
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier: m3eHfKVSNam1eQHwXtFqQK/PrlLshO9G1j3MH/u/TDg=
Subject key identifier: 29:99:3B:34:62:C3:7A:45:9E:0B:B7:09:7E:74:BC:A8:C6:74:89:BA
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number: 07
Signing time: Sun 01 Mar 2026 10:14:45 +0000
Manifest this update: Sun 01 Mar 2026 10:14:44 +0000
Manifest next update: Sun 08 Mar 2026 10:14:44 +0000
Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: Gt8iNrW4gxvSfxc8s7BekuscpuE6pmMFVsM7wvrOMXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Validity
Not Before: Mar 1 10:14:44 2026 GMT
Not After : Mar 8 10:14:44 2026 GMT
Subject: CN=69a41195-c830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:c2:b6:fa:b0:d6:38:3b:2c:c9:0e:81:4d:
f9:45:44:0c:1f:66:9f:34:e9:ce:17:2f:dd:1a:79:
b8:83:75:34:86:02:d5:e1:f7:d7:b4:b9:32:56:3a:
d9:b1:8d:48:fe:48:a0:e5:6a:6b:bc:67:14:3b:a8:
45:5e:51:61:52:cc:be:60:a0:dc:19:a6:b5:13:28:
f4:e5:45:5f:03:e5:68:e4:97:12:06:b9:42:88:f7:
1a:a0:3a:34:d2:cc:75:3c:b4:73:f4:e4:73:84:4d:
70:26:9d:48:0b:5c:e7:20:17:53:97:f8:9e:1c:60:
b9:2c:39:0a:92:a3:c6:5a:d3:31:59:dc:63:2b:ce:
bf:9e:d7:d1:c4:55:15:97:8c:dc:4a:ef:13:65:bd:
fa:10:97:a8:c9:22:f4:e1:bf:93:c1:9d:5e:ab:62:
5d:3f:5a:d2:c2:9a:06:2e:3e:d3:28:4c:95:63:2a:
75:e0:96:82:38:e2:dc:f6:39:91:c4:c6:1b:63:ca:
0b:ad:90:8a:0a:c1:99:f6:69:e9:1d:d2:56:f5:12:
82:ad:3a:fc:d2:8f:73:f6:cb:9d:e2:0e:b3:bc:9a:
d3:c3:4d:60:ed:83:8e:c9:2d:a5:ff:2a:0a:35:87:
bc:40:24:51:ce:e5:d7:69:a2:a7:56:4b:12:7e:60:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:3B:34:62:C3:7A:45:9E:0B:B7:09:7E:74:BC:A8:C6:74:89:BA
X509v3 Authority Key Identifier:
keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:cf:b1:23:c7:23:2b:1f:73:7c:44:36:4f:9c:9e:b0:6f:95:
5c:93:99:4a:e0:16:06:ea:05:a0:16:7d:23:4f:ba:d4:c0:fe:
7d:3c:37:8a:f0:01:30:a5:fc:3e:1f:5e:29:d3:e9:2e:bd:72:
91:6d:a6:be:c5:e3:5b:22:12:26:2b:2d:35:09:13:45:b8:bb:
4f:cd:99:8a:21:42:34:32:18:a3:da:57:e0:c6:a6:e7:d7:f7:
9c:30:1c:69:20:17:6f:49:31:f0:af:7e:0f:9a:c6:b3:37:33:
27:fc:64:15:af:db:c9:52:6d:f9:a6:47:3f:89:ac:4d:6c:91:
4f:a0:39:c5:69:b0:1c:bc:db:44:61:4b:38:d8:1b:99:7d:6a:
64:b2:18:d1:be:66:f8:3c:d9:17:27:f4:f1:2a:9d:3d:34:db:
5a:7e:9b:e0:db:2d:87:b0:1f:42:76:0a:4a:19:58:d2:bc:b4:
bd:c7:e5:ef:d9:d3:3a:80:b9:d2:b1:88:55:eb:6a:16:78:b2:
0c:ac:76:4a:f5:2f:87:31:83:e7:3a:82:d8:71:a6:d9:35:06:
d7:72:d3:64:f2:b7:1a:79:17:73:4e:f0:16:1e:16:b8:aa:92:
76:db:87:23:d9:91:a2:0e:7e:8a:76:2e:8d:40:8a:c1:ae:a4:
05:ba:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:22 2026 by rpki-client