Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File:                     a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier:          lqBT+/R5fr5AaocnPcIY2f/81MyR1fqUQMl6RA+A9Y4=
Subject key identifier:   17:E4:11:9C:07:9B:05:FB:BD:D6:31:7C:9C:A9:54:E3:0D:C5:CC:AF
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer:       /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number:          0A
Signing time:             Sat 07 Mar 2026 07:57:14 +0000
Manifest this update:     Sat 07 Mar 2026 07:57:14 +0000
Manifest next update:     Sat 14 Mar 2026 07:57:14 +0000
Files and hashes:         1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: IMClDfV8dXdOxwxjF9irYwPONIxQuqgcs8/3J+FxyRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
        Validity
            Not Before: Mar  7 07:57:14 2026 GMT
            Not After : Mar 14 07:57:14 2026 GMT
        Subject: CN=69abda5a-b9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:af:45:85:76:15:4f:dc:88:d2:0f:0d:a2:
                    4b:c8:82:13:40:67:dc:c6:6e:6c:3f:2d:03:df:ae:
                    c7:6b:13:c5:34:df:dc:3b:4c:eb:70:a2:59:7c:56:
                    37:51:40:01:c0:5c:6e:e1:43:4f:d8:8f:c1:9d:69:
                    ff:8b:81:41:c3:ec:14:62:26:a8:a9:6f:9a:ce:94:
                    e7:a5:8c:d2:48:51:77:9e:aa:fb:74:fe:75:97:86:
                    b6:fe:66:ea:1f:c4:53:07:6f:fd:7f:8a:07:02:e8:
                    d1:b4:ae:65:05:83:dd:49:c7:57:ff:f9:90:93:1e:
                    77:6b:3c:0c:c3:b1:f6:c6:7f:83:92:22:2d:35:76:
                    24:b1:b6:40:7c:59:f7:13:49:68:6d:71:25:5a:e2:
                    f5:f1:c5:ca:6e:7f:47:ff:12:51:d5:aa:8b:ad:eb:
                    3f:e6:d8:3f:98:35:fe:be:ee:b0:51:fe:35:eb:a6:
                    c5:2d:3e:1c:15:c8:37:46:b8:07:48:c0:99:fa:1e:
                    ca:92:cc:b8:f2:64:dd:b5:39:7c:3a:ed:3e:5b:14:
                    ec:96:6c:2b:44:53:fc:cd:9d:ae:bf:14:07:77:8d:
                    c0:51:2b:80:6d:b7:8f:3a:f9:d1:55:b1:2d:d7:9d:
                    df:07:43:67:03:ef:ef:89:4e:27:4e:92:90:3b:d3:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E4:11:9C:07:9B:05:FB:BD:D6:31:7C:9C:A9:54:E3:0D:C5:CC:AF
            X509v3 Authority Key Identifier:
                keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:eb:ee:21:2e:ee:51:54:ab:52:ae:43:2c:98:f7:57:2f:
         a6:07:25:f6:3d:ba:d7:c7:9d:21:69:60:fa:54:be:85:bb:29:
         0c:43:3f:1a:be:9e:03:9f:0f:ea:4f:bb:d2:10:c6:e6:14:c1:
         5b:b2:63:5a:d6:7b:47:12:c0:b9:bc:cf:46:97:15:bf:70:e9:
         6e:87:42:3e:65:83:c0:48:74:71:a1:a7:a1:d4:c8:7f:b5:f4:
         5e:17:7c:3a:37:42:b9:c2:7c:81:b4:cd:f8:ad:68:9b:0a:9a:
         e0:ff:77:92:e4:2b:5e:ef:f6:6c:8c:84:65:44:ad:67:04:b9:
         e0:e3:dd:87:a0:b4:13:5b:f0:3d:2b:c5:39:be:f0:08:c1:78:
         8e:de:74:5f:c9:a1:9f:6f:29:c4:29:7d:3e:d9:b8:dd:4a:14:
         30:23:2d:cf:f4:5f:20:fc:93:09:de:9c:11:97:ff:1c:9e:d1:
         a8:39:d5:f5:09:2f:e2:1f:50:6e:06:80:ae:7b:12:b9:35:a6:
         b9:21:98:ab:47:1f:71:71:f4:75:22:6d:85:4a:ae:80:c5:7d:
         dc:b5:80:c9:aa:ec:19:b5:e8:d6:78:ae:37:17:8a:84:44:d9:
         05:d6:72:ef:71:0f:fa:e6:61:ca:84:7f:6d:06:a8:36:18:a6:
         83:6b:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:33:18 2026 by rpki-client