
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File: 43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier: yuIx4OJKVJY4nNIS2/iy01ZHizL+8EzQHtr60SdlDfM=
Subject key identifier: D1:5B:F1:B9:FF:BB:0F:55:BA:41:44:79:C1:08:01:9E:97:7A:EE:C1
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer: /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number: 1D
Signing time: Wed 25 Mar 2026 08:07:35 +0000
Manifest this update: Wed 25 Mar 2026 08:07:35 +0000
Manifest next update: Wed 01 Apr 2026 08:07:35 +0000
Files and hashes: 1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: MkEK8dxBusp13Kv5m0dtmoYRhQe88gj+lZy01n9LhUs=)
2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Validity
Not Before: Mar 25 08:07:35 2026 GMT
Not After : Apr 1 08:07:35 2026 GMT
Subject: CN=69c397c7-3acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:be:8e:7b:1e:1c:4f:12:a8:77:fb:3a:23:
60:07:f4:cf:b3:16:1b:ee:36:99:44:e3:d2:91:d6:
6b:77:47:85:3c:fb:06:c8:6c:cf:d8:ff:b2:39:3d:
9d:ad:a1:5c:32:2c:da:74:3e:ff:91:0c:17:9a:fd:
ba:4b:47:16:40:64:56:1d:12:e4:4e:c6:b5:a1:7e:
f4:ab:ef:7e:47:70:41:0d:6f:1f:61:ff:1e:ca:1d:
d9:35:77:f2:a6:2b:bf:46:7e:6d:2e:ec:ec:24:b1:
4b:98:18:f9:8a:ab:f8:5b:80:ce:88:04:0e:eb:9e:
3c:5b:dd:0c:5d:21:ef:93:63:2d:3c:3d:89:a5:55:
02:06:79:2d:bf:a1:88:02:3e:a1:a9:1d:95:02:20:
cb:c4:ca:c3:07:24:5b:fb:7e:ef:92:b4:ab:ca:8b:
8e:f4:74:9e:2b:e2:63:95:8c:d3:3b:73:b2:d9:08:
d3:6a:9f:2e:e0:3e:23:f2:cc:3c:8f:59:9c:1c:9e:
33:41:98:20:65:a0:af:76:5f:44:b2:26:0d:07:14:
6f:fc:16:c0:fc:ae:ab:84:61:85:0d:1c:3e:34:91:
12:2e:1c:b5:6a:37:9f:ae:dc:19:32:74:32:fd:d3:
20:5d:d1:6a:d4:67:9a:91:4f:0f:e3:c7:c6:4a:95:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:F1:B9:FF:BB:0F:55:BA:41:44:79:C1:08:01:9E:97:7A:EE:C1
X509v3 Authority Key Identifier:
keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:da:ea:21:7c:cd:89:d2:fc:cb:11:0f:95:17:56:a1:33:ef:
0f:64:24:eb:45:b1:da:cc:6a:af:4e:a4:f7:cc:68:8c:9a:2d:
ac:89:74:f0:cb:2d:d7:5a:72:7b:49:7b:52:61:02:75:fd:fe:
c3:96:40:10:a8:3d:b0:cf:99:23:1c:2c:0a:80:d7:cd:2c:cd:
b7:29:e1:7c:f5:02:b9:37:09:13:ca:b9:13:b0:d7:fe:46:49:
5c:f1:c3:21:14:8c:ca:a5:60:82:e5:7a:83:19:1c:77:a8:f8:
e9:d7:93:e5:97:35:a3:a9:36:be:65:f9:84:6f:be:61:2f:e0:
7e:c4:47:f9:6b:ef:ba:2c:19:ce:75:ae:f3:78:43:c8:55:d0:
b8:d8:28:ed:69:a1:42:d3:65:46:41:0b:3c:3b:83:b6:38:c2:
bf:16:5f:9a:ce:34:78:3f:c9:0c:82:91:dc:7e:e6:01:0c:96:
d7:0a:de:3d:80:b2:c3:e0:4b:b3:31:49:69:3f:fa:93:2d:80:
7b:a4:d3:e9:7c:d3:6e:3c:75:45:52:77:67:a9:d5:76:22:8c:
04:e0:ee:b3:df:6b:37:c7:4f:71:7f:0b:33:44:ec:d6:40:ee:
a6:d1:e2:d8:12:18:74:62:1a:1d:f1:7e:81:a7:51:eb:08:f1:
59:3f:3a:81
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RUExNDExMC8GA1UEBRMoRTM3MUEzQjZDMzkxMjYyQjZCQjg1QjZFNjhBQ0MxRkND
MDdBNEUxNDAeFw0yNjAzMjUwODA3MzVaFw0yNjA0MDEwODA3MzVaMBgxFjAUBgNV
BAMTDTY5YzM5N2M3LTNhY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxV76Oex4cTxKod/s6I2AH9M+zFhvuNplE49KR1mt3R4U8+wbIbM/Y/7I5PZ2t
oVwyLNp0Pv+RDBea/bpLRxZAZFYdEuROxrWhfvSr735HcEENbx9h/x7KHdk1d/Km
K79Gfm0u7OwksUuYGPmKq/hbgM6IBA7rnjxb3QxdIe+TYy08PYmlVQIGeS2/oYgC
PqGpHZUCIMvEysMHJFv7fu+StKvKi470dJ4r4mOVjNM7c7LZCNNqny7gPiPyzDyP
WZwcnjNBmCBloK92X0SyJg0HFG/8FsD8rquEYYUNHD40kRIuHLVqN5+u3BkydDL9
0yBd0WrUZ5qRTw/jx8ZKlS6XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0Vvxuf+7
D1W6QUR5wQgBnpd67sEwHwYDVR0jBBgwFoAU43GjtsORJitruFtuaKzB/MB6ThQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTE0L0Q3Mjg0RUE0MDIx
RDExRjFBQjU2MjgyRjQ5NkY1NkJDLzQzR2p0c09SSml0cnVGdHVhS3pCX01CNlRo
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvNDNHanRzT1JKaXRydUZ0dWFLekJfTUI2VGhRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
QTE0L0Q3Mjg0RUE0MDIxRDExRjFBQjU2MjgyRjQ5NkY1NkJDLzQzR2p0c09SSml0
cnVGdHVhS3pCX01CNlRoUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDe2uohfM2J0vzLEQ+VF1ahM+8PZCTrRbHazGqvTqT3zGiMmi2siXTwyy3XWnJ7
SXtSYQJ1/f7DlkAQqD2wz5kjHCwKgNfNLM23KeF89QK5NwkTyrkTsNf+Rklc8cMh
FIzKpWCC5XqDGRx3qPjp15PllzWjqTa+ZfmEb75hL+B+xEf5a++6LBnOda7zeEPI
VdC42CjtaaFC02VGQQs8O4O2OMK/Fl+azjR4P8kMgpHcfuYBDJbXCt49gLLD4Euz
MUlpP/qTLYB7pNPpfNNuPHVFUndnqdV2IowE4O6z32s3x09xfwszROzWQO6m0eLY
Ehh0Yhod8X6Bp1HrCPFZPzqB
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:17 2026 by rpki-client