Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File:                     a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier:          OV6E6TAivZWop9S0td9eQF4f0emuKIICPKv2U8p1cVs=
Subject key identifier:   48:BB:99:29:32:ED:FC:32:3B:CB:8D:1F:3A:EF:75:0F:64:C2:82:F4
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer:       /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number:          65
Signing time:             Thu 03 Sep 2026 07:51:20 +0000
Manifest this update:     Thu 03 Sep 2026 07:51:19 +0000
Manifest next update:     Thu 10 Sep 2026 07:51:19 +0000
Files and hashes:         1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: hbUj+/8sYvjYAXk519BhYxn3cfjWMZROSCbxBQP1gcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
        Validity
            Not Before: Sep  3 07:51:19 2026 GMT
            Not After : Sep 10 07:51:19 2026 GMT
        Subject: CN=6a9926f8-945c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:3e:c1:f6:82:9f:a5:7d:c5:73:02:5f:5a:
                    bc:b3:5f:93:a0:06:8e:ae:93:88:2e:16:47:58:6a:
                    ef:10:e2:40:d0:57:0e:d8:da:d8:39:0d:2f:94:9a:
                    ac:84:0a:60:75:14:cc:b1:c3:0f:19:34:12:fd:f9:
                    73:59:6d:84:62:8d:bf:52:c6:08:ff:4f:86:d4:f6:
                    22:73:49:10:da:2f:3d:9c:d2:66:94:d1:f1:3f:43:
                    f8:54:11:61:16:0e:3e:76:6b:0e:9e:25:a5:7f:4a:
                    62:dc:44:ad:0d:6b:98:78:c1:67:ac:13:47:aa:55:
                    3c:98:ba:3b:6d:e3:70:cd:66:60:d9:ce:94:53:7e:
                    d0:3a:02:3e:55:5e:09:d0:6b:a1:5a:ff:9d:6a:b6:
                    eb:9b:fa:1c:87:51:1e:62:38:5a:08:b3:5a:60:98:
                    c7:7a:c9:79:1d:e6:c9:3e:b9:64:35:08:b2:f2:a1:
                    81:09:7e:cc:b8:f1:40:a3:fa:f2:1d:f1:70:2f:41:
                    e7:06:e7:d4:8a:3d:23:9f:5b:c1:d9:8e:eb:7b:6e:
                    00:4c:5e:70:55:ba:7e:54:8a:4a:71:27:61:a3:82:
                    3e:05:09:68:f0:e9:6e:41:c3:3b:91:45:0c:30:69:
                    36:50:98:f4:97:01:76:5e:03:4c:e4:87:c3:76:b3:
                    00:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:99:29:32:ED:FC:32:3B:CB:8D:1F:3A:EF:75:0F:64:C2:82:F4
            X509v3 Authority Key Identifier:
                keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:92:0c:5f:47:ff:f7:27:3a:02:6f:4f:3d:52:08:4c:98:
         b6:21:75:16:85:47:80:66:65:d2:45:2f:27:39:25:cd:eb:21:
         b5:5d:b1:94:c1:98:d4:f1:ff:ca:62:0f:9d:4d:07:eb:5c:ee:
         7e:6b:85:04:7c:96:36:da:20:ff:d8:c2:0f:d8:3a:0a:0c:24:
         55:c2:3a:b9:e4:49:b5:0a:cc:4f:01:85:2e:34:2e:4b:3e:40:
         50:ca:74:0e:dd:af:78:12:c6:6c:7e:99:e8:1e:f2:a1:ca:e8:
         fc:87:3e:4a:fa:32:05:d5:ac:06:89:af:16:ff:9e:aa:b1:73:
         09:6d:2f:65:0f:ca:bc:f8:24:65:ec:12:d2:71:e9:96:8b:9d:
         36:da:26:05:ca:bc:c7:a8:f3:22:9a:27:04:af:f6:fb:ef:46:
         6d:92:90:12:2a:2a:86:4e:ff:78:34:63:b2:c4:76:b0:90:77:
         71:7a:25:17:27:b7:c9:9c:36:79:35:9b:a7:70:80:e2:7b:90:
         3c:e6:2d:d7:0f:60:c9:c8:2f:82:f6:e4:1d:3e:7b:24:3d:bf:
         5b:c0:6f:03:2e:ae:b8:fe:ba:38:3f:a3:a5:5b:34:e7:52:e4:
         c0:9e:d4:ca:f7:89:7d:c5:7b:9d:a3:16:b0:59:00:ab:0c:4b:
         00:0d:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:22:08 2026 by rpki-client