Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
File:                     a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json)
Hash identifier:          fPYtGd5nuYtltCWrpqQn4xgUtiPzrmEaVFnskE9IOPw=
Subject key identifier:   F5:68:D5:F8:9A:07:14:E9:1C:A2:57:FD:AA:6C:EE:A6:5C:E2:9F:12
Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9
Certificate issuer:       /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
Manifest number:          4F
Signing time:             Thu 23 Jul 2026 09:50:00 +0000
Manifest this update:     Thu 23 Jul 2026 09:50:00 +0000
Manifest next update:     Thu 30 Jul 2026 09:50:00 +0000
Files and hashes:         1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: scfCqb6pcVb0ZU2LhP3FE2DuJ4fb9rrzhOKpNbFesdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9
        Validity
            Not Before: Jul 23 09:50:00 2026 GMT
            Not After : Jul 30 09:50:00 2026 GMT
        Subject: CN=6a61e3c8-9d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:c4:9e:90:73:a9:d1:47:19:1a:8d:3a:70:
                    b2:e4:ad:c6:56:93:79:87:c1:eb:17:b8:dd:1c:cd:
                    4c:d0:f2:c8:dd:c0:8f:27:05:a1:9f:a1:b0:70:3a:
                    0b:86:44:d1:b3:a8:db:28:48:9f:ff:33:68:ec:b9:
                    6e:d0:57:ad:b9:18:82:c4:ae:54:81:8d:1e:7a:a4:
                    68:4e:a3:b6:13:76:a9:00:d7:77:52:f8:1f:3f:e1:
                    04:c6:db:14:6a:69:b5:42:6c:32:ec:8e:e6:94:bb:
                    26:32:7a:88:8c:8f:97:c5:60:72:99:d6:3f:47:7c:
                    1f:ac:21:04:bc:19:0b:e9:9e:3e:e3:db:80:03:1f:
                    d9:b8:5d:7a:49:9f:c9:ce:c3:70:14:ac:d9:ca:5c:
                    61:f1:7d:e1:6e:30:dd:44:0f:cf:41:94:0d:40:a2:
                    48:29:3f:a8:c2:e6:9a:a3:ac:81:af:9b:ca:cd:f8:
                    ed:11:6f:3e:08:2e:b6:75:6a:7d:6f:22:3b:60:49:
                    bd:f1:52:a1:e1:67:38:44:07:80:0a:d8:e3:02:cb:
                    24:90:c6:9f:bb:ba:cb:ff:76:af:52:3b:89:f4:5a:
                    cd:5c:7b:82:c4:04:57:8d:3e:c9:4e:71:54:60:66:
                    7b:ac:bf:c7:76:34:8b:68:63:78:79:2d:f0:bc:e5:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:68:D5:F8:9A:07:14:E9:1C:A2:57:FD:AA:6C:EE:A6:5C:E2:9F:12
            X509v3 Authority Key Identifier:
                keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:2a:e5:d3:55:3c:8c:dc:fc:bc:ee:02:3c:bc:07:1a:d0:
         94:24:f6:a5:84:39:7a:88:2d:ff:93:7f:13:c4:6a:fc:95:ce:
         45:ff:bc:bd:b1:61:a5:a6:75:c2:3d:da:2f:4f:4c:73:d6:36:
         b8:14:24:cd:14:9f:2e:ef:a1:c7:46:99:77:fb:5f:19:83:42:
         db:90:b6:ec:95:89:8a:2c:80:41:1b:db:0b:04:fc:2d:d2:91:
         d3:a4:31:c4:c2:d0:b0:21:a4:51:6d:35:04:8a:35:8c:aa:5b:
         4c:1c:3b:6b:14:62:e1:19:0d:2a:63:af:bc:4a:61:51:c3:fb:
         a5:ee:37:2e:40:2e:75:bb:af:42:81:a5:38:89:56:b2:3e:c8:
         b7:58:72:15:a4:ba:4c:5a:74:eb:c0:cc:ff:01:8b:42:c0:a0:
         17:13:7c:19:50:02:19:12:c8:26:6f:ed:a8:e6:1c:41:12:93:
         2f:5c:f2:ee:28:ac:c7:0f:c0:6f:df:41:bc:9f:87:d6:e4:11:
         14:7f:c1:ba:ba:99:9d:86:e4:f5:fb:c8:b9:3c:4b:13:cf:38:
         af:36:a0:f2:2f:3a:7e:1f:87:8b:1e:0b:ea:30:a6:59:a5:c0:
         b6:8c:6a:fa:b6:b8:ab:d3:a1:77:38:a6:60:f1:d8:02:30:2c:
         e4:9a:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:03 2026 by rpki-client