
$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier: VqGKUYITah0duxHWZ7Ad/iDyqLdMTrN7b5KHm2zfPAs=
Subject key identifier: 57:4E:01:7A:D0:E7:5A:27:4E:B9:FA:6D:4B:18:E1:E2:E8:B4:F9:B6
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number: 08F1
Signing time: Sat 28 Feb 2026 20:38:41 +0000
Manifest this update: Sat 28 Feb 2026 20:38:40 +0000
Manifest next update: Sat 07 Mar 2026 20:38:40 +0000
Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: 3JVDA298eEhnjkKo9akDV8cCLfeDOR3y/+oFm5luD5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Validity
Not Before: Feb 28 20:38:40 2026 GMT
Not After : Mar 7 20:38:40 2026 GMT
Subject: CN=69a35251-75d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:d9:ec:5b:cb:37:1e:fa:f2:d7:9e:22:b0:
23:12:c9:73:79:3a:62:1e:40:3d:ac:0d:4f:0c:57:
8f:e1:c1:7e:a8:4a:49:10:35:6c:a0:ad:06:1b:2c:
30:bc:60:8a:df:6a:2a:e4:8a:ac:87:98:c9:0d:c8:
8b:59:8d:39:43:18:58:ba:3b:3e:cf:c6:55:bc:4f:
52:37:19:0b:f9:2d:bc:ed:f7:95:5b:27:eb:b6:fd:
e4:9f:65:3e:fe:c7:6c:ee:26:1e:89:f9:25:6e:ed:
a9:31:b7:c5:16:d5:6b:7b:2d:22:b5:10:f5:ae:bc:
55:60:e4:5c:b2:1a:8b:8d:83:e1:9a:75:e4:84:e8:
eb:5e:92:24:ac:77:47:6f:d8:fc:aa:e9:09:29:6e:
50:47:cd:b8:58:41:f8:cd:f1:01:c3:ee:90:39:7f:
30:d4:95:74:3c:7d:70:c4:f7:74:68:18:41:7e:7f:
06:9e:26:3c:fe:f8:2f:fd:7a:db:0c:61:4d:49:b4:
29:fe:83:5c:32:3b:97:7c:7a:d7:19:c5:25:a5:f6:
bd:b7:01:82:9d:1c:cb:6f:f7:d6:f0:f1:cf:bc:25:
d3:ef:ed:10:dc:b5:5f:0e:dd:f6:0b:9c:a1:d2:af:
48:9e:57:77:56:51:3e:67:be:8c:a3:9c:dd:bd:10:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:01:7A:D0:E7:5A:27:4E:B9:FA:6D:4B:18:E1:E2:E8:B4:F9:B6
X509v3 Authority Key Identifier:
keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:b5:19:b1:a9:9b:df:80:7b:df:2a:7d:a6:08:19:97:4d:
f2:be:20:52:16:4f:84:4a:83:0f:76:a4:db:79:de:82:ab:0d:
89:2d:9d:45:1a:f8:c6:cb:7c:fe:4d:0a:80:30:a7:a2:c4:16:
06:e5:f1:68:af:c6:8a:56:10:c6:f9:2e:57:32:b7:0c:1e:6a:
57:f7:4f:58:67:c6:46:5c:3b:c9:22:1a:b6:be:02:17:fb:a9:
4c:a7:58:c9:73:ed:2a:ce:4c:ec:33:05:7c:35:a4:6a:12:22:
7c:74:19:3d:ca:65:23:ec:09:5e:5f:20:c5:c2:df:65:41:a4:
25:db:d3:e1:86:bc:09:69:1d:fa:f9:a9:07:c3:78:38:cf:f4:
30:c3:2d:26:c8:54:8f:b7:5b:d5:b7:85:f4:0c:5d:37:4c:53:
f8:5c:3b:26:a3:fc:82:bb:54:7a:c6:e0:aa:e0:64:ba:e3:08:
8a:a4:f3:21:0b:54:89:e7:c0:46:f8:78:23:5d:a9:d4:af:a5:
10:1b:15:cf:5e:82:61:66:b5:26:d0:be:fd:bc:fd:17:6e:0d:
0f:41:ed:69:35:7c:e4:ec:28:0c:8a:f7:01:67:1c:f4:6b:71:
2e:66:92:5b:01:33:d2:2d:13:2e:6f:c2:2c:69:41:42:83:5f:
f8:d2:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:37 2026 by rpki-client