
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File: 125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier: 5xT1yvJs+hW3piWXJDYTrhqfO+Xbe4JEgFjPkqn2K7s=
Subject key identifier: 56:F4:AD:E0:FB:0F:84:05:19:E6:44:01:EE:36:91:74:84:79:33:CE
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer: /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial: 083E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number: 083E
Signing time: Tue 24 Mar 2026 20:34:33 +0000
Manifest this update: Tue 24 Mar 2026 20:34:32 +0000
Manifest next update: Tue 31 Mar 2026 20:34:32 +0000
Files and hashes: 1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: vM/lcKKapOM+Z9G63DIMU4W1rUQBB58vbhgdbRP89rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Validity
Not Before: Mar 24 20:34:32 2026 GMT
Not After : Mar 31 20:34:32 2026 GMT
Subject: CN=69c2f558-3e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:44:d1:7a:49:60:9c:87:16:31:52:b4:02:85:
e9:f6:fa:0e:aa:73:fd:71:7d:70:9c:86:5a:58:b1:
88:b7:e3:46:cf:ab:45:ee:ca:7e:25:14:d1:11:ad:
e4:8f:3b:8e:a7:f6:65:05:21:46:dc:84:de:17:16:
e5:3f:08:e6:f2:4f:6c:92:03:b4:50:e3:8a:bf:b0:
61:c0:38:ae:f0:d9:11:5d:4c:8c:97:6c:3c:1f:97:
61:2b:37:6e:d7:f8:d4:a9:01:45:04:92:d3:f9:b3:
64:de:b7:68:32:44:f7:ae:9e:ed:17:31:bb:21:a7:
9d:2b:4d:0d:5f:5e:87:76:fa:4b:d8:ee:d5:ff:d7:
b3:7e:08:fb:fa:d9:b2:41:88:1a:c8:18:12:e2:e7:
e6:db:8e:ea:24:c6:7d:1e:4a:1a:e4:b4:8a:58:47:
1e:93:f7:0e:49:b9:d5:42:1f:fb:bc:20:77:8b:96:
cf:c2:a4:f7:0a:4d:bb:3d:92:27:42:3e:29:59:19:
f1:93:7f:53:cb:fb:2d:30:58:ce:0a:4d:55:a3:27:
1f:e0:5f:b5:a7:de:5b:51:4c:a3:ab:06:e0:d3:12:
34:f8:c6:bb:61:03:af:e7:d5:46:cf:e8:f6:56:8c:
1f:59:ce:ec:97:37:25:0e:c1:de:35:ae:e1:17:42:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:AD:E0:FB:0F:84:05:19:E6:44:01:EE:36:91:74:84:79:33:CE
X509v3 Authority Key Identifier:
keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:ea:5e:5d:9a:3f:a3:8e:d0:28:93:b5:da:79:e1:2c:78:
78:5e:e2:9a:01:86:9c:cb:ef:58:2c:62:d0:bd:5e:5f:f5:7a:
28:ff:ef:2e:fe:56:57:80:b9:7d:90:f5:31:4f:59:84:00:a1:
4a:58:4e:79:dc:33:cd:50:11:23:25:1e:27:1a:5c:80:39:0d:
c8:ff:c4:e4:7a:85:af:d4:2a:3c:ac:c8:fe:0f:d7:4f:e7:eb:
f0:29:38:5f:d6:bc:10:ed:07:4e:de:c0:16:a3:e3:1b:e8:c2:
f2:db:6e:c0:f8:a1:97:df:b2:36:6f:e9:59:f9:cf:02:65:04:
aa:23:11:3a:b0:36:dc:95:f4:10:87:09:23:52:5c:01:af:fd:
26:44:5f:ee:1f:c2:1d:8f:ea:19:ea:59:12:bb:35:dd:91:ac:
33:97:d2:bb:a3:a7:e6:d2:c1:43:9b:12:94:2f:6b:24:fd:d6:
bd:8a:98:53:f3:c5:ea:28:81:5f:9a:ff:56:49:83:3f:ef:0b:
85:2b:17:dd:a9:d5:91:df:00:38:6c:09:16:93:55:99:51:47:
b2:fe:68:ab:e2:e7:9a:9b:ab:d1:fd:9b:d0:47:fd:2c:2a:49:
38:9c:11:28:86:2d:fd:10:5d:4a:d4:fe:47:65:ae:da:a2:46:
67:96:6e:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURCNDExMTAvBgNVBAUTKEQ3NkU1NkQ5NTRDQzVDMDBGRTVENkVBREQ4REY1MDI3
MkE1QkRGMjkwHhcNMjYwMzI0MjAzNDMyWhcNMjYwMzMxMjAzNDMyWjAYMRYwFAYD
VQQDEw02OWMyZjU1OC0zZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh0TReklgnIcWMVK0AoXp9voOqnP9cX1wnIZaWLGIt+NGz6tF7sp+JRTREa3k
jzuOp/ZlBSFG3ITeFxblPwjm8k9skgO0UOOKv7BhwDiu8NkRXUyMl2w8H5dhKzdu
1/jUqQFFBJLT+bNk3rdoMkT3rp7tFzG7IaedK00NX16HdvpL2O7V/9ezfgj7+tmy
QYgayBgS4ufm247qJMZ9Hkoa5LSKWEcek/cOSbnVQh/7vCB3i5bPwqT3Ck27PZIn
Qj4pWRnxk39Ty/stMFjOCk1Voycf4F+1p95bUUyjqwbg0xI0+Ma7YQOv59VGz+j2
VowfWc7slzclDsHeNa7hF0LTCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFb0reD7
D4QFGeZEAe42kXSEeTPOMB8GA1UdIwQYMBaAFNduVtlUzFwA/l1urdjfUCcqW98p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI0MS8xNjBCODI0RTAy
MDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhBRC1YVzZ0Mk45UUp5cGIz
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEyNVcyVlRNWEFELVhXNnQyTjlRSnlwYjN5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REI0MS8xNjBCODI0RTAyMDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhB
RC1YVzZ0Mk45UUp5cGIzeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHW7qXl2aP6OO0CiTtdp54Sx4eF7imgGGnMvvWCxi0L1eX/V6KP/vLv5WV4C5
fZD1MU9ZhAChSlhOedwzzVARIyUeJxpcgDkNyP/E5HqFr9QqPKzI/g/XT+fr8Ck4
X9a8EO0HTt7AFqPjG+jC8ttuwPihl9+yNm/pWfnPAmUEqiMROrA23JX0EIcJI1Jc
Aa/9JkRf7h/CHY/qGepZErs13ZGsM5fSu6On5tLBQ5sSlC9rJP3WvYqYU/PF6iiB
X5r/VkmDP+8LhSsX3anVkd8AOGwJFpNVmVFHsv5oq+Lnmpur0f2b0Ef9LCpJOJwR
KIYt/RBdStT+R2Wu2qJGZ5Zukw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:33 2026 by rpki-client