
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier: fPYtGd5nuYtltCWrpqQn4xgUtiPzrmEaVFnskE9IOPw=
Subject key identifier: F5:68:D5:F8:9A:07:14:E9:1C:A2:57:FD:AA:6C:EE:A6:5C:E2:9F:12
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number: 4F
Signing time: Thu 23 Jul 2026 09:50:00 +0000
Manifest this update: Thu 23 Jul 2026 09:50:00 +0000
Manifest next update: Thu 30 Jul 2026 09:50:00 +0000
Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: scfCqb6pcVb0ZU2LhP3FE2DuJ4fb9rrzhOKpNbFesdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Validity
Not Before: Jul 23 09:50:00 2026 GMT
Not After : Jul 30 09:50:00 2026 GMT
Subject: CN=6a61e3c8-9d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:c4:9e:90:73:a9:d1:47:19:1a:8d:3a:70:
b2:e4:ad:c6:56:93:79:87:c1:eb:17:b8:dd:1c:cd:
4c:d0:f2:c8:dd:c0:8f:27:05:a1:9f:a1:b0:70:3a:
0b:86:44:d1:b3:a8:db:28:48:9f:ff:33:68:ec:b9:
6e:d0:57:ad:b9:18:82:c4:ae:54:81:8d:1e:7a:a4:
68:4e:a3:b6:13:76:a9:00:d7:77:52:f8:1f:3f:e1:
04:c6:db:14:6a:69:b5:42:6c:32:ec:8e:e6:94:bb:
26:32:7a:88:8c:8f:97:c5:60:72:99:d6:3f:47:7c:
1f:ac:21:04:bc:19:0b:e9:9e:3e:e3:db:80:03:1f:
d9:b8:5d:7a:49:9f:c9:ce:c3:70:14:ac:d9:ca:5c:
61:f1:7d:e1:6e:30:dd:44:0f:cf:41:94:0d:40:a2:
48:29:3f:a8:c2:e6:9a:a3:ac:81:af:9b:ca:cd:f8:
ed:11:6f:3e:08:2e:b6:75:6a:7d:6f:22:3b:60:49:
bd:f1:52:a1:e1:67:38:44:07:80:0a:d8:e3:02:cb:
24:90:c6:9f:bb:ba:cb:ff:76:af:52:3b:89:f4:5a:
cd:5c:7b:82:c4:04:57:8d:3e:c9:4e:71:54:60:66:
7b:ac:bf:c7:76:34:8b:68:63:78:79:2d:f0:bc:e5:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:D5:F8:9A:07:14:E9:1C:A2:57:FD:AA:6C:EE:A6:5C:E2:9F:12
X509v3 Authority Key Identifier:
keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f6:2a:e5:d3:55:3c:8c:dc:fc:bc:ee:02:3c:bc:07:1a:d0:
94:24:f6:a5:84:39:7a:88:2d:ff:93:7f:13:c4:6a:fc:95:ce:
45:ff:bc:bd:b1:61:a5:a6:75:c2:3d:da:2f:4f:4c:73:d6:36:
b8:14:24:cd:14:9f:2e:ef:a1:c7:46:99:77:fb:5f:19:83:42:
db:90:b6:ec:95:89:8a:2c:80:41:1b:db:0b:04:fc:2d:d2:91:
d3:a4:31:c4:c2:d0:b0:21:a4:51:6d:35:04:8a:35:8c:aa:5b:
4c:1c:3b:6b:14:62:e1:19:0d:2a:63:af:bc:4a:61:51:c3:fb:
a5:ee:37:2e:40:2e:75:bb:af:42:81:a5:38:89:56:b2:3e:c8:
b7:58:72:15:a4:ba:4c:5a:74:eb:c0:cc:ff:01:8b:42:c0:a0:
17:13:7c:19:50:02:19:12:c8:26:6f:ed:a8:e6:1c:41:12:93:
2f:5c:f2:ee:28:ac:c7:0f:c0:6f:df:41:bc:9f:87:d6:e4:11:
14:7f:c1:ba:ba:99:9d:86:e4:f5:fb:c8:b9:3c:4b:13:cf:38:
af:36:a0:f2:2f:3a:7e:1f:87:8b:1e:0b:ea:30:a6:59:a5:c0:
b6:8c:6a:fa:b6:b8:ab:d3:a1:77:38:a6:60:f1:d8:02:30:2c:
e4:9a:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:03 2026 by rpki-client