
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier: Oe8vUBROdYCgTpkJ8qqpESuAxx7CxC6kiYM6hMdpK8Q=
Subject key identifier: 03:4B:0D:D1:EB:E8:F1:35:21:5E:7E:AE:CF:99:B3:A6:A3:23:B0:DB
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial: 0961
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number: 0961
Signing time: Fri 02 Oct 2026 20:21:47 +0000
Manifest this update: Fri 02 Oct 2026 20:21:47 +0000
Manifest next update: Fri 09 Oct 2026 20:21:47 +0000
Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: kbT7a3zmtz8lTBqjxE2hX5jiJNT2bdmgd6gdPklX/ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Validity
Not Before: Oct 2 20:21:47 2026 GMT
Not After : Oct 9 20:21:47 2026 GMT
Subject: CN=6ac0125b-8fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:e0:81:c1:36:df:6c:f4:26:dd:6d:67:b7:
1d:0e:19:da:c4:ce:22:06:e7:30:b3:2b:2d:d5:2c:
04:e9:0c:79:2f:d5:d1:91:13:b0:a2:3a:e2:fa:df:
4f:bb:3c:88:9a:55:bf:a0:17:d0:f2:9d:13:53:f3:
78:13:3c:1c:b8:cc:53:54:69:4f:b2:34:3b:2c:4d:
35:29:9c:e1:6a:da:45:6f:3a:ba:e7:ea:d0:0f:20:
56:08:44:35:a1:cf:c0:a7:b7:11:96:00:21:2f:2a:
b2:34:15:ad:58:96:94:cf:d3:fe:c7:da:a5:bb:90:
69:31:c9:fa:21:ca:59:f2:78:62:a8:43:dd:55:cf:
56:8c:1d:8a:bb:bd:5f:12:30:76:35:5b:57:e1:e8:
7f:63:aa:38:55:12:74:f5:e6:bc:e9:61:d7:1c:ac:
5c:ca:45:e7:58:0f:f3:f9:6a:7c:4d:d3:af:26:67:
bd:2a:1e:63:a3:36:fc:36:04:08:d2:5c:f9:25:97:
00:3d:45:ce:66:0b:10:81:0e:58:6e:5c:c6:73:ab:
c4:12:17:48:ee:42:f5:47:7f:9f:ad:c0:4b:35:b3:
ba:22:f7:05:5a:7c:9b:ff:5a:69:9f:bd:03:32:25:
c7:e2:f6:48:3b:49:60:93:87:2e:8f:7c:46:b9:f1:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:0D:D1:EB:E8:F1:35:21:5E:7E:AE:CF:99:B3:A6:A3:23:B0:DB
X509v3 Authority Key Identifier:
keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:b2:48:86:70:f0:0c:82:41:20:c5:5b:4e:c6:43:5f:f8:01:
f3:4a:77:68:3e:0c:9e:5d:39:c0:25:38:93:ef:ad:68:9c:b0:
c9:34:ab:4d:d2:a2:b2:8b:56:63:88:cb:70:f8:1b:86:41:98:
5b:3a:cc:7f:54:9e:40:d6:56:8a:d4:1e:ef:08:4a:52:0e:df:
ae:e9:db:11:b7:38:34:d5:09:ae:9f:ca:b9:67:9b:19:58:84:
5f:2a:a4:3d:b6:28:bc:c0:47:2d:da:c1:61:f0:b7:c6:3c:a2:
51:b8:e4:de:f0:c9:af:d5:db:7f:fd:10:e2:13:83:c6:ca:3c:
55:c2:1f:69:b5:61:ac:09:aa:ee:e1:dd:aa:13:c1:1a:2b:27:
78:a2:18:30:5b:cc:bd:b6:09:e0:a4:55:0f:5d:0e:be:0e:5a:
81:60:97:fd:d8:91:e5:c4:bf:5e:5a:42:f8:60:ac:1f:d2:2b:
50:27:8b:61:39:a4:42:2e:82:af:e8:be:5d:cd:f6:f9:45:07:
51:97:a7:b7:19:5d:f9:21:0c:20:30:da:6d:c9:c9:4a:16:95:
85:d6:20:90:17:05:fb:9c:6c:5f:4e:a5:aa:25:ec:d5:73:25:
45:14:32:89:11:9f:92:1b:c0:c5:72:ff:cb:f4:11:a9:65:17:
f9:70:fe:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0QTU3ODRFODVF
NkU5OUJDQzEwHhcNMjYxMDAyMjAyMTQ3WhcNMjYxMDA5MjAyMTQ3WjAYMRYwFAYD
VQQDEw02YWMwMTI1Yi04ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmqDggcE232z0Jt1tZ7cdDhnaxM4iBucwsyst1SwE6Qx5L9XRkROwojri+t9P
uzyImlW/oBfQ8p0TU/N4EzwcuMxTVGlPsjQ7LE01KZzhatpFbzq65+rQDyBWCEQ1
oc/Ap7cRlgAhLyqyNBWtWJaUz9P+x9qlu5BpMcn6IcpZ8nhiqEPdVc9WjB2Ku71f
EjB2NVtX4eh/Y6o4VRJ09ea86WHXHKxcykXnWA/z+Wp8TdOvJme9Kh5jozb8NgQI
0lz5JZcAPUXOZgsQgQ5YblzGc6vEEhdI7kL1R3+frcBLNbO6IvcFWnyb/1ppn70D
MiXH4vZIO0lgk4cuj3xGufEMXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANLDdHr
6PE1IV5+rs+Zs6ajI7DbMB8GA1UdIwQYMBaAFHShlDlyKoMwBNOVSleE6F5umbzB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU0RS8yQUY5REJCMEM0
RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6QUUwNVZLVjRUb1htNlp2
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLR1VPWElxZ3pBRTA1VktWNFRvWG02WnZNRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJcWd6
QUUwNVZLVjRUb1htNlp2TUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2rJIhnDwDIJBIMVbTsZDX/gB80p3aD4Mnl05wCU4k++taJywyTSrTdKisotW
Y4jLcPgbhkGYWzrMf1SeQNZWitQe7whKUg7frunbEbc4NNUJrp/KuWebGViEXyqk
PbYovMBHLdrBYfC3xjyiUbjk3vDJr9Xbf/0Q4hODxso8VcIfabVhrAmq7uHdqhPB
GisneKIYMFvMvbYJ4KRVD10Ovg5agWCX/diR5cS/XlpC+GCsH9IrUCeLYTmkQi6C
r+i+Xc32+UUHUZentxld+SEMIDDabcnJShaVhdYgkBcF+5xsX06lqiXs1XMlRRQy
iRGfkhvAxXL/y/QRqWUX+XD+1w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:14 2026 by rpki-client