
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier: bKlOwCF7wJneKehsfzMYgLA7Za3Ezo/KqyP+f29UDes=
Subject key identifier: 9D:37:8F:9F:77:A5:BA:04:D3:29:54:34:C7:54:D7:84:C5:68:12:C7
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial: 043B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number: 0434
Signing time: Sat 03 Oct 2026 00:32:41 +0000
Manifest this update: Sat 03 Oct 2026 00:32:40 +0000
Manifest next update: Sat 10 Oct 2026 00:32:40 +0000
Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: UrXriEf2ng7PEoZVdXNyjG+CwOrazX2xhZvqfL2SxCs=)
2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: C2lCkbVI1XaonZAwyhCohh9dLONbvb2hit8qWW3O4Ec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Validity
Not Before: Oct 3 00:32:40 2026 GMT
Not After : Oct 10 00:32:40 2026 GMT
Subject: CN=6ac04d28-018c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:07:b2:08:be:9e:1a:98:9e:12:a8:3a:58:
1d:c9:9a:37:fd:7d:d6:9b:d4:53:d5:9c:a2:0c:b3:
81:dc:d6:b0:34:c1:3f:7f:ec:f7:fa:41:7a:a6:02:
b9:19:28:ed:b8:c5:aa:35:7c:f5:99:2f:41:7d:f6:
a9:fa:a5:12:ec:0b:55:b9:df:60:6d:34:d6:5f:c9:
25:4e:72:2f:65:6f:f3:40:55:e2:f7:bb:84:cb:0f:
09:d3:d6:0c:58:e0:12:6c:07:93:0f:7d:fc:50:1a:
a2:7f:93:f1:6d:51:82:c8:62:47:67:fe:e6:17:f3:
09:1b:08:9f:8a:64:89:31:85:cf:94:c0:5c:43:fa:
fd:80:aa:96:a3:29:00:87:90:1e:3a:09:58:af:a9:
3a:7a:10:56:e8:d3:f5:5f:2e:09:75:de:20:ca:3f:
18:52:06:02:a0:00:f3:c7:8f:3c:61:6b:29:3a:05:
5c:ac:99:51:f4:f2:28:ee:fb:7c:38:93:cd:bb:d2:
26:eb:33:2b:ef:4b:47:64:21:93:6b:2f:f8:b8:6b:
0c:2a:f9:ad:d3:2f:5c:23:71:26:df:92:5e:1f:e3:
ac:f5:a1:37:ee:26:e0:ba:d0:e4:c6:aa:75:3e:67:
27:33:89:0f:a8:fc:76:c3:e0:59:46:19:ab:35:1d:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:8F:9F:77:A5:BA:04:D3:29:54:34:C7:54:D7:84:C5:68:12:C7
X509v3 Authority Key Identifier:
keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:78:e8:8e:c3:71:f1:44:d8:df:97:8b:a2:88:cb:a5:e9:
c5:12:9f:36:22:08:71:1a:1d:49:4e:05:aa:93:9b:cf:c7:0f:
ac:ae:8d:fc:19:e3:d9:9c:e0:29:e8:e3:de:a7:7e:ce:1a:05:
70:e7:03:79:43:70:64:19:fb:d4:c9:88:a9:d7:be:52:2c:94:
8d:bc:86:18:de:28:42:71:26:bd:cb:7d:9d:2e:09:ea:69:1b:
d5:4a:4f:d9:74:9c:a9:a6:29:ce:57:73:c8:f2:56:11:41:fa:
86:38:09:cc:f6:00:4c:ab:08:fe:bd:e1:75:7e:54:02:ba:62:
7c:6f:0c:a4:5a:73:f3:bb:53:02:5a:f2:80:0e:db:dc:94:75:
05:c9:60:3b:f5:1f:a0:79:9b:f5:62:d9:b9:a6:22:12:ec:21:
13:00:9c:fb:da:9a:2f:0a:b1:e7:45:27:bb:d8:0e:a8:51:bf:
d5:19:00:d7:5c:6b:24:f5:79:bd:4c:20:39:e0:6a:ca:35:9a:
98:af:e5:df:ae:64:ac:93:12:c5:b5:49:a1:12:9f:93:58:ac:
41:e3:59:b9:75:54:3d:92:24:76:6c:f5:fb:89:58:26:1b:5f:
2e:2a:0b:73:67:98:11:6a:03:9e:84:c1:e7:23:2c:df:ed:5b:
07:77:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:46:18 2026 by rpki-client