
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File: 43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier: X1INXFyDZTbVIBxIEe0IIGjdwASUYrmWekVy7N/hfUY=
Subject key identifier: 33:D8:7C:71:C0:68:E6:80:91:3D:72:4F:20:AC:19:CC:5E:32:9D:5F
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer: /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number: 6F
Signing time: Thu 03 Sep 2026 08:10:42 +0000
Manifest this update: Thu 03 Sep 2026 08:10:42 +0000
Manifest next update: Thu 10 Sep 2026 08:10:42 +0000
Files and hashes: 1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: gqEZVhRiEeZ0iBdiaxudI2BmhUHc3Io+ZLB2mzW3sN4=)
2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Validity
Not Before: Sep 3 08:10:42 2026 GMT
Not After : Sep 10 08:10:42 2026 GMT
Subject: CN=6a992b82-974d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:63:da:8c:d3:a1:8e:55:c2:6e:a6:05:62:
0d:6f:dc:f6:2e:77:ee:7e:bb:59:8e:89:78:fc:7d:
94:f4:b0:9f:9e:d9:55:2d:6f:f8:bc:46:2b:f1:b0:
8b:2e:7f:a0:61:df:cd:69:c4:c4:da:65:92:64:2a:
97:38:d8:57:06:33:31:a7:cf:c4:7f:85:a9:73:a2:
c6:e7:2d:be:f2:e9:5e:db:82:2e:0b:95:aa:82:2b:
28:e6:b1:28:6c:68:10:27:5d:5f:93:e1:6f:4a:d4:
15:f0:3d:42:38:53:bc:d2:d0:49:1a:1f:24:bc:ab:
2d:41:a8:83:0c:94:68:6f:3e:22:5d:34:8e:b9:99:
c1:51:87:41:b2:37:70:e5:15:8a:fe:db:70:57:56:
26:d7:4d:e8:93:5c:ca:93:fe:92:73:89:d6:f6:4b:
ac:81:ca:54:a4:14:c0:70:98:43:4b:7a:aa:90:2c:
4a:f9:1f:03:2e:a0:13:5e:73:9a:ea:27:62:20:bf:
73:aa:fa:3b:15:2a:cc:34:26:1e:a9:33:eb:08:7a:
ee:d2:f3:ad:be:ce:1a:f1:14:de:fb:56:52:50:83:
76:45:72:84:85:0f:86:c0:0d:0e:55:bc:4a:3a:15:
54:8b:8d:8e:58:93:71:91:bf:a4:19:d7:e0:cb:9c:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:7C:71:C0:68:E6:80:91:3D:72:4F:20:AC:19:CC:5E:32:9D:5F
X509v3 Authority Key Identifier:
keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:2b:90:6e:82:e1:74:e9:d0:d7:9c:0c:9d:a5:3f:d2:8d:1a:
17:24:db:eb:4e:76:1e:8b:93:4e:1e:39:ee:7a:95:11:1c:3e:
c3:19:dd:68:f1:61:20:f9:66:09:aa:55:ad:46:b6:d3:52:c9:
3d:1c:28:eb:bf:83:18:60:21:ee:6d:c4:5f:13:91:05:00:f0:
c8:b2:46:ae:fa:1d:88:77:81:c8:fb:62:18:36:ce:4c:f9:3e:
c9:77:48:fe:ec:e4:00:1e:05:7b:b3:87:19:d2:43:d4:99:35:
8f:2b:17:81:22:d5:0d:63:c5:b5:d5:a6:84:a8:0d:36:61:7a:
b3:60:18:9b:8f:fe:0a:de:68:56:2b:6b:b4:ff:ef:82:46:b9:
1f:19:f9:b6:14:27:88:8b:9d:fa:06:fc:f5:60:56:2c:5c:da:
7d:01:c2:65:32:35:27:4f:a4:f8:7d:70:22:91:47:3b:82:31:
bc:8d:ad:3d:72:50:9d:ef:4e:de:5a:cc:c6:1f:8d:b1:bc:72:
03:f7:73:67:60:a0:a3:a7:36:b8:7c:35:f0:9f:69:2c:e1:08:
fb:bc:01:1b:73:94:48:72:25:bd:7a:d1:07:00:2d:81:40:18:
d3:49:20:37:f0:be:c1:ac:8b:83:ec:8b:e8:8c:2c:c3:3f:f3:
3c:27:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:16:31 2026 by rpki-client