
$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier: eA+c8Jtjx56jcllV90WW0SgXEaxcsX7CXERUP83jkyA=
Subject key identifier: 19:04:7E:57:7C:1B:8A:F9:70:34:E7:8F:93:D8:72:7C:E6:D4:91:8A
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial: 0917
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number: 0917
Signing time: Tue 12 May 2026 20:18:44 +0000
Manifest this update: Tue 12 May 2026 20:18:43 +0000
Manifest next update: Tue 19 May 2026 20:18:43 +0000
Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: bnbcAJEJrH3WnFfliCW2DbtKL0ziVJdmaJQd/dUUxqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Validity
Not Before: May 12 20:18:43 2026 GMT
Not After : May 19 20:18:43 2026 GMT
Subject: CN=6a038b24-fdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:cf:e3:40:2f:68:29:a8:fe:a1:8a:ee:7e:
33:90:f4:77:10:62:51:33:51:33:61:3c:58:37:2e:
04:a4:83:bb:37:0b:ef:b7:46:b5:fe:8b:62:0d:77:
b6:9c:6a:df:67:c7:c1:a2:07:f3:d2:39:6d:24:01:
77:4f:20:04:56:af:7c:a2:e3:dd:d0:93:b0:ae:d9:
0f:ad:cb:ba:20:24:20:b7:7e:cb:33:49:15:c6:f6:
4e:6c:4c:0d:93:88:5d:6e:6d:35:5e:42:71:9c:c5:
26:57:a2:f7:bf:57:c0:05:6c:69:92:c4:4b:1d:19:
01:ea:29:e0:dc:ae:cc:28:9a:8b:5e:1a:70:ef:af:
9b:a8:7d:57:b7:1e:38:66:a5:51:3c:2d:62:dd:9e:
7e:6c:88:ce:4f:aa:51:ab:c3:ed:4a:73:06:6f:96:
d3:7a:9f:43:de:77:64:a5:4d:08:d0:17:03:84:06:
13:40:42:f3:b6:7a:95:5a:32:20:55:c9:39:b4:2a:
dd:b9:b9:36:dc:c5:c6:f6:79:82:b1:0c:e3:00:65:
bf:3c:23:7a:00:c1:ff:0f:4a:0f:61:32:5b:12:e5:
fd:4f:1c:d0:61:80:dd:60:79:6f:0b:ba:63:50:c7:
97:53:ef:7e:00:4d:c9:ef:c7:89:4a:98:36:d1:1e:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:7E:57:7C:1B:8A:F9:70:34:E7:8F:93:D8:72:7C:E6:D4:91:8A
X509v3 Authority Key Identifier:
keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:e1:35:8d:b2:01:de:e4:c7:6a:71:d8:f6:6a:ff:f9:80:
49:ab:a7:72:cd:af:9c:b1:9d:2e:35:e4:25:17:6e:d2:3a:38:
42:b3:b7:9c:d3:89:26:c0:f8:3b:28:39:57:db:c3:01:0f:2b:
f4:5f:bd:d5:e0:ee:63:c2:87:e2:3b:24:27:87:7e:e3:d2:5e:
36:a1:ae:f7:9f:40:44:4e:59:83:eb:4a:5d:fa:dc:cb:3f:f0:
9f:93:61:1d:9b:1d:6a:da:41:d4:07:e1:3f:f3:39:7e:d0:11:
07:95:c3:5d:17:76:d3:6d:7f:c3:5a:84:70:a1:6a:37:e7:f3:
84:c0:98:f2:0a:91:06:df:1e:7a:9b:6e:ee:cc:f6:cf:4b:88:
c3:6b:7b:dd:09:91:f5:b4:31:71:d8:5e:d8:f6:5f:e3:c9:0f:
63:04:6e:b5:14:23:08:7f:6f:5f:83:a7:e4:d0:5b:02:1a:ea:
1a:09:58:9e:ab:8d:c4:19:f3:cb:25:02:d6:3c:27:82:fa:77:
92:3d:fa:6c:c4:0f:6b:a6:6b:24:75:ba:20:a0:97:47:e9:15:
65:f2:4d:00:18:00:84:75:a2:6c:80:bc:c2:1c:f4:e7:97:35:
7e:2d:8f:e6:53:96:82:7b:28:2d:5f:db:5a:f0:98:93:5a:6a:
fb:9e:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:34 2026 by rpki-client