
$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
File: A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json)
Hash identifier: p71QbZCXp2VYYoXjtgnDmj1p1qjIerN0+vQv6T6I34Y=
Subject key identifier: BC:C3:83:B3:A7:84:A3:38:A9:E0:EB:EB:7A:8C:8B:E8:5E:5C:5C:3A
Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Certificate serial: 06F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
Manifest number: 06E6
Signing time: Tue 24 Mar 2026 21:53:07 +0000
Manifest this update: Tue 24 Mar 2026 21:53:06 +0000
Manifest next update: Tue 31 Mar 2026 21:53:06 +0000
Files and hashes: 1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: aQ5mtVeOvcYzeYWvlgBLEGFPbVL3msVNNHcKJ+ku4ys=)
2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: 8t+00iBpm8H7BtmgSYtrLEiPvycs2nvnLiAkxsrZfno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Validity
Not Before: Mar 24 21:53:06 2026 GMT
Not After : Mar 31 21:53:06 2026 GMT
Subject: CN=69c307c3-ac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:c7:8e:2a:16:b4:9a:db:41:b7:f4:c5:9c:
90:48:6b:b6:54:a1:72:e1:c9:a0:16:81:f2:fe:51:
5e:c4:d2:c2:74:fd:b1:5a:67:8b:ac:16:46:6f:7c:
fb:01:7c:8a:bc:3b:64:64:12:0c:25:79:f7:20:71:
dc:80:bf:ad:9e:72:ad:0d:be:0b:a6:5e:bd:95:2c:
84:77:7e:c8:d0:f7:fc:6e:03:96:a4:0c:71:df:f7:
92:33:92:c1:41:31:56:58:48:aa:f1:fd:cc:bb:17:
44:0f:f6:06:e3:c6:fe:6d:d0:d6:1d:35:49:24:14:
32:0a:5b:16:e7:08:80:a4:bf:5a:4a:09:04:62:42:
c2:d5:7f:f5:09:6d:3f:99:0c:a4:ac:0f:c4:c1:a4:
a7:0f:da:a6:ef:6d:ed:d4:a3:6e:6c:b2:fc:68:55:
e9:f5:b6:e0:44:a9:aa:96:26:7e:ba:ef:32:89:57:
44:a6:73:5a:52:29:5f:43:f2:24:49:c7:7c:2b:ae:
67:64:3d:c2:96:a8:c3:1b:72:5b:a3:26:fc:ff:24:
e8:cf:be:49:5c:00:af:c2:28:69:da:db:2d:e9:68:
d9:63:06:ca:72:ba:e8:5b:8d:dc:ba:e0:2f:74:0c:
c3:56:cd:de:2c:21:d3:14:6e:33:41:c6:0d:23:12:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:83:B3:A7:84:A3:38:A9:E0:EB:EB:7A:8C:8B:E8:5E:5C:5C:3A
X509v3 Authority Key Identifier:
keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:1f:1f:33:74:8d:45:a3:f6:83:44:fc:0d:74:20:60:cf:
4a:78:d0:8b:2a:ae:68:09:e5:a0:41:e8:8e:dd:a9:73:a0:ad:
cb:06:7f:65:7d:8d:14:73:59:cf:70:a5:48:81:42:8d:58:e9:
8f:9b:e5:14:0c:4b:d6:90:22:af:2d:de:93:f7:23:07:f9:56:
ba:0c:a6:ee:92:b8:c9:5d:3c:91:a8:04:5f:98:51:da:1a:8d:
ec:7b:7d:a0:37:32:c2:a4:b8:22:3c:0e:1b:df:3b:24:81:32:
62:c8:17:26:1f:d2:81:60:3c:d4:d2:46:9e:ac:c0:48:9b:68:
70:19:cf:09:c7:e5:be:ff:09:9f:d3:37:00:ba:da:d5:2b:31:
da:73:c8:82:92:99:a3:4c:f1:d6:e5:46:68:61:cf:a2:15:f9:
db:e5:5d:4e:cd:20:96:75:9c:cc:84:7b:d3:52:27:91:1a:df:
ab:52:f8:b8:ea:95:cd:a7:cc:0f:01:ac:b0:5e:46:5c:1d:c8:
54:e3:75:61:16:c7:1b:2e:64:4d:bd:e3:a5:b0:c4:72:63:5e:
ce:db:2b:a6:24:b1:af:b1:f4:22:12:4f:a0:b3:cf:df:7c:41:
10:eb:29:22:37:bf:e0:91:1e:8f:45:ee:d2:1a:35:d3:20:96:
86:28:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:05 2026 by rpki-client