
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File: 43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier: L50ulw6+clOopEK7NE2shy4XjGYNUar59c1i1S0uYQA=
Subject key identifier: 86:CC:7F:DE:83:37:85:D7:04:5E:8C:C6:E6:52:9B:8D:2A:0F:B4:6A
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer: /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number: 11
Signing time: Sun 01 Mar 2026 10:35:40 +0000
Manifest this update: Sun 01 Mar 2026 10:35:40 +0000
Manifest next update: Sun 08 Mar 2026 10:35:40 +0000
Files and hashes: 1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: aufuiSnAxS/x33BNaISPNVvlOsL3WHR1zWx5pmagKvw=)
2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Validity
Not Before: Mar 1 10:35:40 2026 GMT
Not After : Mar 8 10:35:40 2026 GMT
Subject: CN=69a4167c-ce23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:1f:9b:f4:bf:71:c9:cd:78:e1:a8:dc:96:
56:49:fb:4d:63:55:2f:53:68:fa:7c:33:28:f7:3a:
fa:24:76:87:2f:53:35:6d:68:a2:90:fc:82:8a:59:
48:a4:68:db:33:93:22:ec:8f:56:71:1c:40:ae:57:
09:cd:d2:a3:94:3e:3e:12:26:0b:5e:eb:c2:b9:37:
db:a3:35:4e:56:92:93:59:d4:53:79:0a:b3:e7:79:
d9:9c:9a:f7:be:cb:97:f6:66:66:ef:c4:54:e3:06:
53:28:ca:38:46:9d:97:07:0e:c6:8a:0a:bd:a9:88:
06:c9:ea:4b:ee:6d:39:91:bf:10:70:0e:30:d4:34:
e2:71:48:4d:98:90:8b:7e:64:4f:51:ec:23:f0:74:
cd:3f:4d:ea:25:e8:39:75:99:51:1f:70:5e:e7:1b:
43:51:41:74:2d:89:7a:71:15:84:ab:e3:4e:b7:cb:
54:d9:c9:a3:35:58:34:72:10:a3:80:87:2a:f3:16:
01:0c:7a:5f:59:60:88:25:40:64:69:17:3b:68:ea:
e1:38:b4:21:44:ef:dd:d4:7c:29:5d:d4:36:61:11:
37:f0:e4:41:f0:65:69:c2:7e:6e:27:23:80:13:32:
a1:0b:c1:1e:8e:91:21:f9:fc:09:44:ad:71:19:2b:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:7F:DE:83:37:85:D7:04:5E:8C:C6:E6:52:9B:8D:2A:0F:B4:6A
X509v3 Authority Key Identifier:
keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:cb:14:b2:dd:bc:7e:cb:29:a7:a1:29:54:a8:42:cc:82:f0:
30:6d:08:a5:cb:12:5d:f6:00:22:8e:b8:7b:81:4a:7e:e5:33:
ac:fb:c1:4d:2c:a9:55:40:4c:aa:56:66:67:44:81:c8:df:6c:
d5:f9:66:d5:2e:66:86:98:01:f9:43:9b:19:c0:80:97:74:45:
d2:d2:d7:b2:e9:e6:2f:33:3d:c1:3c:62:b2:ca:86:44:98:a3:
fb:9f:5f:00:f4:cb:ac:77:29:70:6b:4b:fd:0f:c2:d9:5a:eb:
c5:af:c5:ce:28:54:18:1c:c6:af:59:66:94:8e:a5:da:57:29:
fd:a3:0d:b5:e2:e7:a3:36:d6:2a:ee:04:4c:90:97:d3:a5:d4:
64:17:8f:a5:78:25:0d:35:af:de:fd:e8:ff:af:80:b7:99:e1:
37:ca:9d:ea:69:7e:3c:fb:e9:d2:8c:47:de:65:6c:84:7a:26:
cb:e0:ad:7c:75:86:02:f7:a3:6a:24:32:21:c3:ec:5f:da:7a:
1c:6b:67:56:d4:d7:ab:8a:50:bf:7c:cd:b4:82:b9:2c:29:f7:
71:d9:c6:9b:ba:40:10:4f:cc:19:48:ce:62:93:ec:8e:d9:82:
ed:00:c1:72:df:4f:20:1c:41:05:4d:d8:1e:d9:af:3d:2f:d4:
13:eb:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:10:21 2026 by rpki-client