Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File:                     a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier:          ZZkUEUNz2w27Vkdf7/sSJH70JPF2z3ERxo84ut6vMVU=
Subject key identifier:   2B:70:F2:11:BD:EC:F2:ED:D5:0B:E8:5E:97:CB:AB:69:F8:70:1D:B0
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer:       /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number:          89
Signing time:             Fri 13 Nov 2026 07:23:41 +0000
Manifest this update:     Fri 13 Nov 2026 07:23:41 +0000
Manifest next update:     Fri 20 Nov 2026 07:23:41 +0000
Files and hashes:         1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: GjlW+R6hxtAQtY1VIb5hCTZ3RXkfZSJff9LCtX11g5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 07:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
        Validity
            Not Before: Nov 13 07:23:41 2026 GMT
            Not After : Nov 20 07:23:41 2026 GMT
        Subject: CN=6af6bafd-21ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:07:83:31:8c:b3:10:ad:b7:91:01:89:21:
                    b6:b4:e6:05:26:2b:46:32:46:42:c6:0e:90:66:17:
                    93:c0:9c:19:fd:b7:94:66:ef:53:10:d4:c3:f2:17:
                    5b:78:ec:db:52:ef:d9:92:60:fe:26:57:e7:56:b8:
                    f1:58:94:be:e8:f3:52:c3:2b:69:00:de:ce:2c:29:
                    87:37:11:0d:bb:31:c1:e4:5f:e2:7d:8c:a3:0f:d5:
                    6f:c3:5e:bf:1a:a3:3b:1f:7a:6f:df:f9:5a:9d:26:
                    38:b4:ce:8c:c0:5d:32:39:66:da:7f:f4:09:e1:a9:
                    21:58:e0:d1:4f:b5:ee:b8:57:89:34:66:0d:65:fd:
                    75:95:c5:25:97:06:fd:85:fc:15:e0:e7:95:dd:a1:
                    c4:57:23:0f:af:19:62:12:fa:20:0d:91:8c:f1:60:
                    7d:df:a4:a8:b3:77:2c:17:a2:4b:a1:2e:a6:e4:29:
                    9b:61:27:65:fa:e7:e7:16:a7:93:c2:84:10:30:12:
                    2e:20:ce:87:09:b8:4d:3e:08:d1:9c:47:36:91:54:
                    ae:fb:d4:25:45:a3:19:c5:85:7a:30:39:8f:15:c2:
                    01:2c:7e:49:53:6a:15:43:23:53:52:23:9e:e3:e1:
                    1f:29:41:d1:c7:82:46:19:9c:c3:42:c9:01:0f:03:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:70:F2:11:BD:EC:F2:ED:D5:0B:E8:5E:97:CB:AB:69:F8:70:1D:B0
            X509v3 Authority Key Identifier:
                keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4d:ca:2c:71:62:19:1f:21:c5:1c:75:6e:e1:8a:75:2a:b7:
         11:8a:11:96:80:95:6b:a8:95:77:56:70:83:91:1c:c2:1b:09:
         f0:23:f8:04:28:e7:f6:56:fb:09:d6:fe:ac:d5:1e:b3:a6:c1:
         28:49:1b:0e:8e:51:1d:a9:c2:e4:c5:53:92:9c:f1:5a:ad:83:
         36:d9:7b:39:90:cf:df:75:00:1e:e7:30:bd:99:13:a8:4b:50:
         a8:f4:b2:4e:a0:d3:86:6d:12:34:3a:44:dc:72:41:9a:7c:c2:
         a6:94:94:e9:7e:cf:5b:06:81:38:6b:87:ab:44:89:78:5a:c8:
         aa:98:e0:f0:80:d3:86:2a:73:fc:d3:29:4a:70:3c:12:22:ec:
         be:ff:cb:ca:85:63:66:ca:ba:0d:2b:9d:ed:40:35:c9:2b:e3:
         8f:0f:0d:cd:75:8c:b6:7f:ce:d4:16:9c:dc:a5:0b:ef:6d:0a:
         8b:93:f4:10:f9:01:91:c1:0b:56:83:f5:9c:2b:f9:cc:da:60:
         1d:3a:da:b8:6b:4b:e4:7e:b4:98:5b:3f:6d:3e:d8:50:41:12:
         76:3d:52:b5:51:08:fd:ed:24:8a:ec:66:8e:90:95:47:f2:4b:
         15:71:c1:1f:24:4b:5e:5a:58:53:34:77:ef:2c:cd:be:89:17:
         87:c4:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:43:32 2026 by rpki-client