
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier: Lzu8VTDOXzxNI2HqNNvSE31YMghTxPBSr/HoyR+NxpU=
Subject key identifier: 24:16:38:F2:E2:B4:32:4E:72:E4:67:FA:79:7C:8F:CF:4F:B4:BE:CA
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number: 37
Signing time: Fri 05 Jun 2026 08:34:57 +0000
Manifest this update: Fri 05 Jun 2026 08:34:57 +0000
Manifest next update: Fri 12 Jun 2026 08:34:57 +0000
Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: gnYfAqfs81WIfXCUcYzXlOJwwz8S/vPgKzVrAGF10Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Validity
Not Before: Jun 5 08:34:57 2026 GMT
Not After : Jun 12 08:34:57 2026 GMT
Subject: CN=6a228a31-7640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:9c:fb:70:ae:5d:18:1f:2a:85:59:96:d0:
73:11:5f:b8:92:4d:1f:7a:6f:2b:07:77:4e:af:fa:
6f:80:1a:96:f8:27:ea:c9:40:a3:04:d5:4b:19:72:
c1:d7:5b:3b:6c:4e:a4:b4:46:68:d1:db:9f:6a:01:
4b:8e:4c:bd:72:83:19:e7:71:55:d8:6d:2c:1e:3c:
60:90:de:09:67:19:60:4e:dd:09:2d:03:16:9f:a8:
da:41:49:9f:fa:4c:12:7e:ea:a7:78:db:cc:91:25:
b4:59:ec:8f:b9:ca:5c:36:ba:c7:14:c4:7a:90:39:
e7:4c:ec:08:7e:a0:f9:b8:5c:48:3b:0d:f6:ac:6a:
44:b8:43:e2:89:b9:d8:b0:6e:a0:33:ec:a3:8f:c6:
37:2e:c8:01:00:0e:3f:07:f5:59:b7:ef:53:5c:c6:
f6:4f:53:61:52:c2:00:d7:76:ba:b0:fb:b3:86:41:
8f:ab:90:55:d0:75:ca:88:51:fd:8d:10:dc:bd:48:
bd:c6:73:6a:55:b3:21:c8:a3:20:12:b2:b8:20:c9:
d4:00:c2:9f:23:7a:f2:1d:2d:62:76:7a:68:7f:55:
2c:9e:d9:89:36:25:6b:7a:f1:05:26:75:a6:fa:62:
cc:5c:51:07:01:a6:77:ce:3b:b9:f4:f8:0f:f0:f0:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:16:38:F2:E2:B4:32:4E:72:E4:67:FA:79:7C:8F:CF:4F:B4:BE:CA
X509v3 Authority Key Identifier:
keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:46:dd:93:4f:78:fd:e7:53:5b:5e:73:9b:28:7b:8e:01:
ec:f1:66:45:ae:8a:7b:dc:06:78:06:f3:61:53:43:be:42:56:
a3:1a:c3:73:0a:9d:b9:97:23:b6:c3:47:d2:1a:15:c9:32:8a:
ae:79:f7:9e:a3:17:13:b1:aa:82:31:05:53:56:36:9b:30:cb:
52:68:ef:58:75:fa:23:6c:08:03:1c:86:4d:22:4f:1c:48:c5:
23:09:c9:b6:de:47:a4:d9:46:ea:88:b4:82:e1:b8:a7:6a:14:
b4:3b:c7:ff:cd:71:1f:f2:2d:9a:96:47:46:7a:72:10:4e:bb:
57:61:9a:a2:1f:c0:b4:8e:c4:5b:8a:88:b7:5e:14:57:6c:31:
3a:41:5d:7a:2f:d2:19:8d:c6:83:05:c9:a2:89:fb:c7:1a:92:
5f:75:ee:77:68:df:07:b5:93:04:d0:43:da:ca:48:01:88:87:
b5:57:fc:0c:8b:f7:9c:d6:b1:29:ad:02:7b:54:6a:d0:76:a3:
fb:cf:b1:53:55:25:f3:ca:a0:50:7a:23:24:69:22:eb:95:72:
09:ee:8a:0e:21:b5:52:0c:a1:e0:09:ad:fd:99:d2:55:19:62:
61:c5:50:62:94:8b:8c:71:17:ae:91:0a:2c:18:67:cf:c0:33:
d5:f0:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:49 2026 by rpki-client