$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json) Hash identifier: mgS0ge2sOOmAZYl8X+80XfwqTCiyWaMjoaIubD+8wGY= Subject key identifier: F5:5C:DD:39:40:7F:F2:E2:E1:F1:C8:A4:B7:A5:81:88:F5:3B:77:F7 Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9 Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft Manifest number: 6F Signing time: Wed 23 Sep 2026 07:15:47 +0000 Manifest this update: Wed 23 Sep 2026 07:15:46 +0000 Manifest next update: Wed 30 Sep 2026 07:15:46 +0000 Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: xK8nFGdbqDvS8aa6SVWAMeeiKQjo9PWb8Lg2ZSHq1+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9 Validity Not Before: Sep 23 07:15:46 2026 GMT Not After : Sep 30 07:15:46 2026 GMT Subject: CN=6ab37ca3-5664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:53:94:12:f2:af:cf:cb:4f:af:12:f0:d3: f2:e8:a8:08:bf:96:ee:3b:c5:08:17:6e:64:ab:e3: 6b:f2:87:de:26:9d:98:ba:44:0c:8a:ab:6a:cc:e0: 27:1c:bf:03:1a:65:9a:a7:89:76:32:95:a3:1c:ec: 57:34:ea:9b:bc:61:f9:30:ba:09:6d:a5:20:13:84: c8:f2:f2:bc:1d:bf:d9:86:57:b1:0c:7d:f4:4f:12: bf:c2:f1:d9:27:d8:c4:84:e6:a3:0b:c3:11:98:eb: 5a:60:f9:9f:be:12:8a:9e:1b:15:13:6a:a4:0b:38: 93:73:b9:59:f2:9a:0c:4e:85:62:d7:fc:27:51:b5: 06:f2:3a:05:63:10:eb:b8:39:e1:69:e9:ce:61:06: f4:9f:eb:ce:05:2b:9b:6b:1d:19:9b:3c:b0:6f:09: b8:35:30:21:b1:b8:4f:91:16:ca:44:8d:2f:0f:87: 14:0f:b8:38:59:7a:39:0a:d4:3b:c0:34:07:03:3b: 6e:b6:19:85:04:45:31:53:ac:79:b0:ee:94:54:d6: be:49:7f:9b:48:0d:26:7c:f2:a4:97:bf:e9:76:0b: 56:f0:76:8d:81:80:61:57:3e:28:f6:b8:30:40:a7: 22:32:03:88:54:6f:51:58:13:b7:8a:c3:72:69:c5: fb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5C:DD:39:40:7F:F2:E2:E1:F1:C8:A4:B7:A5:81:88:F5:3B:77:F7 X509v3 Authority Key Identifier: keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:51:4a:97:a9:5c:63:52:7a:3c:70:69:b2:2a:ff:2f:b7:bc: 0f:ff:09:78:d5:1a:20:20:b0:53:04:74:06:96:a0:56:fd:cd: b4:d9:66:5d:c3:7f:26:05:80:61:7d:0b:11:0a:1f:64:7a:bc: 8f:c5:f1:60:74:c9:a0:0b:d9:eb:da:26:7a:a1:e5:e1:ec:c1: 6f:a8:ff:c7:24:04:df:a0:8d:fe:6b:30:8e:b3:ff:88:85:d2: 95:82:a3:86:bd:2f:2c:b8:7f:52:5e:42:c3:a7:d1:8b:80:40: aa:3a:e2:1f:0d:3c:79:4e:b0:a7:f9:3e:d7:03:3d:a0:69:bd: be:7b:97:3b:c5:e6:06:31:0c:de:59:ed:ba:72:b3:0e:df:2f: 89:0d:5c:43:5c:83:f7:1e:88:8e:84:49:7b:87:78:43:35:fb: ab:e9:86:53:f5:3b:93:cf:12:ff:b2:79:aa:e3:8a:e4:1a:45: be:e0:a3:44:6c:e3:3c:ec:fd:00:c4:9b:14:0f:70:f5:0a:da: be:73:9a:c1:b7:da:26:b6:8f:7c:d0:11:eb:a0:f1:99:51:68: 70:de:5f:bc:bb:31:5a:07:bd:03:15:98:ef:f1:3b:3e:e6:7c: 30:0c:05:04:c4:3c:3f:42:0d:78:35:e6:c9:d1:66:af:ee:0e: 75:f6:43:6a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoNkI3RkM1RTVCM0JGMUFCQTVBRTI1REEzOEY1NEI5NkNF NjI1N0RCOTAeFw0yNjA5MjMwNzE1NDZaFw0yNjA5MzAwNzE1NDZaMBgxFjAUBgNV BAMTDTZhYjM3Y2EzLTU2NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH21OUEvKvz8tPrxLw0/LoqAi/lu47xQgXbmSr42vyh94mnZi6RAyKq2rM4Ccc vwMaZZqniXYylaMc7Fc06pu8YfkwugltpSAThMjy8rwdv9mGV7EMffRPEr/C8dkn 2MSE5qMLwxGY61pg+Z++EoqeGxUTaqQLOJNzuVnymgxOhWLX/CdRtQbyOgVjEOu4 OeFp6c5hBvSf684FK5trHRmbPLBvCbg1MCGxuE+RFspEjS8PhxQPuDhZejkK1DvA NAcDO262GYUERTFTrHmw7pRU1r5Jf5tIDSZ88qSXv+l2C1bwdo2BgGFXPij2uDBA pyIyA4hUb1FYE7eKw3JpxfsfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9VzdOUB/ 8uLh8cikt6WBiPU7d/cwHwYDVR0jBBgwFoAUa3/F5bO/Grpa4l2jj1S5bOYlfbkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzQ4NTAzMkUyMEQ2 MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3JwYTRsMmpqMVM1Yk9ZbGZi ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYTNfRjViT19HcnBhNGwyamoxUzViT1lsZmJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzQ4NTAzMkUyMEQ2MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3Jw YTRsMmpqMVM1Yk9ZbGZiay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3UUqXqVxjUno8cGmyKv8vt7wP/wl41RogILBTBHQGlqBW/c202WZdw38mBYBh fQsRCh9keryPxfFgdMmgC9nr2iZ6oeXh7MFvqP/HJATfoI3+azCOs/+IhdKVgqOG vS8suH9SXkLDp9GLgECqOuIfDTx5TrCn+T7XAz2gab2+e5c7xeYGMQzeWe26crMO 3y+JDVxDXIP3HoiOhEl7h3hDNfur6YZT9TuTzxL/snmq44rkGkW+4KNEbOM87P0A xJsUD3D1Ctq+c5rBt9omto980BHroPGZUWhw3l+8uzFaB70DFZjv8Ts+5nwwDAUE xDw/Qg14NebJ0Wav7g519kNq -----END CERTIFICATE-----Generated at Wed Sep 23 20:19:37 2026 by rpki-client