
$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
File: A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json)
Hash identifier: hFYYqUWfA77VRkDWLYBCKSvPL6IUJ7Aaw92GpX/mNfY=
Subject key identifier: 21:39:8F:4C:5A:00:90:73:91:F4:E4:66:3B:AB:75:A5:7C:0B:43:2A
Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Certificate serial: 0700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
Manifest number: 06EE
Signing time: Sat 04 Apr 2026 21:56:38 +0000
Manifest this update: Sat 04 Apr 2026 21:56:38 +0000
Manifest next update: Sat 11 Apr 2026 21:56:38 +0000
Files and hashes: 1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: gGrgRvre383XtjStBuUmKdStwKMxiuVnRKHxeDi6VO4=)
2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: 6d0hRvoglCSUGkAPfVcO4M1IpNRwxaOUTZjAl927tqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Validity
Not Before: Apr 4 21:56:38 2026 GMT
Not After : Apr 11 21:56:38 2026 GMT
Subject: CN=69d18916-ba29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:01:95:b8:4b:c7:c2:89:63:8f:04:b2:dd:
fb:8e:3b:39:ce:62:1d:73:40:f6:6d:1a:34:60:3e:
21:d6:dd:a7:48:a3:c2:dc:8e:18:30:b9:98:4d:3f:
82:8f:72:35:ca:10:de:a6:8a:93:98:b8:76:fd:7a:
a1:6c:bc:77:8a:aa:10:ba:f5:a4:2f:4f:0b:74:5b:
ec:c6:01:b4:2d:74:d4:47:41:37:02:ae:24:1e:31:
6a:d8:c2:28:bd:43:e5:18:03:d8:1a:35:e9:36:12:
70:23:e1:2b:60:ba:f4:52:5d:4c:50:62:10:71:7e:
60:a5:60:a4:98:6b:27:99:82:85:6e:98:2c:01:a7:
fc:26:59:33:d4:69:00:91:68:be:39:91:6a:ef:7d:
37:d7:ae:e8:33:8d:75:bd:03:df:1d:85:72:a5:48:
df:89:2c:80:36:47:61:a6:77:c4:e4:0b:20:a4:70:
f9:e7:ad:2c:ce:46:9c:da:c8:f4:e8:3d:37:42:5d:
64:89:e5:2b:49:91:b8:c5:ba:cf:c0:25:8d:1a:e2:
c9:8e:50:9c:7f:5a:eb:db:b2:bb:a3:35:2f:0b:8b:
83:07:72:0f:08:29:05:c2:c4:e0:b1:6d:e7:e6:a9:
11:98:93:79:55:27:6a:72:8f:d7:b7:a5:ec:b5:71:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:39:8F:4C:5A:00:90:73:91:F4:E4:66:3B:AB:75:A5:7C:0B:43:2A
X509v3 Authority Key Identifier:
keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:cd:20:7a:ee:a0:aa:fb:72:de:0c:8b:3f:70:51:de:36:1f:
54:90:45:35:95:76:46:1c:0f:22:56:1c:58:30:66:16:b3:1e:
78:cf:3b:83:d4:cd:e2:51:78:ce:b2:3f:e1:bf:fa:e3:4c:8d:
d7:49:03:48:21:f8:8d:a0:12:cc:61:26:f8:e4:1d:f5:cd:1f:
4c:52:c3:51:ca:49:21:c4:bb:ba:b2:f3:c8:1c:f5:a3:55:a0:
ac:8e:2c:9e:31:db:64:66:cc:d9:a2:35:3b:ce:c9:bd:2d:4a:
33:d0:a4:c8:17:b6:5d:42:0d:08:f9:3d:53:81:27:1f:70:55:
77:53:5e:7d:c9:be:48:65:85:15:4b:b9:e6:04:79:db:c0:ec:
4d:67:61:38:08:66:f9:85:8d:ab:37:14:d8:79:ed:f8:9f:e5:
e8:92:26:92:57:aa:82:51:90:4c:96:f8:c0:db:30:65:ef:78:
f9:a7:ab:54:64:b6:30:0f:67:49:91:b3:64:94:43:a7:22:fe:
62:47:6d:21:9c:73:f3:2a:84:04:b1:33:c8:b2:a8:e8:50:e6:
5d:d1:67:27:d4:9c:13:e1:ed:4b:5f:50:a1:6d:dc:23:74:fa:
6f:ee:3c:48:2b:94:ee:7f:2b:87:39:d3:7d:7b:40:d8:d1:72:
30:54:cb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:11 2026 by rpki-client