
$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier: B19RNtK5nCfF9Tgs25e58NGvzZDL3bgtV/dgE2HqmxY=
Subject key identifier: F5:ED:67:85:07:BF:AF:02:8F:57:CF:FE:DA:72:7D:90:DE:B5:20:F1
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial: 08FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number: 08FF
Signing time: Thu 26 Mar 2026 20:10:53 +0000
Manifest this update: Thu 26 Mar 2026 20:10:52 +0000
Manifest next update: Thu 02 Apr 2026 20:10:52 +0000
Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: qpLexuxcdCjJdSebTkVK1ieDxD8f7C0xvX840GXinhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303 (0x8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Validity
Not Before: Mar 26 20:10:52 2026 GMT
Not After : Apr 2 20:10:52 2026 GMT
Subject: CN=69c592cd-d715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:1b:1d:74:8f:cd:55:fc:94:9b:f5:3d:73:
d1:6c:8e:65:78:9b:1e:69:e1:60:ea:5b:3f:04:1c:
35:25:b2:ff:f1:6c:b1:49:49:a5:5a:ed:58:b5:4d:
25:6b:0d:91:55:aa:2b:f4:ae:b8:36:53:e9:7a:32:
af:05:4f:01:c2:29:62:ac:3d:51:f1:50:7a:25:c4:
1a:d9:a9:11:f9:49:d1:c7:e8:ff:4a:9d:ab:62:d7:
31:43:42:d9:19:c2:67:15:a6:29:ce:41:d5:cb:4d:
4b:5c:6d:4a:3f:7e:a4:d3:c5:88:d8:22:c0:67:ef:
fd:7f:d0:31:54:7e:9b:b7:6f:e2:ec:07:42:5e:80:
db:e5:05:65:65:56:fb:a6:72:70:a8:8e:c7:42:c2:
81:3c:92:0d:3f:15:fa:75:ca:f9:56:ee:bf:b9:27:
a2:c6:a9:d0:3f:7a:b1:45:d9:18:42:bc:1d:5e:46:
ff:a3:17:64:f1:ed:44:c8:73:ee:3d:9a:a6:a4:b2:
42:24:8c:04:01:01:e8:4b:de:69:c3:03:37:6c:45:
76:49:f8:df:84:1a:9c:1f:09:0a:18:e2:8d:c5:6f:
27:4b:72:b5:48:80:4f:7f:d2:d2:4e:21:e9:33:3b:
56:c6:4a:ee:59:3b:b1:0a:aa:ff:77:c4:97:5e:2b:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:ED:67:85:07:BF:AF:02:8F:57:CF:FE:DA:72:7D:90:DE:B5:20:F1
X509v3 Authority Key Identifier:
keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:8d:0d:b5:c7:7b:37:22:49:60:01:cc:a4:42:11:84:33:75:
b5:cc:88:c8:06:e8:10:95:da:ea:9b:0e:1d:87:c0:92:ca:f6:
b8:c7:4f:94:57:13:67:1f:46:c4:33:6e:23:29:70:c3:75:1b:
45:81:44:22:7b:d3:85:d5:14:fa:5c:57:44:d1:b9:4b:fb:6f:
26:92:91:ca:44:8c:47:3d:7e:26:a2:30:b8:75:ea:da:fd:ce:
29:52:10:d6:d8:a2:17:69:98:e0:65:e1:4d:87:8c:b4:19:ed:
bf:de:d6:0d:95:90:34:79:78:40:b8:df:0e:e3:2f:86:77:43:
98:53:03:b0:89:dd:bc:84:d0:35:fa:a6:07:2d:2e:39:1a:e4:
0a:84:c9:f9:2b:51:0c:53:4c:8d:50:5a:48:d8:71:ad:fa:1d:
c3:6d:f6:62:39:42:19:02:ce:d8:df:94:31:32:e8:9d:44:91:
51:4f:60:49:28:db:9a:5b:f2:a1:e0:58:0a:11:4f:3a:59:c3:
92:f5:9f:93:4d:7c:e4:b2:39:12:34:ce:f7:60:07:50:5a:1e:
96:14:31:80:6a:41:61:50:b7:97:7c:59:c8:90:c4:f2:1d:90:
5e:00:46:29:a5:da:ae:68:6b:41:a8:f4:ef:6e:32:76:5f:0b:
35:f3:1c:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF
NkU5OUJDQzEwHhcNMjYwMzI2MjAxMDUyWhcNMjYwNDAyMjAxMDUyWjAYMRYwFAYD
VQQDEw02OWM1OTJjZC1kNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBUbHXSPzVX8lJv1PXPRbI5leJseaeFg6ls/BBw1JbL/8WyxSUmlWu1YtU0l
aw2RVaor9K64NlPpejKvBU8BwilirD1R8VB6JcQa2akR+UnRx+j/Sp2rYtcxQ0LZ
GcJnFaYpzkHVy01LXG1KP36k08WI2CLAZ+/9f9AxVH6bt2/i7AdCXoDb5QVlZVb7
pnJwqI7HQsKBPJINPxX6dcr5Vu6/uSeixqnQP3qxRdkYQrwdXkb/oxdk8e1EyHPu
PZqmpLJCJIwEAQHoS95pwwM3bEV2SfjfhBqcHwkKGOKNxW8nS3K1SIBPf9LSTiHp
MztWxkruWTuxCqr/d8SXXisC8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXtZ4UH
v68Cj1fP/tpyfZDetSDxMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0
RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6
QUUwNVZLVjRUb1htNlp2TUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEo0Ntcd7NyJJYAHMpEIRhDN1tcyIyAboEJXa6psOHYfAksr2uMdPlFcTZx9G
xDNuIylww3UbRYFEInvThdUU+lxXRNG5S/tvJpKRykSMRz1+JqIwuHXq2v3OKVIQ
1tiiF2mY4GXhTYeMtBntv97WDZWQNHl4QLjfDuMvhndDmFMDsIndvITQNfqmBy0u
ORrkCoTJ+StRDFNMjVBaSNhxrfodw232YjlCGQLO2N+UMTLonUSRUU9gSSjbmlvy
oeBYChFPOlnDkvWfk0185LI5EjTO92AHUFoelhQxgGpBYVC3l3xZyJDE8h2QXgBG
KaXarmhrQaj0724ydl8LNfMcEg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:37 2026 by rpki-client