
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File: 43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier: Ms9S93VcDHKOxrXTJuRTRXno0fGEAF4zNIixuix5SOs=
Subject key identifier: AE:0C:D1:70:CB:05:8C:0A:6C:04:72:2B:78:03:7A:2C:67:70:CD:25
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer: /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number: 7E
Signing time: Sat 03 Oct 2026 08:27:38 +0000
Manifest this update: Sat 03 Oct 2026 08:27:37 +0000
Manifest next update: Sat 10 Oct 2026 08:27:37 +0000
Files and hashes: 1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: sKytIZ2I3xnijLtGH1iAFItIceaEpl7G5cunLrbN9dc=)
2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Validity
Not Before: Oct 3 08:27:37 2026 GMT
Not After : Oct 10 08:27:37 2026 GMT
Subject: CN=6ac0bc7a-b461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:0d:a7:de:97:69:23:78:1a:de:24:35:4e:
4a:0c:34:e8:30:3c:11:1f:4e:21:f9:6a:d9:c1:ab:
cc:56:56:00:18:cb:02:3f:e5:e2:8f:ba:cf:95:0c:
36:2e:4b:69:85:77:c1:66:d9:ad:d3:c2:c2:33:72:
ff:ac:12:33:88:d1:07:c4:be:95:b5:c4:2f:13:1c:
e3:61:10:3a:07:2f:26:d0:1a:a6:58:71:46:2b:8d:
3e:12:cd:17:37:f2:94:f4:61:c8:67:61:ab:ef:24:
a9:df:a8:21:f3:b8:e0:2b:6c:c1:21:a5:c6:81:a7:
a1:ed:1f:7a:82:c5:5a:9d:63:2d:39:53:0d:1a:b8:
d3:b9:62:ed:e2:35:ee:d2:bc:d9:08:34:9d:3d:04:
3d:2f:82:3d:36:ed:b6:ca:65:5c:cf:fe:fa:1b:93:
81:c0:dc:02:d1:17:d1:72:12:f1:a6:25:55:9b:8f:
16:a3:ab:7f:33:5f:9e:c9:24:82:93:53:54:1a:c6:
0f:e7:63:24:33:45:93:52:c8:a8:b4:25:07:57:db:
4c:06:ef:52:20:00:35:0b:7e:ee:1e:06:47:52:fa:
bf:48:ec:b5:c8:9c:b6:d6:68:21:aa:12:c5:e4:3d:
19:3f:ad:5b:f8:89:8c:32:7f:41:84:e9:92:1e:99:
c5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:D1:70:CB:05:8C:0A:6C:04:72:2B:78:03:7A:2C:67:70:CD:25
X509v3 Authority Key Identifier:
keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:c3:b5:b8:8e:0d:32:17:0f:95:e0:b6:b3:c9:0e:ba:5e:46:
e0:bd:d3:e7:de:ba:77:cb:df:2e:6e:59:e4:89:00:f4:85:ae:
75:68:b4:8b:80:1a:29:bd:89:88:f4:cf:86:02:47:96:c9:e8:
66:d6:6c:93:41:b8:dc:bd:e0:ac:e8:b1:e3:98:e9:10:6c:50:
ec:77:c7:20:c8:cf:cc:43:fd:31:cb:5b:a4:ba:7b:bc:e7:a9:
2b:67:80:d5:17:08:00:9a:b2:82:c3:84:da:9a:4a:c8:ad:85:
fd:9d:ae:e5:c2:29:c5:47:4c:f2:ec:66:93:06:a6:82:61:60:
8a:36:18:f3:96:cc:e0:14:5f:2a:32:2c:77:bf:24:13:89:1e:
14:64:91:d4:0f:95:06:83:1d:20:47:08:0b:95:a5:03:69:9e:
48:9f:18:c8:6c:92:f2:e0:be:88:72:f3:a7:04:ac:74:a6:1d:
a6:fc:64:15:8c:35:f0:a2:d5:ba:6c:b5:ec:ff:a6:2c:97:e0:
62:01:bd:29:0b:0a:9e:d4:5b:15:55:f8:23:c2:af:17:9b:cc:
a1:41:00:ef:7f:9a:68:c1:62:bf:c3:cc:73:63:56:b4:f2:b8:
42:33:66:16:f3:15:32:2d:70:96:0b:1e:a0:71:3d:4e:99:7e:
06:56:37:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVBMTQxMTAvBgNVBAUTKEUzNzFBM0I2QzM5MTI2MkI2QkI4NUI2RTY4QUNDMUZD
QzA3QTRFMTQwHhcNMjYxMDAzMDgyNzM3WhcNMjYxMDEwMDgyNzM3WjAYMRYwFAYD
VQQDEw02YWMwYmM3YS1iNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzV0Np96XaSN4Gt4kNU5KDDToMDwRH04h+WrZwavMVlYAGMsCP+Xij7rPlQw2
LktphXfBZtmt08LCM3L/rBIziNEHxL6VtcQvExzjYRA6By8m0BqmWHFGK40+Es0X
N/KU9GHIZ2Gr7ySp36gh87jgK2zBIaXGgaeh7R96gsVanWMtOVMNGrjTuWLt4jXu
0rzZCDSdPQQ9L4I9Nu22ymVcz/76G5OBwNwC0RfRchLxpiVVm48Wo6t/M1+eySSC
k1NUGsYP52MkM0WTUsiotCUHV9tMBu9SIAA1C37uHgZHUvq/SOy1yJy21mghqhLF
5D0ZP61b+ImMMn9BhOmSHpnFywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4M0XDL
BYwKbARyK3gDeixncM0lMB8GA1UdIwQYMBaAFONxo7bDkSYra7hbbmiswfzAek4U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUExNC9ENzI4NEVBNDAy
MUQxMUYxQUI1NjI4MkY0OTZGNTZCQy80M0dqdHNPUkppdHJ1RnR1YUt6Ql9NQjZU
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzQzR2p0c09SSml0cnVGdHVhS3pCX01CNlRoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUExNC9ENzI4NEVBNDAyMUQxMUYxQUI1NjI4MkY0OTZGNTZCQy80M0dqdHNPUkpp
dHJ1RnR1YUt6Ql9NQjZUaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV8O1uI4NMhcPleC2s8kOul5G4L3T5966d8vfLm5Z5IkA9IWudWi0i4AaKb2J
iPTPhgJHlsnoZtZsk0G43L3grOix45jpEGxQ7HfHIMjPzEP9MctbpLp7vOepK2eA
1RcIAJqygsOE2ppKyK2F/Z2u5cIpxUdM8uxmkwamgmFgijYY85bM4BRfKjIsd78k
E4keFGSR1A+VBoMdIEcIC5WlA2meSJ8YyGyS8uC+iHLzpwSsdKYdpvxkFYw18KLV
umy17P+mLJfgYgG9KQsKntRbFVX4I8KvF5vMoUEA73+aaMFiv8PMc2NWtPK4QjNm
FvMVMi1wlgseoHE9Tpl+BlY3XA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:09:40 2026 by rpki-client