
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier: BQmItBY7QkWSbsKpDjkbfx+fU0rEGJkS64HnbV9Jdg8=
Subject key identifier: D8:90:1C:92:67:79:86:3B:08:5B:C4:98:C9:04:DA:3B:6A:81:D7:2E
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number: 81
Signing time: Thu 29 Oct 2026 08:01:53 +0000
Manifest this update: Thu 29 Oct 2026 08:01:52 +0000
Manifest next update: Thu 05 Nov 2026 08:01:52 +0000
Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: DYG5OXrjGKqqesHF2V3zCAHiZ6OJVeEFpTmd9WL/J8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Validity
Not Before: Oct 29 08:01:52 2026 GMT
Not After : Nov 5 08:01:52 2026 GMT
Subject: CN=6ae2fd71-e2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:e3:66:50:01:f5:9f:b9:d7:90:15:b9:af:
21:ab:31:7f:cf:ad:f2:b6:44:39:69:d6:c4:e5:f2:
b6:f5:4c:8b:1f:0b:32:b3:f5:a9:9f:75:de:bf:2b:
36:ad:d6:89:11:66:74:5c:a4:0a:b2:d5:ca:b8:86:
4a:ec:aa:18:d7:0d:8f:56:2b:85:f2:f8:a8:69:4f:
ac:4c:31:bd:b2:fe:fd:3d:30:4c:82:13:c4:50:a1:
cf:eb:12:2f:28:09:a1:b8:e7:43:f5:1c:84:1e:83:
de:4d:70:61:e6:a9:0e:2b:6c:23:2e:6d:48:bc:fb:
92:b4:d4:48:cd:c9:1e:d1:44:f1:2c:ee:98:82:d1:
48:e2:9d:98:dc:aa:be:2b:e7:f3:48:cc:d9:10:f8:
83:73:19:67:be:06:0a:5a:a5:21:4a:c4:60:b6:92:
5c:7d:a5:73:4e:89:e8:3d:67:4d:60:ef:37:55:aa:
ba:e3:1a:b5:23:d8:be:63:9a:ae:fd:18:7d:6a:e8:
7a:a1:e7:86:49:7b:48:6c:cb:43:0e:1f:6f:7e:df:
89:4d:ed:66:0f:19:f2:9a:bf:6c:2f:ff:81:db:6c:
66:16:37:18:e8:29:80:f4:67:c9:bb:0f:de:2e:86:
cc:cc:ee:f4:5a:56:98:58:f4:5c:ba:c9:5d:fa:01:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:1C:92:67:79:86:3B:08:5B:C4:98:C9:04:DA:3B:6A:81:D7:2E
X509v3 Authority Key Identifier:
keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:c6:f1:1a:92:78:ec:a0:0b:55:26:1a:65:56:5f:ef:f9:1f:
d6:a1:f0:05:9d:cd:39:97:1c:9f:58:af:39:ee:95:53:15:33:
13:e6:98:f5:55:2e:99:c9:5b:9e:a8:e8:c8:91:2a:99:6d:08:
c7:12:2d:50:f4:fc:b1:49:89:65:4a:a0:6f:ae:6c:40:a6:5c:
45:ad:df:be:29:73:ae:2a:eb:f8:3c:3a:fb:2c:f6:4c:ad:4c:
24:21:7d:fd:18:8c:34:6b:f0:1e:0b:d6:fc:e6:6c:1e:4b:73:
96:2e:92:7e:fe:ab:c3:df:de:a7:b3:c0:65:4c:a2:43:7a:58:
25:aa:2e:c2:80:46:cd:73:50:3d:75:1a:7a:68:fb:8d:55:b7:
cb:88:db:dc:58:92:c4:2f:8f:56:45:e4:c6:86:de:3d:45:eb:
67:95:54:4d:ca:0e:bd:a6:ee:c2:f3:16:87:79:db:69:15:e0:
c2:7a:e7:89:c7:79:03:f8:a2:d8:30:43:74:b5:5d:bc:c8:b9:
1e:c6:e9:b0:d0:7b:62:7e:08:fa:46:ea:5f:a2:b8:9d:b8:1d:
27:16:ae:69:ad:e8:bf:49:ba:8b:e2:4a:0c:27:49:f1:92:66:
c1:bc:08:45:d6:bf:76:7d:38:ab:b0:20:08:2e:1b:12:4f:55:
bd:0b:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:44:03 2026 by rpki-client