5:a7:5f:4f:40:5c:18:4f:a9:f5:31:4c:
6b:47:26:5b:d6:77:c7:c1:96:d4:8d:b0:a6:5f:71:
dc:d8:be:09:44:33:05:d8:11:32:73:d2:6a:2b:d2:
08:ca:3f:ad:56:c8:1f:45:a1:25:25:72:31:35:d8:
eb:1d:d5:bb:ae:65:b0:16:b3:c3:db:1f:00:e2:39:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:CE:DD:A5:CE:80:57:DD:DD:73:31:7A:FF:85:0F:03:7F:C4:8A
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:3b:61:07:79:25:bd:b7:12:65:55:1b:2c:f1:50:ab:0e:a2:
5c:9c:ea:59:79:b3:ba:d4:ec:8d:e4:4d:16:13:69:ee:8c:de:
21:f5:06:88:72:d1:2e:27:cf:53:2d:8e:2c:d2:16:c5:99:0c:
4c:2a:19:5d:e8:63:a1:4e:d0:38:f1:6e:aa:d1:d0:0e:a5:98:
b5:dd:36:de:f7:88:00:4f:a9:17:cc:ce:99:0f:88:11:89:1e:
aa:45:0a:95:27:9d:b6:3a:e1:7a:44:9c:23:59:91:3a:d1:0b:
83:44:86:cf:a1:af:b8:c9:e7:bd:4a:c1:ff:58:c3:2f:17:3c:
81:c3:56:aa:4f:bc:b9:0a:d7:db:39:25:82:56:f7:e6:b4:9a:
8d:24:02:0e:dc:05:a1:7e:cb:76:d1:29:45:b7:07:05:e5:d0:
f6:ba:1b:e3:cf:a5:a7:4e:0d:0c:cf:13:bd:7b:bd:fa:a4:4e:
4e:9c:ed:ed:c8:be:31:19:44:bf:07:bc:ce:cc:61:a0:00:61:
06:84:fa:12:5d:56:2b:f1:bd:c5:b3:70:95:9f:48:95:f2:e4:
8e:2e:cc:a0:b2:b4:c7:12:f8:c8:a1:9c:8e:81:a9:8d:19:90:
a2:12:b2:be:44:86:17:99:f5:82:30:af:25:01:72:52:10:d2:
b3:12:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:23 2026 by rpki-client