
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier: OV6E6TAivZWop9S0td9eQF4f0emuKIICPKv2U8p1cVs=
Subject key identifier: 48:BB:99:29:32:ED:FC:32:3B:CB:8D:1F:3A:EF:75:0F:64:C2:82:F4
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number: 65
Signing time: Thu 03 Sep 2026 07:51:20 +0000
Manifest this update: Thu 03 Sep 2026 07:51:19 +0000
Manifest next update: Thu 10 Sep 2026 07:51:19 +0000
Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: hbUj+/8sYvjYAXk519BhYxn3cfjWMZROSCbxBQP1gcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Validity
Not Before: Sep 3 07:51:19 2026 GMT
Not After : Sep 10 07:51:19 2026 GMT
Subject: CN=6a9926f8-945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:3e:c1:f6:82:9f:a5:7d:c5:73:02:5f:5a:
bc:b3:5f:93:a0:06:8e:ae:93:88:2e:16:47:58:6a:
ef:10:e2:40:d0:57:0e:d8:da:d8:39:0d:2f:94:9a:
ac:84:0a:60:75:14:cc:b1:c3:0f:19:34:12:fd:f9:
73:59:6d:84:62:8d:bf:52:c6:08:ff:4f:86:d4:f6:
22:73:49:10:da:2f:3d:9c:d2:66:94:d1:f1:3f:43:
f8:54:11:61:16:0e:3e:76:6b:0e:9e:25:a5:7f:4a:
62:dc:44:ad:0d:6b:98:78:c1:67:ac:13:47:aa:55:
3c:98:ba:3b:6d:e3:70:cd:66:60:d9:ce:94:53:7e:
d0:3a:02:3e:55:5e:09:d0:6b:a1:5a:ff:9d:6a:b6:
eb:9b:fa:1c:87:51:1e:62:38:5a:08:b3:5a:60:98:
c7:7a:c9:79:1d:e6:c9:3e:b9:64:35:08:b2:f2:a1:
81:09:7e:cc:b8:f1:40:a3:fa:f2:1d:f1:70:2f:41:
e7:06:e7:d4:8a:3d:23:9f:5b:c1:d9:8e:eb:7b:6e:
00:4c:5e:70:55:ba:7e:54:8a:4a:71:27:61:a3:82:
3e:05:09:68:f0:e9:6e:41:c3:3b:91:45:0c:30:69:
36:50:98:f4:97:01:76:5e:03:4c:e4:87:c3:76:b3:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:99:29:32:ED:FC:32:3B:CB:8D:1F:3A:EF:75:0F:64:C2:82:F4
X509v3 Authority Key Identifier:
keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:09:92:0c:5f:47:ff:f7:27:3a:02:6f:4f:3d:52:08:4c:98:
b6:21:75:16:85:47:80:66:65:d2:45:2f:27:39:25:cd:eb:21:
b5:5d:b1:94:c1:98:d4:f1:ff:ca:62:0f:9d:4d:07:eb:5c:ee:
7e:6b:85:04:7c:96:36:da:20:ff:d8:c2:0f:d8:3a:0a:0c:24:
55:c2:3a:b9:e4:49:b5:0a:cc:4f:01:85:2e:34:2e:4b:3e:40:
50:ca:74:0e:dd:af:78:12:c6:6c:7e:99:e8:1e:f2:a1:ca:e8:
fc:87:3e:4a:fa:32:05:d5:ac:06:89:af:16:ff:9e:aa:b1:73:
09:6d:2f:65:0f:ca:bc:f8:24:65:ec:12:d2:71:e9:96:8b:9d:
36:da:26:05:ca:bc:c7:a8:f3:22:9a:27:04:af:f6:fb:ef:46:
6d:92:90:12:2a:2a:86:4e:ff:78:34:63:b2:c4:76:b0:90:77:
71:7a:25:17:27:b7:c9:9c:36:79:35:9b:a7:70:80:e2:7b:90:
3c:e6:2d:d7:0f:60:c9:c8:2f:82:f6:e4:1d:3e:7b:24:3d:bf:
5b:c0:6f:03:2e:ae:b8:fe:ba:38:3f:a3:a5:5b:34:e7:52:e4:
c0:9e:d4:ca:f7:89:7d:c5:7b:9d:a3:16:b0:59:00:ab:0c:4b:
00:0d:ad:59
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QjFDMjExMC8GA1UEBRMoNkI3RkM1RTVCM0JGMUFCQTVBRTI1REEzOEY1NEI5NkNF
NjI1N0RCOTAeFw0yNjA5MDMwNzUxMTlaFw0yNjA5MTAwNzUxMTlaMBgxFjAUBgNV
BAMTDTZhOTkyNmY4LTk0NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiSj7B9oKfpX3FcwJfWryzX5OgBo6uk4guFkdYau8Q4kDQVw7Y2tg5DS+UmqyE
CmB1FMyxww8ZNBL9+XNZbYRijb9Sxgj/T4bU9iJzSRDaLz2c0maU0fE/Q/hUEWEW
Dj52aw6eJaV/SmLcRK0Na5h4wWesE0eqVTyYujtt43DNZmDZzpRTftA6Aj5VXgnQ
a6Fa/51qtuub+hyHUR5iOFoIs1pgmMd6yXkd5sk+uWQ1CLLyoYEJfsy48UCj+vId
8XAvQecG59SKPSOfW8HZjut7bgBMXnBVun5UikpxJ2Gjgj4FCWjw6W5BwzuRRQww
aTZQmPSXAXZeA0zkh8N2swD5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSLuZKTLt
/DI7y40fOu91D2TCgvQwHwYDVR0jBBgwFoAUa3/F5bO/Grpa4l2jj1S5bOYlfbkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzQ4NTAzMkUyMEQ2
MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3JwYTRsMmpqMVM1Yk9ZbGZi
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvYTNfRjViT19HcnBhNGwyamoxUzViT1lsZmJrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC
MUMyLzQ4NTAzMkUyMEQ2MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3Jw
YTRsMmpqMVM1Yk9ZbGZiay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCcCZIMX0f/9yc6Am9PPVIITJi2IXUWhUeAZmXSRS8nOSXN6yG1XbGUwZjU8f/K
Yg+dTQfrXO5+a4UEfJY22iD/2MIP2DoKDCRVwjq55Em1CsxPAYUuNC5LPkBQynQO
3a94EsZsfpnoHvKhyuj8hz5K+jIF1awGia8W/56qsXMJbS9lD8q8+CRl7BLScemW
i5022iYFyrzHqPMimicEr/b770ZtkpASKiqGTv94NGOyxHawkHdxeiUXJ7fJnDZ5
NZuncIDie5A85i3XD2DJyC+C9uQdPnskPb9bwG8DLq64/ro4P6OlWzTnUuTAntTK
94l9xXudoxawWQCrDEsADa1Z
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:22:08 2026 by rpki-client