Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
File:                     3zHPGFCQ4VSWXv_7xmS91yHYB18.mft (raw, json)
Hash identifier:          oiGkpvvIngmk/Bzkkv8VTeodn4Ce7ia/RbGKqZuVY3g=
Subject key identifier:   0D:4B:98:E0:D4:B8:B4:6C:C1:B1:7A:45:22:08:AB:DC:DA:23:80:12
Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
Certificate issuer:       /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
Manifest number:          F8
Signing time:             Thu 23 Jul 2026 08:13:37 +0000
Manifest this update:     Thu 23 Jul 2026 08:13:36 +0000
Manifest next update:     Thu 30 Jul 2026 08:13:36 +0000
Files and hashes:         1: 3zHPGFCQ4VSWXv_7xmS91yHYB18.crl (hash: pmPpjCv8o4DiLrfctGWUXbbm0F31UIRyjXNA4mZ8ro8=)
                          2: 57AE76BA76D711F19DF4999C7BA30FBC.roa (hash: 6wRayQcINiwIUCo58JgrG1mNFg6i7e/wwz7+kqUH+lc=)
                          3: 4693C4A276D711F19E795C9A7BA30FBC.roa (hash: PfN9tequr7/Zu4xPf/Z2ZvqOuMMu0qCRpIUVkg6sAek=)
                          4: 7434E1F4967011F0A5651266C4F9AE02.roa (hash: gciNcDUVUCgw2qH2N78KovAnzOQWySARLNLA0rYt0Qc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
                          rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
        Validity
            Not Before: Jul 23 08:13:36 2026 GMT
            Not After : Jul 30 08:13:36 2026 GMT
        Subject: CN=6a61cd31-145b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:f3:77:c2:f5:88:fd:2f:0d:36:ae:cb:06:
                    4f:9f:41:e4:6d:b4:56:ce:68:8b:93:3b:70:b8:92:
                    1f:c7:14:02:76:92:8f:4b:91:56:0c:d5:7b:ce:fd:
                    2f:4f:44:49:3f:b2:58:32:56:37:65:70:8f:77:ba:
                    31:85:9e:11:2b:49:c9:f2:13:52:da:b1:b9:3e:80:
                    e9:48:f9:80:c2:25:19:82:6a:99:02:1e:cd:29:2d:
                    75:65:0e:77:a2:a6:72:79:b0:48:1c:65:fa:aa:3e:
                    5f:58:5a:d8:86:ff:17:3a:11:8e:59:09:04:07:6d:
                    fd:30:fb:fe:c0:2e:42:63:91:72:28:38:30:5e:13:
                    27:56:8c:60:47:69:1d:16:12:98:96:37:de:1f:8f:
                    34:d5:bc:0c:0a:02:9e:7a:a7:42:2a:7d:75:54:80:
                    52:1d:52:bc:12:d8:65:98:98:f7:06:1d:da:c2:80:
                    7b:2c:26:a8:da:f9:be:bc:26:e6:e7:e7:6b:c3:5a:
                    c6:71:bd:18:46:b3:d2:4e:c1:f0:58:79:2b:88:40:
                    2f:01:9c:15:67:56:58:1c:6d:dc:cf:d1:5a:c1:53:
                    60:f3:93:04:93:84:65:1c:d6:0d:fc:4b:cd:84:ac:
                    e9:5d:70:1e:c3:68:6b:56:bb:29:64:aa:34:be:32:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4B:98:E0:D4:B8:B4:6C:C1:B1:7A:45:22:08:AB:DC:DA:23:80:12
            X509v3 Authority Key Identifier:
                keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5c:0c:2e:4f:80:f6:70:8e:0f:8c:43:d6:48:50:4a:71:a9:
         33:0f:f6:c9:b8:79:f2:41:0d:1b:33:f8:67:bc:00:32:30:14:
         db:e2:f5:39:d3:88:14:12:d3:48:d1:63:11:80:c1:e9:43:e8:
         51:af:b7:72:72:61:b9:b4:c8:df:52:9a:5a:b7:db:81:87:91:
         14:b9:ba:61:30:f0:68:4d:a9:98:58:ee:cd:d3:28:9c:26:9c:
         a2:b0:ed:8e:11:5c:de:a8:6f:be:89:14:f9:42:c7:8c:b3:6f:
         d5:64:c0:f7:5a:a8:d5:29:10:f4:58:97:4a:75:ac:7e:92:80:
         ce:c6:a6:4a:71:88:78:ec:7d:70:ad:b8:3e:03:94:ba:45:8c:
         aa:76:4b:07:3a:33:24:25:28:76:a5:6f:d2:c6:f9:ae:28:3d:
         08:58:f2:da:71:57:af:70:5b:21:dc:e1:49:29:7a:c5:e3:eb:
         eb:d6:fe:e8:8d:67:65:9c:3b:80:f7:05:69:63:23:a3:d2:4c:
         53:7a:f0:2b:98:33:23:a1:e3:ef:b8:40:68:11:9a:8d:72:fc:
         c8:26:04:e5:f5:61:1f:54:e0:70:3b:3f:90:8f:15:e4:a1:4f:
         7c:e8:d3:19:fa:ba:08:68:97:0d:65:4a:86:35:8a:6e:b9:c1:
         00:5e:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:21 2026 by rpki-client