
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier: ux0kvs/I5a9kuMEdNw6LjMIvePM3zLg0UcZMTzHi69s=
Subject key identifier: 9D:56:9E:38:53:54:B0:74:3F:CE:41:E0:92:5B:59:C6:8A:35:5F:E8
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 0BB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number: 0BA8
Signing time: Tue 18 Aug 2026 19:20:53 +0000
Manifest this update: Tue 18 Aug 2026 19:20:53 +0000
Manifest next update: Tue 25 Aug 2026 19:20:53 +0000
Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: 3zq8XkXLS6wZirtOhKN9wJc/2zCS98qJ/TUam4pbL10=)
2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: HwZqMM9CCAKrNJ/ljMcsv3VZ0uDCep1MPwtiH6UgXOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2994 (0xbb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Validity
Not Before: Aug 18 19:20:53 2026 GMT
Not After : Aug 25 19:20:53 2026 GMT
Subject: CN=6a84b095-4954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:9d:28:f3:0a:9e:32:0e:a8:66:8f:8b:1e:
14:42:a4:7f:a3:72:4b:f5:d2:80:c6:0a:e9:07:07:
cd:14:d2:1f:b2:ee:e0:7b:e8:33:05:1f:96:75:7a:
1e:49:c8:88:d6:7a:98:f7:0a:97:8d:6a:9a:39:1a:
a9:83:7f:ca:29:24:02:db:a3:e6:7e:b9:ab:1b:67:
56:7c:21:f9:28:f7:d3:fb:14:1f:5f:d6:2c:44:3c:
45:6c:dd:c5:19:b2:89:ae:90:77:51:8c:9f:b6:fb:
bb:8d:89:5c:2b:a6:cc:e6:88:99:57:c2:24:dc:2e:
48:93:fa:7b:72:d2:f7:51:6e:05:09:3a:09:c5:9a:
49:9b:63:d2:ca:68:c9:e4:4d:b4:29:52:9d:d8:4c:
72:65:32:dc:11:96:01:7c:d3:38:39:e1:b9:93:29:
45:61:54:1f:ae:78:4f:65:f6:fb:ac:8a:09:3c:6f:
96:ab:e1:46:93:80:61:5b:df:bd:f3:06:e6:a4:f8:
d1:c7:9e:99:e0:d3:34:f1:89:a1:33:b2:4e:7d:9f:
ac:06:ac:0a:8a:36:5f:73:1d:4d:8a:4a:81:77:f1:
c9:9b:7f:a3:8a:81:9e:fd:0a:16:24:3e:07:1d:76:
c4:02:7d:c1:94:c7:30:2e:89:4b:fd:4d:8c:5a:d6:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:56:9E:38:53:54:B0:74:3F:CE:41:E0:92:5B:59:C6:8A:35:5F:E8
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6b:96:61:b2:32:f4:19:0b:e9:a8:1b:0b:8b:02:4e:d7:b0:
57:a6:e0:1f:ac:62:be:e2:88:6a:b1:88:42:c8:1d:28:c8:68:
20:03:93:b9:d7:13:cb:fe:59:62:ce:19:cd:d2:1f:8b:6c:1f:
2f:4b:08:3a:69:03:d3:b1:ed:23:48:8a:d9:8e:50:30:ff:2a:
49:d8:9c:02:47:4c:db:d6:2b:fd:08:98:eb:94:23:d0:ef:ba:
7b:7a:e2:c5:31:14:22:fb:ba:03:c6:1f:d9:95:83:fd:f1:20:
51:8b:cf:2e:40:08:bb:f1:3d:72:db:58:fc:fc:c0:fa:cd:04:
12:5b:d0:66:83:b4:38:dc:89:5a:c7:46:86:e2:d2:06:36:15:
23:c2:6e:aa:ed:30:6e:c3:12:ae:fa:5c:e4:b8:ca:f1:54:e5:
35:67:4c:4b:b4:2f:e5:bd:e9:3a:d1:9e:7e:f3:cf:46:67:46:
3d:6a:7c:53:fa:87:fd:03:be:3f:72:9d:53:70:c3:49:59:f3:
7f:c5:82:ed:10:a5:ba:4f:09:b4:c4:b3:b3:5d:88:6d:06:df:
a3:8e:7a:e7:6b:c4:16:b4:0b:21:f5:53:91:75:86:28:43:94:
f1:f8:f0:d2:35:56:ab:e9:6a:48:15:e3:84:2d:28:16:a6:f8:
51:d5:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:21 2026 by rpki-client