
$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
File: A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json)
Hash identifier: 0x5nQUd3OMUKkpvr23mabEzvQJ0i8Y47jH/5mQ6LZIk=
Subject key identifier: 05:DB:C2:F6:DD:D0:64:40:C7:7C:D6:0E:26:06:7D:43:86:FB:EB:11
Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Certificate serial: 06E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
Manifest number: 06D6
Signing time: Sat 28 Feb 2026 22:43:19 +0000
Manifest this update: Sat 28 Feb 2026 22:43:18 +0000
Manifest next update: Sat 07 Mar 2026 22:43:18 +0000
Files and hashes: 1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: dWIzQMsRzDW4O7TmyjMyTd7PIHYhSe4tkvK+a0MRpww=)
2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: NEghmZK6SR0tR3ZI4129y+/95/Ec7cMoQlur8P+TYRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Validity
Not Before: Feb 28 22:43:18 2026 GMT
Not After : Mar 7 22:43:18 2026 GMT
Subject: CN=69a36f87-8432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:50:52:c9:b7:96:5f:b9:b4:0d:b0:ea:8b:
95:01:22:61:1f:fc:97:32:69:8b:bb:0f:2f:f6:00:
da:e8:25:d6:1a:bf:78:dd:ac:6b:6a:f7:e2:3d:e2:
bb:e5:76:ed:0f:9b:7f:63:26:07:20:fc:de:8f:eb:
aa:88:a2:4d:42:d0:c9:13:a1:04:b1:9e:9e:df:d7:
97:be:25:18:c7:5c:b0:bc:99:33:0a:f1:09:d9:9e:
de:d1:a6:73:61:58:2e:68:4e:8c:2e:74:84:70:72:
69:5b:2a:57:f0:31:85:dc:f5:c0:f3:3b:3e:c9:77:
7b:0f:22:2e:27:3e:1e:f4:1f:c2:74:42:7f:72:a3:
21:a6:ce:44:16:c9:59:10:0a:b1:c1:c1:5a:5b:ff:
3e:d4:fa:85:50:de:6c:61:fa:e8:03:69:78:71:45:
63:e1:23:d8:1f:18:cd:72:4c:98:03:09:14:54:37:
51:40:f4:08:ed:d2:5f:61:83:08:e3:7b:c5:73:08:
cc:2f:cc:30:50:c6:a2:ca:3e:2e:dd:33:ec:ad:f6:
50:7c:32:2e:91:80:e9:c8:58:fa:82:58:95:2c:67:
8e:a9:2a:19:23:71:06:0b:b4:b4:b8:6b:92:8d:2d:
92:ea:8b:1e:cb:d8:39:c3:56:97:83:d8:9f:17:e7:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DB:C2:F6:DD:D0:64:40:C7:7C:D6:0E:26:06:7D:43:86:FB:EB:11
X509v3 Authority Key Identifier:
keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:23:f4:32:3e:cb:6b:0e:da:40:cc:7e:66:55:ee:38:b3:56:
1f:5a:cb:26:38:60:ac:b5:73:16:40:7d:f1:82:d9:90:23:fb:
22:19:0c:73:8b:57:57:19:8a:15:96:16:99:09:d5:01:ab:8d:
14:ac:79:06:99:fc:75:67:9d:cc:97:08:d5:b2:16:e7:f3:c0:
23:37:79:7c:a4:21:8e:43:c8:e9:0b:74:ba:3c:b9:15:ab:cf:
7f:f4:73:92:c6:27:78:4f:ce:30:bc:a5:89:25:ce:18:30:76:
e5:03:c8:ba:38:a7:98:57:31:9c:06:c4:58:ef:95:df:ea:c2:
3c:31:bb:2b:4f:65:e5:b8:80:d2:d1:50:bb:83:5a:60:21:52:
94:8e:2a:65:ab:4f:c3:dd:d3:6a:3e:ca:59:5a:7f:dd:53:1b:
23:2e:87:51:3f:cc:a5:ef:5b:bd:36:1a:d6:bf:d4:a9:df:fd:
5e:36:75:54:cd:9a:ab:00:7d:2a:b5:a1:d5:8f:74:2d:32:d9:
dd:2c:8c:96:ca:2b:df:1d:bb:6a:2c:e5:ec:a6:4b:95:c7:2d:
93:8f:9d:20:b3:0b:fc:d9:c4:18:fc:c0:cb:c7:bc:8b:53:e8:
c0:ba:33:57:3b:53:aa:67:de:0a:67:b9:29:98:91:97:5f:b9:
13:9b:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:05 2026 by rpki-client