
$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
File: A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json)
Hash identifier: fRCf7j0VvGLH3HtZqp+MkJ6jmmMw78kurvYMpPwLTJA=
Subject key identifier: 69:FE:89:25:C9:1C:01:86:9E:33:19:52:F4:3F:60:1C:A4:A9:12:33
Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Certificate serial: 06A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
Manifest number: 0699
Signing time: Sun 02 Nov 2025 22:21:41 +0000
Manifest this update: Sun 02 Nov 2025 22:21:40 +0000
Manifest next update: Sun 09 Nov 2025 22:21:40 +0000
Files and hashes: 1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: IFDL+iyi8WqVYKlbpJvGaaRhOwPQYxU4u55UOvQLR94=)
2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: NEghmZK6SR0tR3ZI4129y+/95/Ec7cMoQlur8P+TYRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699 (0x6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Validity
Not Before: Nov 2 22:21:40 2025 GMT
Not After : Nov 9 22:21:40 2025 GMT
Subject: CN=6907d975-d97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:50:87:db:c2:b2:21:43:4e:db:42:67:f0:
4c:ae:81:a5:29:ef:7e:93:28:13:41:10:0e:c8:f1:
9f:6f:51:b7:91:2a:7a:f1:da:70:b4:a8:3f:cb:da:
c5:ed:c4:27:f5:ee:70:e5:aa:95:8c:8a:d7:7d:94:
b0:c5:80:b5:97:5c:de:98:80:fc:3b:84:b8:a7:a1:
c8:b0:be:eb:f8:49:c0:7a:84:75:5e:5f:c2:79:7c:
b4:d3:93:f8:21:58:1c:9d:c0:f0:44:c6:68:2a:46:
a1:3f:16:cf:bf:e4:5b:7a:cb:4b:df:64:9b:70:67:
42:03:66:a6:59:92:41:57:37:11:1c:3f:43:55:38:
47:e1:05:99:51:5e:05:c9:2f:f1:af:cf:f4:f1:e3:
08:31:4c:f5:31:01:c8:11:d7:b0:f9:2c:e1:64:5f:
6a:23:94:e3:73:55:f6:88:92:a2:d1:0f:02:96:84:
28:38:af:ea:b8:fd:28:88:e2:e8:3f:0c:1b:d9:9c:
0c:34:fc:8b:b5:ad:26:df:f2:e9:ee:e4:ec:fc:1a:
63:bb:fa:58:87:02:2e:d8:da:19:b9:a1:11:d8:9e:
48:f7:11:8f:03:d2:15:43:b8:30:8d:1a:ac:15:56:
18:f5:f1:fd:9a:47:c0:74:fb:3e:42:b7:75:55:12:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FE:89:25:C9:1C:01:86:9E:33:19:52:F4:3F:60:1C:A4:A9:12:33
X509v3 Authority Key Identifier:
keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9e:c1:42:0f:1b:54:d5:4b:f5:34:0f:39:24:6b:85:fe:c8:
45:b7:ac:41:14:8d:f9:58:3e:a3:ef:8d:13:c4:95:ba:e6:e8:
77:9e:46:17:70:c7:ef:33:83:79:e3:fa:32:9a:6f:86:a5:40:
8d:6a:88:6b:e4:d0:db:ea:9f:8a:9c:21:dd:a5:f5:56:9c:34:
4b:c6:d9:e4:5d:61:d4:20:eb:bc:48:ce:31:d0:b9:f8:ab:20:
7c:c7:42:a0:2a:eb:47:b2:06:cd:ee:f8:bf:50:78:78:fa:77:
62:0e:b4:66:46:cd:c8:e7:51:d8:bb:ac:3f:be:71:f7:49:16:
1e:48:2a:b9:96:d4:6d:d8:60:19:ad:d6:68:8e:56:79:8e:40:
fc:73:5b:04:34:a5:13:bf:54:b2:63:ac:3a:5e:29:bc:44:0a:
06:49:82:04:e8:79:20:b3:a7:27:a3:a5:b4:00:ef:4c:b1:63:
5d:dd:3b:25:85:d5:a9:8b:65:e6:97:b1:98:d6:b7:73:f1:c8:
66:8a:3f:e3:37:ad:96:2c:c1:f8:62:96:40:86:a5:21:b4:44:
a9:62:a2:96:92:25:09:c6:83:1d:cc:82:49:d1:31:85:13:fb:
ff:5e:79:bb:ac:bb:3a:2d:0a:39:7c:e3:71:6e:1f:bb:d2:23:
9e:a3:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:45 2025 by rpki-client