
$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File: dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier: 9QffKISsVzw+6qV5HZBBP5UOJAcg+B+sB91I+XYR16Q=
Subject key identifier: B8:75:6E:90:8A:31:0B:93:9F:16:5F:26:69:F8:83:BD:51:ED:B4:AE
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer: /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial: 0949
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number: 0949
Signing time: Tue 18 Aug 2026 20:28:00 +0000
Manifest this update: Tue 18 Aug 2026 20:28:00 +0000
Manifest next update: Tue 25 Aug 2026 20:28:00 +0000
Files and hashes: 1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: D/carVmqhIAXOknl7i28i4HPPPMz7tyeRVj4RVlcv/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Validity
Not Before: Aug 18 20:28:00 2026 GMT
Not After : Aug 25 20:28:00 2026 GMT
Subject: CN=6a84c050-1ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:67:60:4c:b3:1e:b0:ad:f7:89:65:85:cb:
32:42:17:3f:4a:8b:f7:34:33:1b:4e:e6:30:9f:65:
17:c3:13:cc:56:55:56:ed:8f:23:29:a4:0d:6c:11:
53:5a:fe:19:10:b7:1b:e5:35:00:ee:3c:be:6a:26:
5c:4b:df:8a:d2:6c:6f:95:14:6e:98:25:97:5f:d2:
74:62:7f:4b:ec:95:9a:69:56:f5:ca:50:ee:8d:1d:
a9:fd:a4:ad:15:d6:fa:d3:dc:06:9e:47:ab:12:e7:
64:fd:83:d3:e4:0e:40:de:17:09:bb:66:a7:62:4a:
15:07:4a:9d:f8:5a:b6:16:72:5b:c6:1a:4c:1f:ac:
bb:ae:ba:06:66:f1:cf:77:b6:7c:3c:db:d0:16:b9:
e7:39:78:01:c0:88:61:04:95:6a:0c:d7:1f:95:45:
1e:d5:9b:95:12:63:e2:62:cb:ad:04:b1:47:fe:60:
8f:0b:56:7e:f7:2a:0f:67:86:df:53:ad:bb:20:9e:
55:46:34:9e:ed:2a:64:83:bb:76:01:85:8f:5c:d4:
39:87:82:09:08:f8:7e:3b:cb:02:64:88:47:7c:d9:
dc:67:26:7d:be:49:be:66:b5:75:a2:f9:4e:e9:25:
22:7a:1e:14:7e:48:48:5f:0d:23:80:b0:14:65:ab:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:75:6E:90:8A:31:0B:93:9F:16:5F:26:69:F8:83:BD:51:ED:B4:AE
X509v3 Authority Key Identifier:
keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1e:b6:4a:04:a7:a8:ce:fd:af:fa:22:6b:29:d2:f3:d7:cb:
36:80:ca:80:af:a1:11:d8:58:76:89:2a:d5:32:3f:98:fe:0e:
e5:6b:e4:70:19:66:70:17:68:a5:58:d7:1a:3f:96:a9:cd:58:
6b:d0:37:0c:1a:d4:ed:bb:28:16:95:01:c9:af:b1:87:df:82:
f6:85:db:58:ff:93:28:2e:59:b1:39:29:74:76:b3:29:12:e6:
0e:bc:55:0d:7f:c2:4c:d1:62:13:19:13:ce:00:d1:e2:45:98:
0e:7c:38:f8:99:71:96:48:6e:03:31:b1:b4:c3:5d:b0:e3:02:
20:69:5c:cb:98:c6:8f:0c:ec:9e:b0:c8:db:94:51:c9:cb:d7:
b2:20:36:f7:2d:da:03:e4:a3:f1:28:2b:10:be:ac:10:5e:82:
a7:a0:e2:f0:5c:60:69:d7:11:27:1b:97:7d:bf:06:ea:4e:63:
38:b7:d8:c1:cd:52:5c:a7:73:3a:0c:ad:a5:df:d2:f8:e1:a1:
5b:9f:e3:93:9f:aa:9d:4e:61:37:65:f4:68:62:39:9d:2d:c4:
60:48:4a:da:c8:7b:d2:8a:14:6d:35:c5:b4:f5:2c:29:de:f3:
b1:11:cd:f2:2b:8b:0f:ae:59:66:33:1f:4c:ee:6f:92:74:4c:
68:c7:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:24 2026 by rpki-client