Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
File:                     fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json)
Hash identifier:          PenZnncAi420Uev7Qk72Q0wBegtSF5yNW38iBkdKzfM=
Subject key identifier:   37:F5:E7:D4:65:36:4C:FC:77:C5:B5:9B:F7:13:FF:AB:98:F7:F8:5A
Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
Certificate issuer:       /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Certificate serial:       0388
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
Manifest number:          0382
Signing time:             Thu 23 Jul 2026 01:40:32 +0000
Manifest this update:     Thu 23 Jul 2026 01:40:32 +0000
Manifest next update:     Thu 30 Jul 2026 01:40:32 +0000
Files and hashes:         1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: Cr0je3HGc+F8mWckWt1j3CCQReB49GMlv0ndOR15sY8=)
                          2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: ogTzdNf1gHD/xTlxA8D6h7pqJeFDXQYw5yT4vowpzqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
                          rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
        Validity
            Not Before: Jul 23 01:40:32 2026 GMT
            Not After : Jul 30 01:40:32 2026 GMT
        Subject: CN=6a617110-fc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:d9:9c:1f:cf:59:8d:7a:40:3a:9a:69:6b:
                    ba:da:f8:0d:cb:2a:38:a9:b5:42:1d:2d:70:22:cb:
                    9b:d7:68:50:d9:27:b9:f3:76:f6:16:e9:ff:77:a0:
                    b0:7a:ca:3e:b8:fd:08:d1:3a:73:28:db:87:8c:65:
                    80:ac:ca:25:c9:b1:40:ef:9d:12:91:f7:58:c1:49:
                    26:b0:be:ba:ef:bb:eb:89:e0:29:40:d3:18:7e:01:
                    ed:fe:65:0f:73:71:e3:60:17:03:59:08:f4:da:e8:
                    e7:c8:49:5b:1a:1e:8d:a6:22:d5:b4:99:ab:f5:e5:
                    10:23:2d:93:79:e5:5c:d6:eb:98:7b:9a:27:b4:32:
                    e2:8b:64:0f:bb:3f:7c:c0:7c:d4:70:92:92:04:d4:
                    c9:a5:6a:a1:ed:69:9c:02:19:d4:00:08:49:c7:45:
                    f3:74:96:e5:ad:9b:95:a3:70:4a:71:b5:8c:58:51:
                    52:e8:3b:71:a3:c6:bf:95:09:b1:f2:93:26:ae:51:
                    3e:f1:fc:73:d3:01:32:12:3a:c9:b3:d1:cd:b5:02:
                    68:d5:a0:67:1b:01:74:61:b7:4d:1e:03:bd:cb:04:
                    ea:0f:5b:29:83:31:53:f0:6f:14:66:a4:f5:1a:ab:
                    13:bb:d6:c2:31:83:c2:1f:1f:ee:55:d6:1d:54:76:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:E7:D4:65:36:4C:FC:77:C5:B5:9B:F7:13:FF:AB:98:F7:F8:5A
            X509v3 Authority Key Identifier:
                keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:22:85:60:d0:85:a0:f7:c8:5b:e3:6f:aa:11:70:71:43:
         3c:1a:38:2b:14:56:79:26:ef:08:08:9e:42:19:20:ab:9f:94:
         19:b9:28:db:78:d8:50:d6:88:2b:8d:6c:07:67:90:43:2e:4c:
         18:3c:6d:ea:80:dd:60:3f:cb:f7:7e:e0:9e:dd:e8:23:29:f2:
         7e:61:f9:d3:5f:07:53:29:6d:60:85:59:47:5c:9d:0f:d8:e3:
         00:8e:a1:13:5d:a3:83:fe:d9:cd:8c:2d:b5:6c:8e:bf:5b:ae:
         d6:0e:96:5a:fc:56:3b:60:b3:c1:c4:76:64:ca:43:03:ee:07:
         69:c8:98:31:80:97:d1:e7:5c:a6:07:09:06:27:60:6a:00:1a:
         f3:8b:18:84:b3:5f:35:ab:43:cc:e8:26:35:1f:e6:49:7d:a0:
         80:f6:6d:b1:92:64:38:37:69:0d:85:4e:c4:51:cf:69:c0:8f:
         2b:3f:d4:c4:fb:84:83:ea:1a:61:01:ea:09:85:be:ff:a8:d2:
         f3:5f:77:ba:9e:27:09:ca:df:56:7b:4d:87:90:96:e5:f9:57:
         ad:7e:6d:51:b5:2f:10:b4:bc:ef:4c:9a:b3:d2:a8:69:de:cd:
         e6:57:bd:5a:7b:3d:6b:87:5d:93:b6:ad:12:8d:0a:d9:3f:5a:
         71:49:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:30:38 2026 by rpki-client