
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier: hixhuWVFECXygLd7P1UhgCLPF2/Z0xJPaJs2ABk0aOw=
Subject key identifier: 13:48:E2:CA:4B:86:B2:35:7F:BD:95:8F:3A:5D:80:7F:43:68:5C:C8
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 0B6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number: 0B63
Signing time: Sat 04 Apr 2026 18:59:45 +0000
Manifest this update: Sat 04 Apr 2026 18:59:44 +0000
Manifest next update: Sat 11 Apr 2026 18:59:44 +0000
Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: 36htdMcQNBiaCnPNRofQUqoTiJRn5+0tjtVKjflGR5w=)
2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: HwZqMM9CCAKrNJ/ljMcsv3VZ0uDCep1MPwtiH6UgXOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2925 (0xb6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Validity
Not Before: Apr 4 18:59:44 2026 GMT
Not After : Apr 11 18:59:44 2026 GMT
Subject: CN=69d15fa1-de6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:d3:b0:f2:2d:6d:f9:32:ec:fa:88:05:d7:
3b:97:c0:03:fe:d8:a0:0e:61:43:92:c2:b5:9f:8f:
bc:43:91:70:c9:f9:03:ba:10:40:a1:af:d4:aa:9a:
6e:47:3e:b3:18:48:a5:a8:4a:0f:fa:af:12:28:c0:
e4:9a:e2:9a:59:02:f8:fd:08:9e:0d:d3:33:cd:a2:
05:1b:e4:12:28:1e:9f:bf:a8:04:fb:8e:41:47:f3:
64:e7:7d:1f:4a:ad:b2:66:64:09:ab:85:6d:c3:7f:
58:5f:6f:0e:e5:13:03:5f:0b:27:63:b5:ec:67:98:
f7:5b:3c:8d:7d:ac:b0:f2:9d:bc:21:b2:74:6c:dc:
d6:f1:6a:6d:18:59:3d:25:44:2b:32:5c:45:71:ce:
69:82:70:ba:b7:f6:95:dc:32:92:f1:13:82:bd:fb:
bb:c7:22:24:2d:dd:d5:c5:44:e8:00:e1:0a:59:65:
84:96:22:99:13:65:76:ff:47:0c:71:5d:03:09:a4:
b4:a7:20:2c:82:95:ad:70:7d:a3:74:c8:57:3f:f3:
1d:3a:ac:be:80:1a:d1:7f:79:b0:35:a4:d0:2a:cb:
d6:4f:5c:88:4d:7e:cb:fa:98:13:7c:1e:12:42:25:
cb:4b:04:40:cc:ca:61:55:a2:51:ed:32:d3:02:31:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:E2:CA:4B:86:B2:35:7F:BD:95:8F:3A:5D:80:7F:43:68:5C:C8
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:25:4f:b3:d9:11:a4:f4:6c:a2:73:e0:f7:45:58:ec:32:be:
69:4b:51:ff:d9:86:6d:2b:ad:6e:da:ff:e8:55:c9:2a:f3:5c:
35:a0:e9:79:1a:f1:64:ab:44:dd:53:c0:9e:ab:6f:bb:bb:e0:
c1:c4:f4:46:a0:c4:b4:ee:dd:a1:d1:a1:03:29:10:0e:08:86:
40:bd:96:4a:5e:3c:c5:9b:66:1f:9b:51:6c:b1:ac:d5:86:a4:
cd:76:2f:ae:50:a8:5d:89:29:81:fc:19:77:77:d7:ab:f4:83:
a8:b9:36:09:e0:05:53:cf:f2:29:d6:a4:49:07:f0:8f:31:01:
22:ec:bc:d4:f8:75:ad:c1:70:9c:2c:3d:2e:32:8b:15:be:62:
77:8f:9b:d2:35:c8:be:75:f1:cb:c8:10:ba:73:4e:bf:dd:57:
be:dd:bb:14:41:e4:e6:d5:2c:95:8f:c6:03:5b:dc:a1:86:bf:
ee:50:3a:13:c5:98:bf:f8:d6:8a:5c:f3:ef:ac:3a:f4:87:fa:
3b:1d:1f:63:87:4a:47:fe:41:86:a1:d9:48:29:56:22:0b:16:
5b:26:ab:15:69:52:25:1c:b0:0c:c8:4d:88:75:99:5c:87:93:
15:2a:22:19:43:fe:2b:9f:57:96:be:c3:ca:e9:ed:fe:36:ba:
3a:f4:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:23 2026 by rpki-client