Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File:                     a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier:          m3eHfKVSNam1eQHwXtFqQK/PrlLshO9G1j3MH/u/TDg=
Subject key identifier:   29:99:3B:34:62:C3:7A:45:9E:0B:B7:09:7E:74:BC:A8:C6:74:89:BA
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer:       /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number:          07
Signing time:             Sun 01 Mar 2026 10:14:45 +0000
Manifest this update:     Sun 01 Mar 2026 10:14:44 +0000
Manifest next update:     Sun 08 Mar 2026 10:14:44 +0000
Files and hashes:         1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: Gt8iNrW4gxvSfxc8s7BekuscpuE6pmMFVsM7wvrOMXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
        Validity
            Not Before: Mar  1 10:14:44 2026 GMT
            Not After : Mar  8 10:14:44 2026 GMT
        Subject: CN=69a41195-c830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:c2:b6:fa:b0:d6:38:3b:2c:c9:0e:81:4d:
                    f9:45:44:0c:1f:66:9f:34:e9:ce:17:2f:dd:1a:79:
                    b8:83:75:34:86:02:d5:e1:f7:d7:b4:b9:32:56:3a:
                    d9:b1:8d:48:fe:48:a0:e5:6a:6b:bc:67:14:3b:a8:
                    45:5e:51:61:52:cc:be:60:a0:dc:19:a6:b5:13:28:
                    f4:e5:45:5f:03:e5:68:e4:97:12:06:b9:42:88:f7:
                    1a:a0:3a:34:d2:cc:75:3c:b4:73:f4:e4:73:84:4d:
                    70:26:9d:48:0b:5c:e7:20:17:53:97:f8:9e:1c:60:
                    b9:2c:39:0a:92:a3:c6:5a:d3:31:59:dc:63:2b:ce:
                    bf:9e:d7:d1:c4:55:15:97:8c:dc:4a:ef:13:65:bd:
                    fa:10:97:a8:c9:22:f4:e1:bf:93:c1:9d:5e:ab:62:
                    5d:3f:5a:d2:c2:9a:06:2e:3e:d3:28:4c:95:63:2a:
                    75:e0:96:82:38:e2:dc:f6:39:91:c4:c6:1b:63:ca:
                    0b:ad:90:8a:0a:c1:99:f6:69:e9:1d:d2:56:f5:12:
                    82:ad:3a:fc:d2:8f:73:f6:cb:9d:e2:0e:b3:bc:9a:
                    d3:c3:4d:60:ed:83:8e:c9:2d:a5:ff:2a:0a:35:87:
                    bc:40:24:51:ce:e5:d7:69:a2:a7:56:4b:12:7e:60:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:99:3B:34:62:C3:7A:45:9E:0B:B7:09:7E:74:BC:A8:C6:74:89:BA
            X509v3 Authority Key Identifier:
                keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:b1:23:c7:23:2b:1f:73:7c:44:36:4f:9c:9e:b0:6f:95:
         5c:93:99:4a:e0:16:06:ea:05:a0:16:7d:23:4f:ba:d4:c0:fe:
         7d:3c:37:8a:f0:01:30:a5:fc:3e:1f:5e:29:d3:e9:2e:bd:72:
         91:6d:a6:be:c5:e3:5b:22:12:26:2b:2d:35:09:13:45:b8:bb:
         4f:cd:99:8a:21:42:34:32:18:a3:da:57:e0:c6:a6:e7:d7:f7:
         9c:30:1c:69:20:17:6f:49:31:f0:af:7e:0f:9a:c6:b3:37:33:
         27:fc:64:15:af:db:c9:52:6d:f9:a6:47:3f:89:ac:4d:6c:91:
         4f:a0:39:c5:69:b0:1c:bc:db:44:61:4b:38:d8:1b:99:7d:6a:
         64:b2:18:d1:be:66:f8:3c:d9:17:27:f4:f1:2a:9d:3d:34:db:
         5a:7e:9b:e0:db:2d:87:b0:1f:42:76:0a:4a:19:58:d2:bc:b4:
         bd:c7:e5:ef:d9:d3:3a:80:b9:d2:b1:88:55:eb:6a:16:78:b2:
         0c:ac:76:4a:f5:2f:87:31:83:e7:3a:82:d8:71:a6:d9:35:06:
         d7:72:d3:64:f2:b7:1a:79:17:73:4e:f0:16:1e:16:b8:aa:92:
         76:db:87:23:d9:91:a2:0e:7e:8a:76:2e:8d:40:8a:c1:ae:a4:
         05:ba:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:22 2026 by rpki-client