
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier: ZZkUEUNz2w27Vkdf7/sSJH70JPF2z3ERxo84ut6vMVU=
Subject key identifier: 2B:70:F2:11:BD:EC:F2:ED:D5:0B:E8:5E:97:CB:AB:69:F8:70:1D:B0
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number: 89
Signing time: Fri 13 Nov 2026 07:23:41 +0000
Manifest this update: Fri 13 Nov 2026 07:23:41 +0000
Manifest next update: Fri 20 Nov 2026 07:23:41 +0000
Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: GjlW+R6hxtAQtY1VIb5hCTZ3RXkfZSJff9LCtX11g5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 07:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Validity
Not Before: Nov 13 07:23:41 2026 GMT
Not After : Nov 20 07:23:41 2026 GMT
Subject: CN=6af6bafd-21ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:07:83:31:8c:b3:10:ad:b7:91:01:89:21:
b6:b4:e6:05:26:2b:46:32:46:42:c6:0e:90:66:17:
93:c0:9c:19:fd:b7:94:66:ef:53:10:d4:c3:f2:17:
5b:78:ec:db:52:ef:d9:92:60:fe:26:57:e7:56:b8:
f1:58:94:be:e8:f3:52:c3:2b:69:00:de:ce:2c:29:
87:37:11:0d:bb:31:c1:e4:5f:e2:7d:8c:a3:0f:d5:
6f:c3:5e:bf:1a:a3:3b:1f:7a:6f:df:f9:5a:9d:26:
38:b4:ce:8c:c0:5d:32:39:66:da:7f:f4:09:e1:a9:
21:58:e0:d1:4f:b5:ee:b8:57:89:34:66:0d:65:fd:
75:95:c5:25:97:06:fd:85:fc:15:e0:e7:95:dd:a1:
c4:57:23:0f:af:19:62:12:fa:20:0d:91:8c:f1:60:
7d:df:a4:a8:b3:77:2c:17:a2:4b:a1:2e:a6:e4:29:
9b:61:27:65:fa:e7:e7:16:a7:93:c2:84:10:30:12:
2e:20:ce:87:09:b8:4d:3e:08:d1:9c:47:36:91:54:
ae:fb:d4:25:45:a3:19:c5:85:7a:30:39:8f:15:c2:
01:2c:7e:49:53:6a:15:43:23:53:52:23:9e:e3:e1:
1f:29:41:d1:c7:82:46:19:9c:c3:42:c9:01:0f:03:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:F2:11:BD:EC:F2:ED:D5:0B:E8:5E:97:CB:AB:69:F8:70:1D:B0
X509v3 Authority Key Identifier:
keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4d:ca:2c:71:62:19:1f:21:c5:1c:75:6e:e1:8a:75:2a:b7:
11:8a:11:96:80:95:6b:a8:95:77:56:70:83:91:1c:c2:1b:09:
f0:23:f8:04:28:e7:f6:56:fb:09:d6:fe:ac:d5:1e:b3:a6:c1:
28:49:1b:0e:8e:51:1d:a9:c2:e4:c5:53:92:9c:f1:5a:ad:83:
36:d9:7b:39:90:cf:df:75:00:1e:e7:30:bd:99:13:a8:4b:50:
a8:f4:b2:4e:a0:d3:86:6d:12:34:3a:44:dc:72:41:9a:7c:c2:
a6:94:94:e9:7e:cf:5b:06:81:38:6b:87:ab:44:89:78:5a:c8:
aa:98:e0:f0:80:d3:86:2a:73:fc:d3:29:4a:70:3c:12:22:ec:
be:ff:cb:ca:85:63:66:ca:ba:0d:2b:9d:ed:40:35:c9:2b:e3:
8f:0f:0d:cd:75:8c:b6:7f:ce:d4:16:9c:dc:a5:0b:ef:6d:0a:
8b:93:f4:10:f9:01:91:c1:0b:56:83:f5:9c:2b:f9:cc:da:60:
1d:3a:da:b8:6b:4b:e4:7e:b4:98:5b:3f:6d:3e:d8:50:41:12:
76:3d:52:b5:51:08:fd:ed:24:8a:ec:66:8e:90:95:47:f2:4b:
15:71:c1:1f:24:4b:5e:5a:58:53:34:77:ef:2c:cd:be:89:17:
87:c4:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:43:32 2026 by rpki-client