
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier: isgSXdSb0aP/GwAsdOGYrxat9Pwi/OfyAHtQeqVaMtI=
Subject key identifier: 61:09:87:25:C1:1E:22:E8:59:3F:25:CB:36:4B:81:45:0E:C6:C8:D4
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number: 3B
Signing time: Sat 13 Jun 2026 08:12:11 +0000
Manifest this update: Sat 13 Jun 2026 08:12:11 +0000
Manifest next update: Sat 20 Jun 2026 08:12:11 +0000
Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: NiqPGPETiVT8dSLhMmMBOB5R+qZFT0mN35bQak9IsuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Validity
Not Before: Jun 13 08:12:11 2026 GMT
Not After : Jun 20 08:12:11 2026 GMT
Subject: CN=6a2d10db-25b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:68:51:d0:59:d0:dc:39:1e:6a:c2:05:0f:
b5:77:fa:69:71:0a:62:63:12:8f:1f:07:db:4b:01:
d8:b7:ec:61:c6:53:4b:66:d7:12:7c:55:e2:ed:b7:
9c:b5:06:36:3f:5f:ca:2b:cb:76:e8:1e:37:de:a8:
13:28:ec:77:26:3f:ba:8c:c4:46:bb:92:49:17:10:
33:9b:c7:3a:43:05:47:71:a9:58:30:43:e4:0b:b2:
6d:0e:26:4a:ad:93:ac:69:12:e4:6f:2e:22:94:6a:
eb:b6:47:fc:cb:8f:02:cb:1e:4d:e5:b8:56:13:b6:
87:38:1e:0a:bb:04:0b:df:e4:37:ae:9a:57:1b:1c:
34:e3:6a:75:3a:f5:70:3a:99:bc:e8:a9:ae:b1:2a:
7d:9c:41:05:37:e1:bf:25:32:7f:04:9b:b7:42:3e:
78:7f:cf:fc:77:67:06:e5:7f:92:49:6a:03:1b:c0:
0d:e8:13:dd:ce:ea:a3:ac:c2:74:9b:24:b2:a0:54:
28:63:32:c9:bc:1b:6a:7b:d1:29:17:cf:73:6d:14:
a9:53:48:7a:f9:cc:f0:98:f8:ec:ae:fa:11:0a:a6:
8b:8e:9d:cd:1f:82:5d:75:ed:64:62:07:f1:16:fd:
7f:04:f6:80:53:4f:0a:c9:b7:8c:06:13:dc:e5:ed:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:87:25:C1:1E:22:E8:59:3F:25:CB:36:4B:81:45:0E:C6:C8:D4
X509v3 Authority Key Identifier:
keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9e:f1:a7:d8:16:bd:61:50:23:e5:86:e9:b0:e2:c1:d4:77:
16:30:7b:24:06:7b:ca:f6:92:0b:a0:45:67:0c:e4:f5:bc:e5:
f2:48:fe:81:66:9a:e3:db:8c:80:06:50:48:d6:a5:54:ee:b7:
0f:5c:32:30:dc:85:02:b0:e3:44:33:c2:0b:31:9a:60:b5:44:
5c:80:c0:25:eb:69:ca:57:f9:f5:d2:ba:91:e7:bd:2a:b5:97:
1b:a4:23:b6:ff:20:45:21:39:6c:51:a2:6c:6b:71:72:18:ab:
68:1b:1a:33:dc:f3:8a:70:13:9d:59:ac:28:1d:cd:91:c1:6e:
f4:99:8f:70:53:e1:b4:6b:5b:5d:c1:f5:c6:ac:08:63:7e:33:
d6:9d:54:6a:6a:05:2c:9b:f2:37:7f:85:ee:4e:bf:79:6a:da:
55:57:17:ed:0d:56:1b:c4:bc:6e:2b:88:bc:13:74:fe:4d:d6:
6e:2d:72:28:9f:11:93:a3:7b:f4:e4:54:1d:9e:33:a5:f2:c8:
5b:cb:c0:36:82:34:a8:a2:55:a5:0a:43:28:e4:b0:66:4c:4c:
c3:d3:96:ad:fc:d7:ea:c0:b5:97:99:26:eb:7b:23:6b:32:61:
91:c7:da:59:81:81:3b:d0:eb:e2:4b:7c:ec:14:8f:4f:b7:78:
65:cd:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:44 2026 by rpki-client