Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
File:                     e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json)
Hash identifier:          fmQwc4y9TvmefWPlTiji5p1RUlBWIL+inn4Bb+P/VEk=
Subject key identifier:   6A:32:E6:4C:7B:CC:03:AE:84:06:2D:D1:C7:41:EC:C9:3B:5B:CB:7D
Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97
Certificate issuer:       /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
Certificate serial:       085C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
Manifest number:          0847
Signing time:             Wed 22 Jul 2026 21:39:36 +0000
Manifest this update:     Wed 22 Jul 2026 21:39:36 +0000
Manifest next update:     Wed 29 Jul 2026 21:39:36 +0000
Files and hashes:         1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: FBd+s0/q7kY4qvZpMoS7zjf+zbOcRq+4DxYoEx4GRQI=)
                          2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: tHvkos3LllK1/2w9x3zTBuzpUB/1BQzGW8FkmGduBgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl
                          rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
        Validity
            Not Before: Jul 22 21:39:36 2026 GMT
            Not After : Jul 29 21:39:36 2026 GMT
        Subject: CN=6a613898-3a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:8d:2d:4a:8c:5c:98:dc:50:8b:ef:82:88:
                    e2:9a:2e:b8:29:64:7c:88:3d:e7:e0:16:97:52:98:
                    e4:cd:41:01:25:d4:b3:76:4f:75:93:39:11:24:98:
                    d5:83:07:ce:90:58:7e:00:ad:43:32:96:fb:cf:83:
                    8a:60:18:00:b0:c3:b6:7c:d7:a9:75:84:cf:7f:56:
                    bf:36:bc:ac:c3:3a:60:58:9b:d7:e3:7d:9c:3d:2f:
                    e0:59:5d:65:8c:d7:33:3b:28:65:b5:5a:9c:47:e1:
                    f0:f9:53:c5:59:19:0a:3a:fa:ae:9d:fc:48:81:64:
                    ae:66:60:7e:c1:d9:d5:54:e2:77:5b:78:4e:04:8f:
                    ee:b5:f3:8f:db:e0:9c:44:65:57:92:cf:90:0f:69:
                    c7:fd:f4:db:c1:8a:77:8a:49:ff:b9:f0:9f:b8:85:
                    c4:6f:e7:4c:c1:74:57:2c:9e:37:7f:e7:a8:f5:d7:
                    0d:cb:cb:72:81:01:40:2e:d2:b8:46:93:9c:d3:58:
                    4a:fb:77:8a:fc:de:42:ad:ea:6d:ea:6d:06:ce:ef:
                    7d:c3:c9:ea:f0:a7:6b:49:22:f1:f4:d8:34:b8:7b:
                    9e:3f:6e:a5:ea:3e:e1:2c:a4:f9:83:7a:f6:95:74:
                    b2:6c:06:58:ce:69:5f:06:29:06:d8:53:7f:33:0b:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:E6:4C:7B:CC:03:AE:84:06:2D:D1:C7:41:EC:C9:3B:5B:CB:7D
            X509v3 Authority Key Identifier:
                keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:89:fb:1e:be:00:0d:58:c2:4e:56:4f:85:1a:fd:4e:18:80:
         e4:15:d3:6b:4a:29:88:d3:90:ba:d6:1c:90:97:51:71:e1:51:
         92:74:47:52:8d:23:26:ef:8f:0c:87:76:70:ed:0e:fa:31:13:
         a1:e6:c2:1a:d9:51:f8:c7:75:d7:36:2c:7f:39:a8:7b:b5:91:
         72:34:f1:81:b0:22:73:b4:d1:28:b4:b3:89:8f:c5:5c:4f:c7:
         30:d8:6b:10:34:82:a0:97:03:5c:cb:fb:91:59:28:42:ae:b9:
         ab:48:dc:8b:2d:c1:fb:3a:98:b7:06:49:fe:4a:83:89:89:f3:
         20:64:8f:bd:22:8b:6c:10:37:ce:a8:fc:63:b5:83:58:11:92:
         1b:fe:73:5f:13:3f:06:90:eb:52:d7:74:f5:f9:c5:b9:62:16:
         1d:43:ab:9f:d5:d6:c3:99:51:b8:f2:f3:6d:01:ea:73:72:32:
         3f:90:35:55:c7:e1:21:0d:ab:fc:a7:20:af:cb:7b:1f:a9:cc:
         60:18:b6:b1:2d:0d:a5:a1:c7:bc:d7:18:7d:f1:0e:17:b2:78:
         69:cb:d6:f4:8d:fa:ec:c4:8e:64:e9:80:1e:82:cd:c5:e9:cf:
         d4:61:72:89:62:f8:b3:e2:8c:26:74:da:e2:2c:3c:78:3b:ba:
         7c:5e:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:12 2026 by rpki-client