Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File:                     a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier:          isgSXdSb0aP/GwAsdOGYrxat9Pwi/OfyAHtQeqVaMtI=
Subject key identifier:   61:09:87:25:C1:1E:22:E8:59:3F:25:CB:36:4B:81:45:0E:C6:C8:D4
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer:       /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number:          3B
Signing time:             Sat 13 Jun 2026 08:12:11 +0000
Manifest this update:     Sat 13 Jun 2026 08:12:11 +0000
Manifest next update:     Sat 20 Jun 2026 08:12:11 +0000
Files and hashes:         1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: NiqPGPETiVT8dSLhMmMBOB5R+qZFT0mN35bQak9IsuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
        Validity
            Not Before: Jun 13 08:12:11 2026 GMT
            Not After : Jun 20 08:12:11 2026 GMT
        Subject: CN=6a2d10db-25b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:68:51:d0:59:d0:dc:39:1e:6a:c2:05:0f:
                    b5:77:fa:69:71:0a:62:63:12:8f:1f:07:db:4b:01:
                    d8:b7:ec:61:c6:53:4b:66:d7:12:7c:55:e2:ed:b7:
                    9c:b5:06:36:3f:5f:ca:2b:cb:76:e8:1e:37:de:a8:
                    13:28:ec:77:26:3f:ba:8c:c4:46:bb:92:49:17:10:
                    33:9b:c7:3a:43:05:47:71:a9:58:30:43:e4:0b:b2:
                    6d:0e:26:4a:ad:93:ac:69:12:e4:6f:2e:22:94:6a:
                    eb:b6:47:fc:cb:8f:02:cb:1e:4d:e5:b8:56:13:b6:
                    87:38:1e:0a:bb:04:0b:df:e4:37:ae:9a:57:1b:1c:
                    34:e3:6a:75:3a:f5:70:3a:99:bc:e8:a9:ae:b1:2a:
                    7d:9c:41:05:37:e1:bf:25:32:7f:04:9b:b7:42:3e:
                    78:7f:cf:fc:77:67:06:e5:7f:92:49:6a:03:1b:c0:
                    0d:e8:13:dd:ce:ea:a3:ac:c2:74:9b:24:b2:a0:54:
                    28:63:32:c9:bc:1b:6a:7b:d1:29:17:cf:73:6d:14:
                    a9:53:48:7a:f9:cc:f0:98:f8:ec:ae:fa:11:0a:a6:
                    8b:8e:9d:cd:1f:82:5d:75:ed:64:62:07:f1:16:fd:
                    7f:04:f6:80:53:4f:0a:c9:b7:8c:06:13:dc:e5:ed:
                    87:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:09:87:25:C1:1E:22:E8:59:3F:25:CB:36:4B:81:45:0E:C6:C8:D4
            X509v3 Authority Key Identifier:
                keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9e:f1:a7:d8:16:bd:61:50:23:e5:86:e9:b0:e2:c1:d4:77:
         16:30:7b:24:06:7b:ca:f6:92:0b:a0:45:67:0c:e4:f5:bc:e5:
         f2:48:fe:81:66:9a:e3:db:8c:80:06:50:48:d6:a5:54:ee:b7:
         0f:5c:32:30:dc:85:02:b0:e3:44:33:c2:0b:31:9a:60:b5:44:
         5c:80:c0:25:eb:69:ca:57:f9:f5:d2:ba:91:e7:bd:2a:b5:97:
         1b:a4:23:b6:ff:20:45:21:39:6c:51:a2:6c:6b:71:72:18:ab:
         68:1b:1a:33:dc:f3:8a:70:13:9d:59:ac:28:1d:cd:91:c1:6e:
         f4:99:8f:70:53:e1:b4:6b:5b:5d:c1:f5:c6:ac:08:63:7e:33:
         d6:9d:54:6a:6a:05:2c:9b:f2:37:7f:85:ee:4e:bf:79:6a:da:
         55:57:17:ed:0d:56:1b:c4:bc:6e:2b:88:bc:13:74:fe:4d:d6:
         6e:2d:72:28:9f:11:93:a3:7b:f4:e4:54:1d:9e:33:a5:f2:c8:
         5b:cb:c0:36:82:34:a8:a2:55:a5:0a:43:28:e4:b0:66:4c:4c:
         c3:d3:96:ad:fc:d7:ea:c0:b5:97:99:26:eb:7b:23:6b:32:61:
         91:c7:da:59:81:81:3b:d0:eb:e2:4b:7c:ec:14:8f:4f:b7:78:
         65:cd:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:44 2026 by rpki-client