Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File:                     a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier:          0vFDyrKrOKJxKBMgRuicOxNxCiESz4bQQaLQWYuw50M=
Subject key identifier:   61:AA:58:44:C0:B1:54:C1:E9:FA:3B:4C:E2:CE:39:9C:E1:06:64:C8
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer:       /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number:          13
Signing time:             Wed 25 Mar 2026 07:48:47 +0000
Manifest this update:     Wed 25 Mar 2026 07:48:47 +0000
Manifest next update:     Wed 01 Apr 2026 07:48:47 +0000
Files and hashes:         1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: d7yTtsHEHVE0FuMxcb6hr0964Nv84Pfxz12ixRrx9e8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
        Validity
            Not Before: Mar 25 07:48:47 2026 GMT
            Not After : Apr  1 07:48:47 2026 GMT
        Subject: CN=69c3935f-bdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:bc:01:ad:82:66:9a:ca:2d:ea:77:71:18:
                    1e:28:1c:b1:ef:54:ca:14:78:b2:af:a3:49:52:49:
                    11:ea:01:91:92:60:c8:86:d9:9f:9d:60:84:16:23:
                    ab:32:4c:99:7d:55:d8:42:0d:a2:6c:0d:a8:ff:0b:
                    c6:49:ad:16:30:55:df:3e:4e:56:53:02:b8:78:bc:
                    09:ed:71:e9:48:73:49:46:07:d0:5f:2d:af:13:4d:
                    d6:b0:5c:38:c9:85:4e:12:e9:ff:c3:47:b6:52:f6:
                    ee:70:b5:b2:3e:cb:18:d0:9d:ab:34:05:3e:17:54:
                    6e:41:05:67:f9:47:f8:df:10:8c:16:ae:1c:ee:05:
                    ae:30:e4:46:29:aa:4b:72:af:33:3b:4c:88:9e:b8:
                    6c:33:31:a3:2e:fd:16:bb:6d:26:9f:8c:e2:01:88:
                    a2:d0:07:0f:2c:a7:95:d1:a4:26:53:fe:58:99:d8:
                    99:1f:38:20:17:2d:a9:28:67:ca:32:5b:46:00:23:
                    54:9f:86:b5:68:f3:1e:95:3c:f7:cd:59:34:cf:f4:
                    0f:fe:26:ce:f2:6f:e0:59:66:b0:91:86:72:22:82:
                    34:92:52:38:90:36:dc:6c:80:6f:98:30:00:a9:34:
                    cd:17:8b:44:df:d9:fe:a3:7c:7c:a3:eb:f4:3d:7d:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:58:44:C0:B1:54:C1:E9:FA:3B:4C:E2:CE:39:9C:E1:06:64:C8
            X509v3 Authority Key Identifier:
                keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:be:39:cc:e9:0b:7f:9b:0a:d5:f1:94:85:e2:b2:7a:7c:6e:
         8d:71:5a:a0:85:37:f0:26:85:87:46:6c:94:9f:24:73:4d:88:
         82:8a:36:10:cb:04:61:c9:f1:ad:f0:c8:2a:df:de:f7:ec:e3:
         23:63:09:70:d3:45:d9:9b:10:00:68:25:4d:68:6b:e9:5a:11:
         d7:7e:12:83:4d:72:51:da:b6:99:2d:c5:f1:df:51:ba:89:02:
         22:32:bc:b8:72:e5:62:a5:1a:87:7b:e3:12:fb:56:24:3e:55:
         6f:e9:7c:8a:96:2b:d1:56:0f:30:54:ca:05:c6:f1:fe:59:d0:
         44:c8:a1:8b:81:8a:d3:30:84:b3:22:46:a4:84:de:19:c4:23:
         38:a3:4c:85:2f:28:e6:31:4a:ed:b8:a4:3b:3f:94:24:84:3d:
         31:cc:c8:f0:24:4b:63:3a:4e:2f:39:79:28:a5:99:41:09:90:
         2d:e6:98:1f:77:b5:1e:04:d7:fb:dd:39:bf:7b:7b:7d:cf:20:
         5f:b2:14:0c:a9:a7:fb:2e:67:99:b2:5a:de:b4:03:a6:52:60:
         73:56:c2:31:bc:ae:7b:3a:3f:c5:d1:7f:54:67:af:c3:76:27:
         36:6a:e5:e2:aa:45:3f:8a:10:54:2c:b4:2a:70:75:fc:02:da:
         06:94:c4:ce
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QjFDMjExMC8GA1UEBRMoNkI3RkM1RTVCM0JGMUFCQTVBRTI1REEzOEY1NEI5NkNF
NjI1N0RCOTAeFw0yNjAzMjUwNzQ4NDdaFw0yNjA0MDEwNzQ4NDdaMBgxFjAUBgNV
BAMTDTY5YzM5MzVmLWJkY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmf7wBrYJmmsot6ndxGB4oHLHvVMoUeLKvo0lSSRHqAZGSYMiG2Z+dYIQWI6sy
TJl9VdhCDaJsDaj/C8ZJrRYwVd8+TlZTArh4vAntcelIc0lGB9BfLa8TTdawXDjJ
hU4S6f/DR7ZS9u5wtbI+yxjQnas0BT4XVG5BBWf5R/jfEIwWrhzuBa4w5EYpqkty
rzM7TIieuGwzMaMu/Ra7bSafjOIBiKLQBw8sp5XRpCZT/liZ2JkfOCAXLakoZ8oy
W0YAI1SfhrVo8x6VPPfNWTTP9A/+Js7yb+BZZrCRhnIigjSSUjiQNtxsgG+YMACp
NM0Xi0Tf2f6jfHyj6/Q9fSZJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYapYRMCx
VMHp+jtM4s45nOEGZMgwHwYDVR0jBBgwFoAUa3/F5bO/Grpa4l2jj1S5bOYlfbkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzQ4NTAzMkUyMEQ2
MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3JwYTRsMmpqMVM1Yk9ZbGZi
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvYTNfRjViT19HcnBhNGwyamoxUzViT1lsZmJrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC
MUMyLzQ4NTAzMkUyMEQ2MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3Jw
YTRsMmpqMVM1Yk9ZbGZiay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBhvjnM6Qt/mwrV8ZSF4rJ6fG6NcVqghTfwJoWHRmyUnyRzTYiCijYQywRhyfGt
8Mgq39737OMjYwlw00XZmxAAaCVNaGvpWhHXfhKDTXJR2raZLcXx31G6iQIiMry4
cuVipRqHe+MS+1YkPlVv6XyKlivRVg8wVMoFxvH+WdBEyKGLgYrTMISzIkakhN4Z
xCM4o0yFLyjmMUrtuKQ7P5QkhD0xzMjwJEtjOk4vOXkopZlBCZAt5pgfd7UeBNf7
3Tm/e3t9zyBfshQMqaf7LmeZslretAOmUmBzVsIxvK57Oj/F0X9UZ6/Ddic2auXi
qkU/ihBULLQqcHX8AtoGlMTO
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:49 2026 by rpki-client