
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier: UjEkHtMwiJ5ASp2wMbc8doSEYPPrbfVxnuttUD6ZoVo=
Subject key identifier: 1B:2E:95:C4:10:9E:25:91:A3:AE:6C:0A:F0:05:B2:C8:A6:97:7A:1C
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial: 1DF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number: 1DE2
Signing time: Wed 22 Jul 2026 16:10:25 +0000
Manifest this update: Wed 22 Jul 2026 16:10:24 +0000
Manifest next update: Wed 29 Jul 2026 16:10:24 +0000
Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: CvglrKreiLqesgFkkarpcN7XdUjOgiZtuJFL/z50L6Q=)
2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7664 (0x1df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Validity
Not Before: Jul 22 16:10:24 2026 GMT
Not After : Jul 29 16:10:24 2026 GMT
Subject: CN=6a60eb71-0ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:ee:8c:b7:48:ad:dd:3a:92:e7:cb:46:49:
75:02:e0:86:4c:d2:46:90:ca:4d:10:d2:8b:32:18:
fb:ca:96:0c:63:b8:a8:8a:4c:85:99:10:7f:b3:32:
83:5f:4a:8d:99:9b:cd:26:01:70:41:f1:03:ea:85:
6e:31:ec:41:84:a7:1f:b4:24:22:b6:e1:5b:af:63:
dd:af:a1:4c:00:fa:59:4d:02:5e:1d:90:f7:82:ac:
1a:ef:93:67:17:4e:f1:8d:0a:dd:03:50:2a:bf:84:
02:f3:67:e5:ea:00:83:ca:61:68:78:81:1d:e6:7e:
ef:13:06:19:9a:62:90:e6:01:70:8f:ad:37:11:f9:
09:cd:92:b8:78:86:55:07:09:f3:ee:f6:19:91:16:
d6:4a:e7:bb:bb:d5:4e:ed:d9:fb:80:50:4b:42:eb:
ec:e8:dd:fb:93:3e:75:e6:96:14:60:9a:c3:22:a6:
91:84:7c:46:23:52:4f:93:89:31:90:9f:13:62:26:
a6:fa:93:be:19:59:8f:78:ad:89:fb:04:1e:83:20:
c1:68:b2:36:ca:79:13:07:0f:0d:4a:49:b3:4b:8d:
e1:18:fc:5c:65:4f:be:09:55:ae:37:a0:77:3a:2a:
a5:ca:87:d0:79:68:9c:a0:53:67:2e:16:29:03:d4:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:95:C4:10:9E:25:91:A3:AE:6C:0A:F0:05:B2:C8:A6:97:7A:1C
X509v3 Authority Key Identifier:
keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:08:bd:ba:78:58:15:60:63:ce:95:71:42:2a:cd:75:63:ba:
89:f2:7c:db:f0:58:2c:d2:45:91:e6:bd:4f:43:ad:ff:a9:ff:
3d:09:95:fd:41:1b:fc:b2:59:a2:b4:b6:31:4b:4c:8a:1b:14:
5e:ff:98:0d:6f:aa:d9:27:e5:46:18:e8:81:69:f5:c1:dc:6b:
16:f3:af:ab:a8:28:8c:e5:45:8a:cc:5e:23:99:2c:ee:a0:59:
35:01:5b:0b:3d:12:e7:e7:97:48:e4:e4:8a:d5:fb:c8:75:33:
aa:3e:59:46:75:a3:89:4a:a0:e1:3a:38:be:13:7f:19:af:06:
82:fa:1f:8e:b2:b2:67:9a:77:3a:02:84:0c:4f:f0:46:3c:a4:
84:19:06:01:35:92:7d:27:2c:d2:36:96:90:21:e9:eb:24:7b:
45:74:58:4c:9e:d3:49:56:a7:6b:b1:34:fd:15:85:e6:16:56:
58:96:d9:74:e5:e7:f0:d0:b1:1e:90:be:0e:68:de:46:44:5e:
91:7f:e3:93:1c:bd:c2:3d:78:91:c3:29:18:31:86:4c:b2:99:
b4:17:1b:a5:a4:db:2c:00:3a:75:d4:f0:31:d5:20:3c:d2:6a:
30:cc:1f:be:24:d3:60:0f:95:59:8b:82:fa:88:bc:31:b3:34:
79:95:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:53 2026 by rpki-client