Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
File:                     3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json)
Hash identifier:          MrC1DSGeCQCQlMryhKZdm6ZZZ4XOlm4uKCaubu/2l+U=
Subject key identifier:   0E:4A:E1:39:98:06:DD:72:DC:26:32:64:D6:24:FB:D8:D0:CB:DE:B9
Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
Certificate issuer:       /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
Manifest number:          0113
Signing time:             Thu 21 May 2026 06:04:19 +0000
Manifest this update:     Thu 21 May 2026 06:04:19 +0000
Manifest next update:     Thu 28 May 2026 06:04:19 +0000
Files and hashes:         1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: t+ZNlCzlmikhy7Y9TX6P6CWzPx+IvDX22Rk6zShRNP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
                          rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
        Validity
            Not Before: May 21 06:04:19 2026 GMT
            Not After : May 28 06:04:19 2026 GMT
        Subject: CN=6a0ea063-e117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:f1:8e:a3:cd:6c:d1:fb:2f:01:c2:b8:4c:
                    4e:b6:89:21:3b:52:fc:88:fe:59:26:56:5c:c8:16:
                    48:69:89:b0:84:f1:2f:f8:a1:b8:02:c2:2e:de:8c:
                    f1:b7:79:73:fd:ab:da:f6:f3:c9:20:7d:b9:5f:c4:
                    35:5e:be:0d:93:0a:77:7e:29:ab:ff:b2:ef:04:69:
                    fb:a6:05:c0:5f:56:bb:a6:4d:c9:ff:3e:eb:de:6d:
                    a1:f8:c3:7f:92:03:08:48:b3:4b:cf:05:bb:fa:b9:
                    ec:9f:e2:e8:2d:54:2e:53:12:32:d0:01:bb:e3:73:
                    4d:d1:ca:85:ed:cd:ba:18:d9:16:59:c7:2e:77:91:
                    c9:e0:2d:c8:b7:1b:02:ce:f6:cf:29:e8:1d:46:d1:
                    56:16:ce:ef:10:c6:b7:38:88:1b:45:d3:2c:1d:3d:
                    52:8d:a5:b4:05:fb:8c:1b:f8:4c:b9:a6:4c:e2:18:
                    d6:26:10:26:ac:50:e2:6f:21:4a:68:3f:9c:75:3b:
                    56:92:93:2f:af:f9:73:c8:92:33:d2:8a:05:76:86:
                    10:e4:e3:e7:60:6f:2e:63:4f:20:28:e6:1b:33:8e:
                    d3:68:7c:d1:96:95:a7:46:01:cf:fb:aa:9b:16:fb:
                    db:03:b2:c7:1c:00:2a:70:9f:a0:3d:1e:ea:a7:cd:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4A:E1:39:98:06:DD:72:DC:26:32:64:D6:24:FB:D8:D0:CB:DE:B9
            X509v3 Authority Key Identifier:
                keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:29:db:32:10:98:8a:cf:70:bc:ed:a2:36:03:94:39:75:e8:
         5c:3d:06:b4:55:68:ca:2e:f6:33:d2:0e:bf:0c:c4:10:89:dc:
         f0:d8:38:81:e1:6f:dd:89:af:91:3c:74:91:ec:a5:a5:55:7f:
         44:d1:dd:c5:f7:0d:34:89:96:3c:b1:5a:98:c8:d0:05:d6:4e:
         ed:86:86:c4:67:c1:d1:7a:36:e1:85:49:31:d5:b5:33:77:f2:
         1e:ed:19:75:92:10:f2:78:12:18:c2:94:fb:b8:41:f2:ce:23:
         e0:bc:63:a7:95:de:6b:d1:27:b6:b2:4d:7e:3d:98:a1:b4:58:
         e4:fd:d1:56:d5:4b:89:cd:81:9e:0d:8c:c7:42:9b:a6:6d:21:
         a4:35:10:70:e1:f3:45:d5:31:6d:d2:f1:4a:51:23:fe:c0:8d:
         ab:dc:e0:19:79:49:5c:78:8b:c0:81:07:fa:03:61:0f:78:a7:
         ae:1e:2f:7d:67:35:2c:94:4b:57:cc:b0:e4:bf:4e:1d:33:22:
         75:40:6d:1f:dd:68:56:b6:15:2d:05:25:cd:b4:28:45:fb:95:
         19:c2:79:42:e8:07:d4:9e:25:5d:04:37:98:2b:35:d4:f6:e2:
         1e:b2:21:e5:07:b3:d7:e2:17:10:9b:e3:65:a6:56:a0:11:8a:
         dc:58:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:59 2026 by rpki-client