
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier: 9n0s74UMvZzyZQknZBM/Iu0DgbCkEoLrRChQNIeiK/8=
Subject key identifier: 4E:24:E7:02:26:96:4F:4C:1D:7F:4A:52:93:84:63:81:38:8B:5C:B7
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial: 03DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number: 03D8
Signing time: Sun 05 Apr 2026 00:19:57 +0000
Manifest this update: Sun 05 Apr 2026 00:19:57 +0000
Manifest next update: Sun 12 Apr 2026 00:19:57 +0000
Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: H4eFvpRqYXz/0PDTKwrC3SKf+HWyT6nnwiaIRDU+R7Y=)
2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: C2lCkbVI1XaonZAwyhCohh9dLONbvb2hit8qWW3O4Ec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Validity
Not Before: Apr 5 00:19:57 2026 GMT
Not After : Apr 12 00:19:57 2026 GMT
Subject: CN=69d1aaad-5be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:f2:df:04:a4:7b:ef:0a:99:83:4f:43:ae:
13:60:51:38:ae:9a:17:55:ff:6a:ef:2f:42:ef:e1:
44:55:37:22:61:6f:b8:07:45:cc:6e:a7:68:dc:06:
ef:63:d5:46:b3:47:20:ce:eb:85:33:0f:2a:54:1a:
79:c0:0d:3b:48:59:ee:1d:a7:09:a3:f7:f7:a6:9a:
d5:08:55:4c:0b:ad:d5:ac:64:04:64:0f:5a:5c:91:
bd:18:9f:c7:85:0c:5e:79:a7:9b:28:33:44:a8:58:
e3:0c:b2:c9:58:6d:fc:84:36:63:65:57:b5:96:07:
6f:ee:ad:fe:7f:f5:c2:20:c2:6e:40:e2:d8:50:e2:
0f:d2:d2:3f:b8:86:a1:11:6f:5b:54:36:b9:03:68:
cf:1d:09:e2:26:8a:87:be:e3:5f:29:54:d3:a6:92:
8b:e6:03:d0:96:0b:fb:4a:4b:fb:42:a4:2a:d3:83:
96:3c:30:8d:82:ec:93:84:cf:b5:ff:5a:8f:c0:13:
ef:c9:8a:5d:9c:28:58:5d:67:42:c0:ed:9a:27:d3:
65:82:d2:1f:f6:08:63:7e:f7:06:b2:0a:c9:43:f5:
68:c6:c4:5e:5f:8d:1f:56:53:9f:25:2c:77:9f:45:
9b:1b:ef:19:22:a5:73:01:45:03:fa:6d:8a:a3:98:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:24:E7:02:26:96:4F:4C:1D:7F:4A:52:93:84:63:81:38:8B:5C:B7
X509v3 Authority Key Identifier:
keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e0:44:93:f9:d0:ba:6d:4f:06:75:e6:15:77:5c:dc:c8:94:
80:92:5d:c5:09:a5:4b:ad:71:70:9f:f0:eb:c4:74:7f:e0:ef:
c8:a3:8e:26:0b:b7:6c:f6:e9:c1:70:89:93:29:00:51:30:d2:
66:ad:b0:77:6c:f8:ce:32:65:16:a0:7c:28:89:70:7a:31:b7:
bf:fc:c7:cc:63:b8:61:ca:88:14:4f:08:8b:8a:12:ca:f9:72:
83:32:6d:3a:2a:d3:e3:3b:38:15:d5:29:25:cf:38:c1:51:a3:
04:b7:84:e7:24:e0:62:1f:7c:0b:11:88:73:04:36:e1:d2:4e:
9e:cd:f2:d5:3d:92:b0:b8:f0:9f:08:07:f6:a7:59:19:71:67:
67:50:c7:1e:8c:1e:b0:80:57:c1:93:97:a5:67:5b:b4:c4:66:
67:fb:e9:1e:a1:f9:51:29:98:f0:48:01:9f:50:67:86:7c:be:
ba:c1:a1:36:3e:8b:70:46:a1:91:88:1a:d3:fe:92:eb:37:08:
f8:fb:33:5a:72:b3:3a:a8:e2:f0:91:97:8a:ad:ac:b1:f7:25:
a5:b5:4e:2c:09:62:a3:96:12:5f:b2:bf:44:61:9d:91:91:7e:
e2:46:c4:37:0c:fc:6b:6f:07:9d:e6:f2:f5:46:5b:b0:12:ac:
d1:c5:a3:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw
MEUyRTZBODYwHhcNMjYwNDA1MDAxOTU3WhcNMjYwNDEyMDAxOTU3WjAYMRYwFAYD
VQQDEw02OWQxYWFhZC01YmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgPy3wSke+8KmYNPQ64TYFE4rpoXVf9q7y9C7+FEVTciYW+4B0XMbqdo3Abv
Y9VGs0cgzuuFMw8qVBp5wA07SFnuHacJo/f3pprVCFVMC63VrGQEZA9aXJG9GJ/H
hQxeeaebKDNEqFjjDLLJWG38hDZjZVe1lgdv7q3+f/XCIMJuQOLYUOIP0tI/uIah
EW9bVDa5A2jPHQniJoqHvuNfKVTTppKL5gPQlgv7Skv7QqQq04OWPDCNguyThM+1
/1qPwBPvyYpdnChYXWdCwO2aJ9NlgtIf9ghjfvcGsgrJQ/VoxsReX40fVlOfJSx3
n0WbG+8ZIqVzAUUD+m2Ko5ggRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4k5wIm
lk9MHX9KUpOEY4E4i1y3MB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy
NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6
d2dkakpkS3NmM0FBNHVhb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD+BEk/nQum1PBnXmFXdc3MiUgJJdxQmlS61xcJ/w68R0f+DvyKOOJgu3bPbp
wXCJkykAUTDSZq2wd2z4zjJlFqB8KIlwejG3v/zHzGO4YcqIFE8Ii4oSyvlygzJt
OirT4zs4FdUpJc84wVGjBLeE5yTgYh98CxGIcwQ24dJOns3y1T2SsLjwnwgH9qdZ
GXFnZ1DHHowesIBXwZOXpWdbtMRmZ/vpHqH5USmY8EgBn1Bnhny+usGhNj6LcEah
kYga0/6S6zcI+PszWnKzOqji8JGXiq2ssfclpbVOLAlio5YSX7K/RGGdkZF+4kbE
Nwz8a28Hneby9UZbsBKs0cWjRQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:51 2026 by rpki-client