
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier: upbGTxnueuJLVGoa4x2Nd2RWyM5SMBQg6weUwcCqncg=
Subject key identifier: 4A:E4:B0:82:8E:BB:59:58:F4:1C:DE:E1:90:E5:77:09:A6:36:C5:DB
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 0BC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number: 0BBB
Signing time: Thu 24 Sep 2026 18:59:20 +0000
Manifest this update: Thu 24 Sep 2026 18:59:20 +0000
Manifest next update: Thu 01 Oct 2026 18:59:20 +0000
Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: Z5JkAT2Xe27hCxcAv35prtA340q2tKnR32EQ1fJsa3c=)
2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: HwZqMM9CCAKrNJ/ljMcsv3VZ0uDCep1MPwtiH6UgXOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3013 (0xbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Validity
Not Before: Sep 24 18:59:20 2026 GMT
Not After : Oct 1 18:59:20 2026 GMT
Subject: CN=6ab57308-b4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:9f:5a:47:4b:46:06:19:c5:bc:d0:7b:51:
eb:89:ad:3b:5f:0b:6a:e0:d7:ea:4e:a6:bd:2b:96:
3f:a0:67:1b:87:ed:eb:02:9f:74:7d:ed:fb:63:ed:
5c:96:3f:03:2c:3e:c2:2f:44:a1:7e:d6:d8:22:32:
b1:29:34:fe:1c:32:6e:1d:6b:4d:33:d6:60:b2:d3:
54:9a:71:bb:5e:20:f0:47:b1:36:d5:02:5a:c4:08:
56:79:84:00:b6:d1:d2:41:93:79:a7:1f:a7:76:c3:
06:c1:5c:af:e8:de:05:96:7c:97:90:9e:4a:0a:a4:
43:5d:75:42:2f:28:2a:0a:b9:86:1e:ac:98:27:c4:
12:14:6c:eb:70:9e:67:01:9e:a5:06:b2:1a:cc:c5:
f2:68:00:55:ae:1d:16:b3:b2:11:f2:ff:41:5d:76:
6b:72:d5:ff:0c:09:cb:07:ed:be:ea:00:53:98:64:
8a:63:bf:c2:8f:85:92:b5:b0:0c:df:54:29:67:e3:
1b:7f:89:0c:9b:2a:e0:cb:4a:b0:bc:8c:58:18:f5:
0d:a7:22:73:ef:14:e0:43:dc:7c:64:4a:21:39:a9:
98:1e:d2:1a:96:4d:92:2c:97:ca:b9:a3:8f:e0:98:
81:c2:c4:6e:19:d5:6d:c7:af:ce:1a:1e:4e:65:1b:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:B0:82:8E:BB:59:58:F4:1C:DE:E1:90:E5:77:09:A6:36:C5:DB
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:39:81:a7:61:e2:21:af:73:32:b2:7a:65:cf:ff:81:2a:b5:
15:a7:54:0b:70:5e:f6:d9:ed:c0:96:b3:22:c3:78:89:1e:b1:
80:1e:76:06:3c:e4:2b:61:c5:ae:ae:0b:0e:75:f6:e4:ff:1e:
84:9d:13:6a:d0:ae:61:a6:8f:42:f7:49:d4:36:73:e7:d0:52:
75:3a:dc:e7:74:9e:ce:a3:56:55:24:2b:c8:c3:d9:98:0c:97:
8f:14:8d:fb:16:11:89:d4:f2:be:1a:9b:39:ca:ed:90:36:37:
9f:7b:d4:85:50:b8:78:6e:89:ea:80:7a:2f:09:16:6e:c8:ea:
5b:36:3c:cc:4a:9b:96:c0:a6:d4:09:e8:97:d6:20:6e:00:64:
dc:9a:cb:84:57:b1:c1:6c:79:67:70:f8:29:c5:4e:7d:c1:57:
75:25:c1:96:8d:f6:1c:7e:ab:3f:54:f8:11:90:35:35:56:95:
c0:68:ab:d0:78:e0:aa:b7:02:22:10:a9:8d:df:20:ba:26:1e:
84:c0:68:16:d3:ca:73:3c:e4:55:41:c3:f4:ab:a9:93:a3:cf:
e8:2a:4b:73:92:1a:b2:3f:88:b4:ce:cf:df:0d:f6:ed:02:39:
25:c3:b7:f9:59:9c:58:07:81:82:d4:2f:8c:a5:c1:47:75:fd:
7b:7c:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:43:20 2026 by rpki-client