
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier: lq4rlEGRtQQfz1pAru/L0YQuE7usm6mdaWVanI6BBig=
Subject key identifier: BA:33:6C:83:45:06:2C:0D:21:9F:2D:59:2F:8E:6B:B4:4E:06:F3:A3
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number: 03D2
Signing time: Wed 25 Mar 2026 00:14:09 +0000
Manifest this update: Wed 25 Mar 2026 00:14:09 +0000
Manifest next update: Wed 01 Apr 2026 00:14:09 +0000
Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: hUGet74UH4ryGam/9lD0hylCodrVqzr7ZlOOv+WQRoU=)
2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: C2lCkbVI1XaonZAwyhCohh9dLONbvb2hit8qWW3O4Ec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:14:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Validity
Not Before: Mar 25 00:14:09 2026 GMT
Not After : Apr 1 00:14:09 2026 GMT
Subject: CN=69c328d1-fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:79:aa:7d:02:46:a8:9d:23:01:d9:76:b3:
95:6c:6c:33:df:db:44:38:73:0e:69:40:42:b6:4e:
e3:8b:2d:a2:79:52:d4:60:71:bc:89:27:18:b1:28:
d1:f9:91:c6:0e:18:63:9c:68:67:a2:56:df:d8:1e:
d4:cf:5d:30:ac:ce:bc:b4:bc:39:fe:21:49:70:54:
ce:62:f1:05:db:c0:5f:47:44:61:52:f9:bb:dd:93:
4c:1a:4e:2f:8b:be:38:e7:1d:c7:3d:dc:c0:00:45:
66:d7:7b:9d:ee:36:a7:48:1a:fe:76:bf:bd:64:dc:
23:72:0a:21:7d:d5:c1:07:21:be:57:60:4c:bc:8e:
5b:21:99:80:c9:cf:08:ec:51:25:78:f5:50:ef:81:
ed:8f:6e:e4:63:ec:3d:b5:88:ce:6a:82:c9:08:60:
e6:0d:3a:34:e2:26:df:60:cd:75:6b:c1:cf:51:6f:
41:f5:78:fe:a7:30:a0:e3:42:f0:8c:21:18:2e:ad:
81:22:e2:b1:81:17:eb:80:dd:5b:83:8e:76:55:67:
6a:56:c9:14:89:6f:e7:34:88:c9:22:c8:bf:e2:be:
d1:40:f9:b6:6b:5e:f8:8a:4d:1b:e4:d9:ce:ca:93:
25:c5:4a:b8:cb:04:9a:d8:c1:b5:dd:9b:81:cb:e6:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:33:6C:83:45:06:2C:0D:21:9F:2D:59:2F:8E:6B:B4:4E:06:F3:A3
X509v3 Authority Key Identifier:
keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:30:35:c1:08:45:86:f6:c2:ce:a9:ba:c7:81:55:fd:34:14:
4d:68:53:1a:24:b6:9f:76:1f:32:a7:8c:32:02:16:a1:05:1e:
a0:c4:7d:db:46:e8:49:61:db:1c:0c:01:04:61:04:50:80:80:
11:77:ee:54:91:0d:eb:ba:5f:a7:cb:41:ea:e0:d2:4b:7f:ad:
40:1e:92:d4:25:fe:f0:d9:c7:8e:1a:b8:c0:1d:56:30:84:50:
ce:e7:96:32:cf:73:6a:14:1e:8b:03:27:b1:ea:96:e5:a1:61:
e9:e4:83:32:47:0e:82:de:6d:c9:44:00:1b:6f:64:ac:32:60:
20:50:3b:95:14:d6:41:33:23:2e:1d:96:3e:97:ca:67:ac:5c:
50:04:e5:71:92:70:b1:a5:39:14:51:9b:95:ee:e3:12:27:c5:
3c:5d:28:82:70:d1:80:a8:d4:8f:b1:c2:18:9e:5c:47:d8:e5:
9b:5f:78:ca:e2:27:2d:07:d4:3d:a8:57:f9:56:54:5a:7f:7e:
fb:b2:98:a4:80:be:15:18:e9:e3:d5:9c:54:9b:a9:99:93:f8:
cb:a9:46:90:c1:06:ff:de:a1:88:38:53:dc:f7:9c:59:88:f9:
f3:36:11:2d:ce:b7:57:d0:06:b7:42:30:8a:d0:11:d2:94:3a:
42:41:99:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw
MEUyRTZBODYwHhcNMjYwMzI1MDAxNDA5WhcNMjYwNDAxMDAxNDA5WjAYMRYwFAYD
VQQDEw02OWMzMjhkMS1mYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAh5qn0CRqidIwHZdrOVbGwz39tEOHMOaUBCtk7jiy2ieVLUYHG8iScYsSjR
+ZHGDhhjnGhnolbf2B7Uz10wrM68tLw5/iFJcFTOYvEF28BfR0RhUvm73ZNMGk4v
i7445x3HPdzAAEVm13ud7janSBr+dr+9ZNwjcgohfdXBByG+V2BMvI5bIZmAyc8I
7FElePVQ74Htj27kY+w9tYjOaoLJCGDmDTo04ibfYM11a8HPUW9B9Xj+pzCg40Lw
jCEYLq2BIuKxgRfrgN1bg452VWdqVskUiW/nNIjJIsi/4r7RQPm2a174ik0b5NnO
ypMlxUq4ywSa2MG13ZuBy+ZN0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLozbINF
BiwNIZ8tWS+Oa7ROBvOjMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy
NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6
d2dkakpkS3NmM0FBNHVhb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbjA1wQhFhvbCzqm6x4FV/TQUTWhTGiS2n3YfMqeMMgIWoQUeoMR920boSWHb
HAwBBGEEUICAEXfuVJEN67pfp8tB6uDSS3+tQB6S1CX+8NnHjhq4wB1WMIRQzueW
Ms9zahQeiwMnseqW5aFh6eSDMkcOgt5tyUQAG29krDJgIFA7lRTWQTMjLh2WPpfK
Z6xcUATlcZJwsaU5FFGble7jEifFPF0ognDRgKjUj7HCGJ5cR9jlm194yuInLQfU
PahX+VZUWn9++7KYpIC+FRjp49WcVJupmZP4y6lGkMEG/96hiDhT3PecWYj58zYR
Lc63V9AGt0IwitAR0pQ6QkGZ2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:26 2026 by rpki-client