
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier: C9thYxAJzaRe11T3n7iarwcEhZ5UNEE6YQeTFfiXLSI=
Subject key identifier: 2F:23:62:BA:95:3A:E6:6B:14:07:E4:DA:6C:F1:A6:C1:F8:06:40:2E
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial: 1DDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number: 1DCE
Signing time: Fri 12 Jun 2026 16:04:04 +0000
Manifest this update: Fri 12 Jun 2026 16:04:03 +0000
Manifest next update: Fri 19 Jun 2026 16:04:03 +0000
Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: th6RFBFlONqz0UaDfu/xBAATwxGeE64uXTZIqaWZJPc=)
2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7644 (0x1ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Validity
Not Before: Jun 12 16:04:03 2026 GMT
Not After : Jun 19 16:04:03 2026 GMT
Subject: CN=6a2c2df4-a645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:e6:17:d4:32:e2:84:ca:d1:5e:d3:e9:3c:
55:fa:bc:ff:c8:93:b5:b8:db:f8:56:d2:82:b9:de:
81:3e:0a:a6:ad:c1:3f:ee:ae:52:05:83:43:0d:69:
0c:43:7c:f7:dd:ab:8e:7a:ff:74:bf:e2:b1:f5:21:
bf:c3:b3:33:de:bd:c2:b8:93:46:97:90:36:e4:f1:
82:4a:78:5a:f6:30:69:a4:84:c4:79:1f:99:a9:40:
84:fc:69:57:d1:bf:bc:81:b8:a3:86:8e:0d:15:c3:
e4:f9:da:d1:ff:e8:7e:ec:eb:16:4d:2c:b3:9d:24:
9b:5c:19:6e:36:70:9f:89:90:ca:4d:db:2a:ab:c4:
81:51:18:cf:30:c7:43:cc:75:7f:38:d0:59:29:72:
37:31:0f:2a:1b:0a:87:04:1e:64:88:07:2d:9e:83:
d0:ee:18:26:f9:63:10:62:44:93:5a:06:1d:f0:91:
71:3c:ee:8b:b5:bc:12:b2:55:1f:25:7c:d1:c2:b3:
e6:64:db:89:80:9b:28:a3:55:11:54:72:1f:af:b4:
e3:08:a0:b8:74:74:89:e4:67:19:6f:42:7b:e6:20:
43:b3:29:88:39:22:3d:23:01:35:f1:b7:cf:0e:c0:
9e:0e:2b:23:22:3f:7f:65:53:86:4f:25:71:79:ae:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:23:62:BA:95:3A:E6:6B:14:07:E4:DA:6C:F1:A6:C1:F8:06:40:2E
X509v3 Authority Key Identifier:
keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8e:f0:a4:39:48:ec:7a:78:a3:06:20:6f:e3:96:5e:94:6e:
69:98:06:ed:bc:be:43:9a:9a:cd:6d:6c:b1:3e:7c:e8:44:53:
0c:be:dc:44:57:b8:a4:ba:46:09:5e:c7:9f:c6:7f:b3:e8:78:
8d:ac:bc:1e:b2:76:ab:b6:81:25:b4:f0:7c:d9:c4:e2:1c:95:
d9:c2:13:6b:58:18:4e:42:1c:33:ba:01:ac:ba:56:f0:9c:5e:
26:e1:48:cf:a2:93:92:b7:e4:f7:76:9a:21:28:9c:31:9e:ec:
71:8b:a5:e4:39:7c:b7:62:48:3e:67:e0:8f:aa:10:28:09:01:
da:54:cf:f5:5c:ad:3c:40:11:1b:c7:63:c3:d7:67:37:85:6e:
ee:95:d7:a8:b6:78:21:03:4e:bb:9b:4e:98:4e:cf:db:1a:5e:
1c:cb:69:52:df:65:eb:e5:2b:94:84:39:e5:72:63:d6:b0:7d:
25:94:6d:ca:dd:16:ac:2c:b6:f1:ff:1d:e2:97:6e:ec:ee:b4:
16:d1:3b:83:b2:b5:f7:3a:0c:84:1c:a3:28:b0:9c:a3:21:7c:
f6:20:58:68:3f:01:c8:9a:0a:25:cd:1a:42:96:54:3f:35:70:
fb:40:e1:08:d2:2a:d7:e4:ce:83:68:80:89:18:d4:79:77:11:
43:6c:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:31 2026 by rpki-client