
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier: qOTAiSu3OoHwVJBVD5k0XEFZda7Dto3RqG7fSlXXkv8=
Subject key identifier: DA:5A:EB:F4:55:7B:C7:75:83:2F:80:34:9B:56:80:28:53:B5:DD:AC
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 0BA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number: 0B9D
Signing time: Tue 28 Jul 2026 19:20:58 +0000
Manifest this update: Tue 28 Jul 2026 19:20:57 +0000
Manifest next update: Tue 04 Aug 2026 19:20:57 +0000
Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: Hzxo88AmGBBgw/sPGoMbM061pHkKxXS/r6N3Qh3Ck6Q=)
2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: HwZqMM9CCAKrNJ/ljMcsv3VZ0uDCep1MPwtiH6UgXOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Validity
Not Before: Jul 28 19:20:57 2026 GMT
Not After : Aug 4 19:20:57 2026 GMT
Subject: CN=6a690119-cd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:f0:fd:9f:4a:45:61:bd:b1:bc:b6:3c:00:
79:23:5b:8f:4b:03:c4:0a:13:d5:7a:ff:d4:08:ed:
2b:09:91:fb:b3:9c:1a:c9:71:6b:6b:70:c9:e1:bc:
10:ac:1c:b3:22:5b:fb:3a:fa:47:0d:18:75:78:50:
1f:01:3d:93:c2:f1:39:a4:4f:5a:c3:84:8b:dd:f5:
38:e7:36:dc:a5:49:18:76:43:37:97:52:a4:d6:1c:
92:d5:43:d3:c1:b7:38:f6:49:bc:eb:ae:86:63:5f:
7f:c5:25:89:44:c3:80:35:1e:4f:f1:4e:fd:38:67:
8d:6e:cb:aa:a8:30:2e:82:e4:b7:1e:64:d8:f3:1c:
1c:c7:3a:b8:39:49:20:8a:e3:a5:69:c4:40:1d:0f:
21:f9:81:14:e6:0c:f7:36:e3:c8:eb:e5:2e:63:e5:
c2:cf:ae:94:0b:22:89:b3:c5:5d:e9:d3:97:0e:17:
1b:77:5f:17:d6:1c:94:0a:b0:09:06:ff:e2:35:e1:
ce:c9:b5:86:bf:e2:ef:e3:9e:71:18:56:88:33:c9:
fd:a8:a9:a5:e7:6c:67:ee:b1:60:5d:a4:fe:56:05:
6d:1d:67:b0:60:85:53:0c:fe:47:14:2f:8a:5e:04:
49:5f:b1:87:5f:27:84:51:25:ee:42:50:60:0c:ca:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5A:EB:F4:55:7B:C7:75:83:2F:80:34:9B:56:80:28:53:B5:DD:AC
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8d:5e:af:73:bb:05:4e:00:d3:cf:13:3d:d2:d7:b0:e0:11:
1a:93:e5:4d:c9:97:45:5e:10:d8:8a:79:99:86:33:1a:81:cb:
88:af:78:92:f0:c5:e6:76:df:37:d4:05:21:c8:f5:1d:7e:d9:
5a:cc:47:90:94:55:28:07:d2:94:1c:af:ae:ec:9e:fe:82:cc:
ec:32:e6:90:dd:75:16:9a:3f:78:e9:af:78:00:b0:e4:cb:db:
29:cc:16:b8:8c:d3:c7:e6:a9:a1:44:52:da:bf:e8:b8:82:91:
db:31:e5:2b:c2:4e:92:11:6c:05:88:76:00:c1:40:3d:89:d2:
a2:35:c9:a4:a7:6d:47:44:d9:64:03:57:23:1c:b8:90:7d:cc:
dc:8a:d9:96:0f:ad:4c:11:87:e6:c7:e2:ba:5e:d9:ef:38:c1:
9e:0b:d6:57:45:3a:21:4d:d9:4a:f6:fd:43:40:ee:3e:75:52:
35:58:92:7d:d7:a2:33:bd:f5:87:55:05:e2:f4:61:ab:c8:4f:
30:5a:c7:27:ce:37:82:4c:05:84:4c:ec:db:c2:9e:0f:31:8e:
f2:dc:75:95:7c:72:8c:92:79:9d:a5:6f:ce:04:3b:45:2a:3b:
67:5e:16:b8:8b:72:ce:99:b0:54:4d:f7:2c:33:2d:09:81:b1:
ff:35:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:02 2026 by rpki-client