
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File: 43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier: f01uIvgdv9tMbdzXsye3Mp/0pzscbm5/IJGGVnUw5pk=
Subject key identifier: 35:00:E5:21:AA:65:87:CF:02:A9:78:36:95:67:34:A2:97:93:31:98
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer: /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number: 59
Signing time: Thu 23 Jul 2026 10:11:16 +0000
Manifest this update: Thu 23 Jul 2026 10:11:16 +0000
Manifest next update: Thu 30 Jul 2026 10:11:16 +0000
Files and hashes: 1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: DKSz1KcpaF2+K7vJ7XoyyFp/VPW1JRL4pN+WwSB5oVc=)
2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Validity
Not Before: Jul 23 10:11:16 2026 GMT
Not After : Jul 30 10:11:16 2026 GMT
Subject: CN=6a61e8c4-6255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:58:1b:d7:42:ea:1a:cf:68:1a:48:bc:e3:
30:15:f1:93:42:dc:1a:09:64:8d:f4:e6:dc:13:68:
eb:0f:c4:06:29:22:58:13:24:b9:e7:10:45:81:58:
73:aa:36:87:b9:ef:cd:08:49:99:92:cd:f5:c5:63:
99:b3:ce:5a:e2:89:95:6e:a3:6b:a8:c0:ed:90:9b:
25:d3:e1:48:cd:9f:aa:57:1e:e7:ac:01:d8:31:af:
c5:af:85:73:48:94:cd:cf:60:79:b1:4c:b7:a1:b6:
d5:7e:7b:00:98:c5:67:2f:8a:8d:78:93:fd:3d:41:
23:8d:57:35:5d:39:9f:76:62:b1:8a:84:11:48:c9:
d5:7d:1e:a1:6a:5c:37:15:dd:34:4a:e1:9d:ce:c6:
f6:10:fd:e2:13:cb:64:ef:d1:f4:0b:84:8c:8b:40:
4e:65:f5:e8:d6:aa:94:d6:31:88:a1:f7:25:2b:af:
f8:7e:6f:49:44:81:7f:6b:d4:b7:99:3d:f2:5d:10:
7d:37:fc:d2:bf:b7:a5:ca:91:ca:dc:b3:ca:a9:c5:
2b:9d:f8:84:51:af:9a:8b:d5:ad:b5:af:a3:71:76:
4a:74:0f:71:bd:31:00:20:5e:e1:50:05:d5:bf:c3:
91:aa:67:08:43:b1:d6:a6:69:0d:2d:0d:61:14:49:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:00:E5:21:AA:65:87:CF:02:A9:78:36:95:67:34:A2:97:93:31:98
X509v3 Authority Key Identifier:
keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:56:99:a1:54:41:50:0c:d6:ab:1e:16:05:38:75:a9:71:1f:
55:d4:a0:47:dc:9d:72:0f:eb:04:2d:df:00:d2:a5:89:82:3b:
05:8b:8f:62:ba:39:6b:0d:76:fb:22:19:ef:5a:e6:35:70:6d:
c8:65:c0:ac:b0:4c:a7:14:fb:ec:67:09:b8:18:01:a1:d4:e5:
a7:e2:ee:a4:19:33:09:08:08:04:c9:58:87:5b:4c:bd:08:1b:
dd:f3:fb:6c:1c:36:9c:c8:cd:65:2b:2f:9d:71:44:f9:ef:04:
9f:af:cf:85:dd:dd:01:a1:bd:71:fc:31:91:54:a8:34:6a:12:
76:28:fc:d8:6f:f1:91:26:c7:8c:16:0a:8a:37:27:63:0b:47:
be:0d:eb:15:e9:3c:c4:e5:f6:3f:2f:eb:2a:9e:53:6d:74:e2:
2b:b9:b3:38:5f:7c:6e:6f:0a:5f:f2:ea:95:03:e3:ba:5c:0d:
b7:cf:f4:25:ba:db:cc:b6:1f:6d:4e:70:49:12:a1:70:f3:e6:
c9:77:6e:62:ac:57:f3:56:76:b6:6e:e3:cf:90:78:95:f2:50:
f6:36:af:c0:43:7d:42:cd:81:2f:b2:9d:20:f8:bc:9e:3b:79:
72:cf:40:81:ea:82:17:61:ea:3a:2c:5b:02:cf:2e:96:92:7f:
8d:50:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:58:50 2026 by rpki-client