Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File:                     a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier:          BQmItBY7QkWSbsKpDjkbfx+fU0rEGJkS64HnbV9Jdg8=
Subject key identifier:   D8:90:1C:92:67:79:86:3B:08:5B:C4:98:C9:04:DA:3B:6A:81:D7:2E
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer:       /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number:          81
Signing time:             Thu 29 Oct 2026 08:01:53 +0000
Manifest this update:     Thu 29 Oct 2026 08:01:52 +0000
Manifest next update:     Thu 05 Nov 2026 08:01:52 +0000
Files and hashes:         1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: DYG5OXrjGKqqesHF2V3zCAHiZ6OJVeEFpTmd9WL/J8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 08:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
        Validity
            Not Before: Oct 29 08:01:52 2026 GMT
            Not After : Nov  5 08:01:52 2026 GMT
        Subject: CN=6ae2fd71-e2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:e3:66:50:01:f5:9f:b9:d7:90:15:b9:af:
                    21:ab:31:7f:cf:ad:f2:b6:44:39:69:d6:c4:e5:f2:
                    b6:f5:4c:8b:1f:0b:32:b3:f5:a9:9f:75:de:bf:2b:
                    36:ad:d6:89:11:66:74:5c:a4:0a:b2:d5:ca:b8:86:
                    4a:ec:aa:18:d7:0d:8f:56:2b:85:f2:f8:a8:69:4f:
                    ac:4c:31:bd:b2:fe:fd:3d:30:4c:82:13:c4:50:a1:
                    cf:eb:12:2f:28:09:a1:b8:e7:43:f5:1c:84:1e:83:
                    de:4d:70:61:e6:a9:0e:2b:6c:23:2e:6d:48:bc:fb:
                    92:b4:d4:48:cd:c9:1e:d1:44:f1:2c:ee:98:82:d1:
                    48:e2:9d:98:dc:aa:be:2b:e7:f3:48:cc:d9:10:f8:
                    83:73:19:67:be:06:0a:5a:a5:21:4a:c4:60:b6:92:
                    5c:7d:a5:73:4e:89:e8:3d:67:4d:60:ef:37:55:aa:
                    ba:e3:1a:b5:23:d8:be:63:9a:ae:fd:18:7d:6a:e8:
                    7a:a1:e7:86:49:7b:48:6c:cb:43:0e:1f:6f:7e:df:
                    89:4d:ed:66:0f:19:f2:9a:bf:6c:2f:ff:81:db:6c:
                    66:16:37:18:e8:29:80:f4:67:c9:bb:0f:de:2e:86:
                    cc:cc:ee:f4:5a:56:98:58:f4:5c:ba:c9:5d:fa:01:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:1C:92:67:79:86:3B:08:5B:C4:98:C9:04:DA:3B:6A:81:D7:2E
            X509v3 Authority Key Identifier:
                keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c6:f1:1a:92:78:ec:a0:0b:55:26:1a:65:56:5f:ef:f9:1f:
         d6:a1:f0:05:9d:cd:39:97:1c:9f:58:af:39:ee:95:53:15:33:
         13:e6:98:f5:55:2e:99:c9:5b:9e:a8:e8:c8:91:2a:99:6d:08:
         c7:12:2d:50:f4:fc:b1:49:89:65:4a:a0:6f:ae:6c:40:a6:5c:
         45:ad:df:be:29:73:ae:2a:eb:f8:3c:3a:fb:2c:f6:4c:ad:4c:
         24:21:7d:fd:18:8c:34:6b:f0:1e:0b:d6:fc:e6:6c:1e:4b:73:
         96:2e:92:7e:fe:ab:c3:df:de:a7:b3:c0:65:4c:a2:43:7a:58:
         25:aa:2e:c2:80:46:cd:73:50:3d:75:1a:7a:68:fb:8d:55:b7:
         cb:88:db:dc:58:92:c4:2f:8f:56:45:e4:c6:86:de:3d:45:eb:
         67:95:54:4d:ca:0e:bd:a6:ee:c2:f3:16:87:79:db:69:15:e0:
         c2:7a:e7:89:c7:79:03:f8:a2:d8:30:43:74:b5:5d:bc:c8:b9:
         1e:c6:e9:b0:d0:7b:62:7e:08:fa:46:ea:5f:a2:b8:9d:b8:1d:
         27:16:ae:69:ad:e8:bf:49:ba:8b:e2:4a:0c:27:49:f1:92:66:
         c1:bc:08:45:d6:bf:76:7d:38:ab:b0:20:08:2e:1b:12:4f:55:
         bd:0b:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:44:03 2026 by rpki-client