
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File: 43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier: nakmWCt8x5k8SgjgefF6lFlnIezVEKqqmmQ3kMkhxNQ=
Subject key identifier: E9:38:73:00:15:B6:C4:4D:6D:CD:CA:A3:6C:11:31:62:55:9E:9F:09
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer: /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number: 89
Signing time: Sun 25 Oct 2026 08:00:49 +0000
Manifest this update: Sun 25 Oct 2026 08:00:48 +0000
Manifest next update: Sun 01 Nov 2026 08:00:48 +0000
Files and hashes: 1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: TCdAK0Qs4jWJlq42IOcCk4Mdt8nsjSecL6FWSq+drnA=)
2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Validity
Not Before: Oct 25 08:00:48 2026 GMT
Not After : Nov 1 08:00:48 2026 GMT
Subject: CN=6addb731-3a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:1e:87:4e:f9:ee:bc:a5:30:83:6a:3d:fb:
86:47:7b:51:12:32:1b:1e:aa:ee:67:16:4f:2f:b7:
cb:69:3d:3e:7f:68:84:cd:52:22:41:c0:9e:cf:43:
d6:34:be:08:fa:53:fb:86:4a:c5:95:af:53:ab:10:
32:05:86:25:55:d7:bb:e7:d1:54:6b:49:0f:e9:67:
c1:2d:ab:0d:6a:45:23:94:0f:15:41:9f:e3:3a:86:
c0:fc:86:57:51:72:9d:ff:50:fa:f4:99:7e:6d:af:
2d:5e:93:b4:68:4e:86:83:33:d8:28:be:2a:f0:73:
30:37:d3:41:41:9b:8f:74:c1:35:ce:2c:d3:3f:54:
4c:c3:be:2f:45:52:94:6e:84:98:c4:c6:43:15:1a:
d4:17:d5:47:28:ca:e9:5c:ec:2d:64:c5:3d:0c:f2:
d5:d0:74:a6:b0:b9:ce:8c:dd:c9:00:09:53:8b:9b:
66:a6:8f:e7:cd:86:47:ba:2b:d0:c1:f7:63:2a:8c:
b1:6f:ed:b3:3b:b0:84:e0:87:e0:56:49:d2:bd:c9:
d3:6a:7d:6b:3a:9d:09:15:e1:5f:ff:5a:96:7f:2d:
5b:2f:5d:b4:49:7a:00:26:b6:16:ab:0f:63:40:c3:
bc:7c:c3:89:13:1c:7d:8b:ff:40:d8:36:a8:dc:e7:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:73:00:15:B6:C4:4D:6D:CD:CA:A3:6C:11:31:62:55:9E:9F:09
X509v3 Authority Key Identifier:
keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:33:1e:6e:6d:1d:37:b9:b0:77:63:d0:89:a5:29:df:86:47:
58:7c:6a:8f:5b:9b:33:5e:80:41:d9:25:94:66:00:e3:4b:aa:
54:c4:4e:2f:f3:83:46:61:a1:36:c8:e5:2d:c7:3e:cb:b9:87:
58:8e:0f:f3:0e:62:66:51:9c:60:09:1d:f6:5b:6c:89:c3:a8:
37:8d:6a:ea:61:ae:85:ba:bc:9d:46:83:f6:44:b4:ba:ea:c7:
51:c2:5c:91:00:01:c8:00:23:8d:d8:30:c2:db:63:44:cd:05:
be:aa:1e:fe:69:ab:c3:7a:95:37:38:88:8c:c3:89:bd:7f:3c:
c1:2f:b2:68:62:f1:5e:b8:2e:9d:78:ad:0c:e6:bc:34:31:d8:
b4:9f:c4:99:fb:7a:ec:2e:24:2f:96:01:ad:85:2a:50:fc:50:
2b:a3:03:51:5a:aa:22:9c:0d:c6:45:ac:12:31:ca:87:86:80:
a1:49:c3:ae:b8:58:2c:62:3d:f8:42:67:e6:c8:2b:5e:8c:48:
dd:91:d6:cb:aa:b2:06:87:3b:1c:d1:f5:fd:26:d5:cd:69:ab:
fe:3a:4b:25:be:a3:cc:7e:0c:f3:87:d2:49:52:df:b1:fd:66:
5c:c4:49:10:14:20:13:0c:de:9d:51:cf:2c:37:8a:86:3a:34:
c6:d3:6d:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVBMTQxMTAvBgNVBAUTKEUzNzFBM0I2QzM5MTI2MkI2QkI4NUI2RTY4QUNDMUZD
QzA3QTRFMTQwHhcNMjYxMDI1MDgwMDQ4WhcNMjYxMTAxMDgwMDQ4WjAYMRYwFAYD
VQQDEw02YWRkYjczMS0zYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiEIeh0757rylMINqPfuGR3tREjIbHqruZxZPL7fLaT0+f2iEzVIiQcCez0PW
NL4I+lP7hkrFla9TqxAyBYYlVde759FUa0kP6WfBLasNakUjlA8VQZ/jOobA/IZX
UXKd/1D69Jl+ba8tXpO0aE6GgzPYKL4q8HMwN9NBQZuPdME1zizTP1RMw74vRVKU
boSYxMZDFRrUF9VHKMrpXOwtZMU9DPLV0HSmsLnOjN3JAAlTi5tmpo/nzYZHuivQ
wfdjKoyxb+2zO7CE4IfgVknSvcnTan1rOp0JFeFf/1qWfy1bL120SXoAJrYWqw9j
QMO8fMOJExx9i/9A2Dao3Oc8jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOk4cwAV
tsRNbc3Ko2wRMWJVnp8JMB8GA1UdIwQYMBaAFONxo7bDkSYra7hbbmiswfzAek4U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUExNC9ENzI4NEVBNDAy
MUQxMUYxQUI1NjI4MkY0OTZGNTZCQy80M0dqdHNPUkppdHJ1RnR1YUt6Ql9NQjZU
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzQzR2p0c09SSml0cnVGdHVhS3pCX01CNlRoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUExNC9ENzI4NEVBNDAyMUQxMUYxQUI1NjI4MkY0OTZGNTZCQy80M0dqdHNPUkpp
dHJ1RnR1YUt6Ql9NQjZUaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2TMebm0dN7mwd2PQiaUp34ZHWHxqj1ubM16AQdkllGYA40uqVMROL/ODRmGh
NsjlLcc+y7mHWI4P8w5iZlGcYAkd9ltsicOoN41q6mGuhbq8nUaD9kS0uurHUcJc
kQAByAAjjdgwwttjRM0Fvqoe/mmrw3qVNziIjMOJvX88wS+yaGLxXrgunXitDOa8
NDHYtJ/Emft67C4kL5YBrYUqUPxQK6MDUVqqIpwNxkWsEjHKh4aAoUnDrrhYLGI9
+EJn5sgrXoxI3ZHWy6qyBoc7HNH1/SbVzWmr/jpLJb6jzH4M84fSSVLfsf1mXMRJ
EBQgEwzenVHPLDeKhjo0xtNtVA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:10:41 2026 by rpki-client