Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
File:                     v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json)
Hash identifier:          5t0FE0E7Zhztekkm+rJKpTUbMfoaC/xFQNnmrtFDt6Q=
Subject key identifier:   40:E6:D3:99:83:A9:89:6A:8E:37:DF:09:F5:08:45:0C:17:C7:25:1C
Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF
Certificate issuer:       /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF
Certificate serial:       35CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
Manifest number:          3596
Signing time:             Wed 22 Jul 2026 14:16:01 +0000
Manifest this update:     Wed 22 Jul 2026 14:16:00 +0000
Manifest next update:     Wed 29 Jul 2026 14:16:00 +0000
Files and hashes:         1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: vD0DHJ4TnHQQpIOUoJOBCtCZ899AFCPQ9j7Wv2+bLME=)
                          2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: 3iV0EKq4wQfXSWe2KfpZNIU6xJqtVDMzninH5z6wDn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl
                          rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13772 (0x35cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91401C4, serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF
        Validity
            Not Before: Jul 22 14:16:00 2026 GMT
            Not After : Jul 29 14:16:00 2026 GMT
        Subject: CN=6a60d0a0-db09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:1b:6e:25:11:a0:d4:26:58:ec:97:39:89:
                    40:c4:a5:d5:ad:fb:e7:6d:61:78:a0:7b:fe:a4:39:
                    f1:3f:b9:22:77:93:bb:ac:26:6f:fa:15:99:c3:67:
                    d0:c0:49:c9:42:5b:eb:4c:ac:e8:22:3f:9b:68:c7:
                    82:4d:4a:2b:e7:10:da:1a:9c:5f:9a:95:b1:52:94:
                    3f:58:19:a1:4b:5c:71:b9:cd:68:a9:88:38:cc:c5:
                    ed:00:83:d3:dc:a1:36:1e:f5:f0:72:9f:35:15:c8:
                    0c:b0:33:8a:4b:9b:53:61:c9:99:f9:02:e4:01:42:
                    97:15:51:0f:a7:33:97:1b:14:9f:6e:57:c7:21:da:
                    d4:38:93:00:9d:9f:f8:63:31:e3:67:f3:16:96:d5:
                    10:c1:54:25:4d:af:0a:81:8c:1c:4b:e1:2c:63:eb:
                    9e:fd:b7:81:c6:6c:9a:0b:3b:a4:6d:be:12:9a:e2:
                    f8:57:52:0a:9b:45:ea:f3:93:6e:b6:a7:66:1b:b9:
                    89:2d:00:da:68:01:f8:0f:b6:35:9f:95:f9:af:9b:
                    86:b4:fa:58:b9:9d:9e:31:68:0e:7c:fd:6e:36:99:
                    3b:7f:cf:7b:bb:5c:6e:80:97:39:d3:1e:24:bf:15:
                    65:e6:69:5f:de:f1:20:20:c5:83:66:54:25:39:46:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E6:D3:99:83:A9:89:6A:8E:37:DF:09:F5:08:45:0C:17:C7:25:1C
            X509v3 Authority Key Identifier:
                keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1c:ab:3e:73:c0:21:ee:2f:c8:8f:07:a1:1c:74:8b:53:85:
         4e:92:b4:0d:21:41:b0:eb:4c:57:05:6f:59:3e:60:62:ad:6c:
         89:f4:d7:57:e0:d9:6d:e9:ef:7c:19:31:48:8e:8f:b2:18:ef:
         c2:48:9b:3f:04:6d:63:79:f6:0f:20:d0:3c:80:49:a5:df:cf:
         8b:79:7f:2a:1c:03:71:99:e5:5a:fc:d1:d3:eb:c5:19:81:e2:
         00:7b:f5:15:43:9f:81:4a:1c:e7:2f:54:02:85:03:78:a9:02:
         fa:5c:32:a7:39:7f:18:5d:ae:e1:f2:06:05:34:e1:9e:06:06:
         fb:91:76:4f:8a:38:4f:94:ce:54:e4:12:5a:d0:f2:b0:5a:80:
         05:70:eb:25:92:f2:46:56:88:24:0e:31:77:09:e3:70:c3:75:
         bf:e2:9f:d1:58:aa:43:90:c1:f4:c2:1a:b7:58:b1:26:d7:00:
         4a:59:54:e0:23:0c:0a:18:1b:ae:d2:83:53:fb:d0:0f:80:2d:
         fa:59:ba:52:cb:68:b1:41:cb:9f:73:0c:d7:39:ec:c8:86:1b:
         92:89:67:34:ba:58:07:43:88:ff:a0:ba:69:df:52:b1:85:87:
         25:4a:06:c2:6d:28:92:ea:9d:c1:37:ea:e9:c1:3b:63:69:4a:
         0e:9a:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:53 2026 by rpki-client