Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
File:                     3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json)
Hash identifier:          eo4TO2kZDX8KplijMvZ/zlYiTzztaoSDELE0ZL45h8M=
Subject key identifier:   3E:F3:BE:07:83:14:BD:EB:16:3C:5E:94:6F:35:B5:E5:57:B7:1B:BD
Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
Certificate issuer:       /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
Manifest number:          0140
Signing time:             Wed 19 Aug 2026 06:06:33 +0000
Manifest this update:     Wed 19 Aug 2026 06:06:32 +0000
Manifest next update:     Wed 26 Aug 2026 06:06:32 +0000
Files and hashes:         1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: JMmNgY67BgFiyplWqgeXEZkonuElX22Qa4VmrRppiVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
                          rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
        Validity
            Not Before: Aug 19 06:06:32 2026 GMT
            Not After : Aug 26 06:06:32 2026 GMT
        Subject: CN=6a8547e9-646c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:fc:cb:8b:f5:b2:9c:1d:28:d8:ce:1d:99:
                    d0:ea:55:53:d9:89:7c:2d:3f:fc:8b:74:43:ac:74:
                    57:13:34:a2:91:55:4d:57:59:d1:27:54:0e:29:59:
                    26:c9:20:76:7b:3d:4d:09:c2:0b:96:54:a0:8c:25:
                    bc:71:80:fd:e6:72:45:93:db:0a:6a:61:47:11:25:
                    0d:3c:11:d3:5e:92:6a:e2:db:76:29:a2:ed:62:eb:
                    ae:7f:e5:77:ce:62:e0:5e:45:ae:cb:9e:94:f3:33:
                    a0:91:cf:a6:c2:ab:86:77:65:92:38:c8:b3:e7:6c:
                    05:66:70:a6:55:8c:c0:bc:00:79:1e:b8:5b:db:f0:
                    72:a2:21:86:8f:f8:9a:ae:5d:e2:83:ad:a9:6d:4a:
                    9a:9e:62:6a:d4:62:f3:6f:31:06:e4:9b:73:ef:c9:
                    d1:da:b6:40:6a:7e:af:b0:75:58:55:18:00:b9:3b:
                    94:70:92:62:cd:0e:b9:ed:ed:de:f5:6e:4d:7e:b7:
                    a7:6f:7c:b0:20:6f:0e:c8:6a:67:62:79:19:db:6a:
                    10:3e:b5:5b:eb:88:35:02:10:17:f7:e9:f8:17:76:
                    65:ac:fb:be:eb:ce:f4:e8:c8:60:f4:2a:8b:cb:90:
                    1e:7c:53:ee:85:98:73:92:c7:0e:3d:c6:0c:84:bf:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F3:BE:07:83:14:BD:EB:16:3C:5E:94:6F:35:B5:E5:57:B7:1B:BD
            X509v3 Authority Key Identifier:
                keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:45:b0:cc:0c:95:c9:cf:db:4e:dc:de:0a:20:b3:d9:ff:
         c0:6f:8d:e4:50:85:5f:76:fc:2b:57:d6:a0:e7:de:2d:fe:ff:
         a7:84:1e:16:47:2e:ad:62:77:c6:d2:cd:67:79:80:c4:ab:5f:
         42:7c:ca:0c:3d:11:c7:02:e9:d5:73:c2:87:0d:a6:95:4e:48:
         3c:5f:c7:7e:0e:0c:71:4a:b6:a2:27:cb:35:80:ca:d9:ab:09:
         b1:20:9a:55:22:31:90:2e:a9:c6:58:a5:bf:29:e1:12:2e:87:
         d8:a2:20:68:15:ae:55:5a:57:5a:40:d3:ff:db:e7:70:5c:27:
         5f:c8:b8:55:92:46:61:4c:1b:65:5b:44:bf:e3:1d:47:40:bc:
         cf:1b:5e:52:35:ea:39:0c:c5:1c:45:d1:ed:9b:35:69:64:6e:
         a4:b7:29:d9:fd:26:03:48:7c:6d:e7:6a:d7:b8:d4:f2:54:28:
         09:c7:aa:92:0d:5e:0f:10:21:85:17:8f:d5:31:53:e0:6e:99:
         45:75:b6:39:71:5e:7b:10:bc:84:29:d8:de:c5:ca:29:15:32:
         92:a3:de:bf:d5:24:01:fe:a7:02:3f:eb:2a:08:e0:81:ea:ba:
         b2:b2:c8:11:63:27:a4:5c:d4:c1:b2:b4:03:72:ae:d6:15:fb:
         59:9f:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:54 2026 by rpki-client