Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
File:                     3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json)
Hash identifier:          ytDdx/M3Rsn0pSLztpAwcIC9H8gsY6Ent4sMvmNcJdA=
Subject key identifier:   21:62:C0:BC:44:1C:5E:0A:13:81:31:F6:48:79:82:4D:13:D2:61:B8
Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
Certificate issuer:       /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
Manifest number:          0168
Signing time:             Thu 05 Nov 2026 05:52:04 +0000
Manifest this update:     Thu 05 Nov 2026 05:52:03 +0000
Manifest next update:     Thu 12 Nov 2026 05:52:03 +0000
Files and hashes:         1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: bgpJnxXWK5q5xaVJpyxvrgbh/a0PfL7sMdiA+kbcxKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
                          rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 05:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
        Validity
            Not Before: Nov  5 05:52:03 2026 GMT
            Not After : Nov 12 05:52:03 2026 GMT
        Subject: CN=6aec1984-145e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:13:08:25:9a:05:de:27:8e:ce:aa:e3:93:f4:
                    6f:85:f1:72:35:f9:84:63:9b:16:42:6d:d0:cb:88:
                    a1:3e:17:5d:4a:81:1a:71:a2:56:50:c8:04:3f:6e:
                    42:43:ed:83:3d:80:ac:e6:e1:3f:4c:90:63:d7:bb:
                    82:45:a2:22:0f:92:11:d6:f4:98:5e:f5:86:89:3c:
                    35:8e:d3:ac:da:4c:f2:96:96:06:22:1a:3a:46:f8:
                    22:08:6e:94:c8:9b:fa:d3:13:f0:66:99:df:aa:f5:
                    a3:29:c7:fa:70:42:20:c4:e6:ac:38:60:9e:17:45:
                    89:7c:9a:ee:fa:2b:4b:ba:07:3f:e6:68:d6:cb:49:
                    27:54:4a:fa:16:74:8c:f5:02:46:94:6c:d5:58:e8:
                    36:d2:92:05:13:98:55:af:93:1b:4c:40:bc:41:61:
                    ad:7b:70:f8:38:47:66:6c:cf:8a:b3:21:d2:33:0f:
                    99:f3:b3:14:d6:20:3f:ec:d3:64:aa:33:d5:fe:ce:
                    d7:a6:7f:6e:e4:e3:ab:a5:12:38:3e:77:c9:8d:eb:
                    63:27:3c:f6:82:44:5d:a0:2e:38:45:2a:b9:c3:3a:
                    42:b2:f3:7b:bc:61:15:43:f9:9c:1b:e0:6b:9f:21:
                    d4:27:0e:4f:e5:42:09:13:5b:cc:40:f4:4e:21:31:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:62:C0:BC:44:1C:5E:0A:13:81:31:F6:48:79:82:4D:13:D2:61:B8
            X509v3 Authority Key Identifier:
                keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:c7:e3:c8:42:37:a8:63:5a:87:de:93:00:b1:8c:a7:91:
         1f:cd:8f:a8:67:8d:1a:38:dd:69:68:db:c2:4a:b6:e5:3e:3a:
         20:45:fa:8c:bf:05:16:47:25:73:82:56:11:ed:2b:4c:d6:d2:
         e9:69:df:bd:2d:47:37:97:7d:bc:68:66:95:f6:10:68:8b:40:
         16:b9:f2:ac:ff:17:1d:81:e4:ee:f6:82:42:fe:e0:a2:3e:26:
         59:17:ce:51:aa:19:b0:0e:ec:88:6b:f8:e5:b5:ef:4e:ba:72:
         7e:81:d4:0a:5f:16:22:0a:bd:1f:b2:29:f8:2b:21:0c:3a:06:
         8c:9f:bd:a5:71:81:49:7e:38:ae:36:23:ab:c7:24:99:03:fe:
         d5:aa:5a:bf:18:6b:a0:d5:07:46:09:38:c3:ad:fd:ad:24:b6:
         e4:ef:b0:38:60:f7:c7:a5:52:2d:f5:50:f0:68:87:35:90:4b:
         2e:33:16:95:c7:b7:77:96:f1:b1:72:bd:11:9e:5b:a6:07:bb:
         8b:11:3b:14:bf:ce:c1:a4:4e:eb:b4:0f:60:2b:b4:2e:4f:14:
         19:8b:27:3a:a0:7a:af:c6:a2:e2:8f:85:a8:d9:61:73:be:41:
         8a:5f:5f:88:69:50:a6:28:d6:2d:bb:c7:62:f8:b1:9d:51:76:
         ff:26:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:29:45 2026 by rpki-client