Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
File:                     3q8cjeT-PFHGkVP8r5_owq1vjiY.mft (raw, json)
Hash identifier:          sadOlZk4g5g1eE790JnfPXFZ9ys4hxuUQnko/3j4GyA=
Subject key identifier:   94:14:C8:A2:F5:39:D6:6C:2D:63:46:46:D3:5C:1C:2F:52:3F:13:E9
Authority key identifier: DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26
Certificate issuer:       /CN=A917AC33/serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
Manifest number:          01EF
Signing time:             Thu 23 Jul 2026 04:39:28 +0000
Manifest this update:     Thu 23 Jul 2026 04:39:27 +0000
Manifest next update:     Thu 30 Jul 2026 04:39:27 +0000
Files and hashes:         1: 3q8cjeT-PFHGkVP8r5_owq1vjiY.crl (hash: TRa6yqF3UzvVJFvkC16ouPWkYUmJVjctm44V9xJ081s=)
                          2: 1C2EA330925011EE9571EE40C4F9AE02.roa (hash: XfdGm7eKGJG4mI4OlbsmvCWQLht74XpIFUZS0ZbYwl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl
                          rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AC33, serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26
        Validity
            Not Before: Jul 23 04:39:27 2026 GMT
            Not After : Jul 30 04:39:27 2026 GMT
        Subject: CN=6a619aff-2f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:f6:f0:a7:56:ad:5d:fd:a1:53:56:37:b7:
                    ca:1d:27:0c:9f:eb:e0:4b:37:4f:d9:5f:3c:55:92:
                    cd:95:5f:f2:44:91:02:81:fe:e3:b6:54:65:49:96:
                    46:6c:04:1e:ea:94:1a:02:28:e9:de:81:a2:a9:75:
                    ea:57:f5:dd:31:9d:01:bd:ab:a8:43:3f:df:59:8f:
                    76:45:98:12:e6:b8:34:07:92:13:3e:bb:dc:eb:86:
                    e7:10:8d:12:b7:4b:74:92:04:2c:f9:0b:fd:9a:2c:
                    0e:fc:49:9d:a4:d9:3f:f8:08:3d:28:96:7f:6f:97:
                    96:24:22:67:2c:e4:f8:15:f3:cb:42:38:3b:9d:d9:
                    bf:69:22:56:ed:b9:40:03:30:e2:14:92:1f:ea:db:
                    f6:c3:19:50:6e:52:f6:33:14:7f:f6:9a:81:7c:04:
                    a9:00:42:a1:fc:c4:9f:c6:1f:b1:e5:30:77:32:39:
                    f8:e1:b0:2a:e5:6b:de:58:2c:24:c3:77:0c:b8:8e:
                    78:16:8e:d2:31:de:bc:9c:a6:ec:5d:95:bd:88:44:
                    4e:a5:d6:84:71:eb:f3:a4:4e:2c:cd:e6:e6:4e:0d:
                    85:8c:1d:48:41:79:38:e0:ab:4d:22:31:d9:7b:a1:
                    bf:7f:ae:b1:15:f4:ef:88:48:94:40:f6:3f:a4:6d:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:14:C8:A2:F5:39:D6:6C:2D:63:46:46:D3:5C:1C:2F:52:3F:13:E9
            X509v3 Authority Key Identifier:
                keyid:DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:15:66:ff:a5:4d:04:d9:94:5e:5e:46:6b:96:64:fa:46:35:
         e7:47:dd:d3:d2:df:c5:74:99:4a:68:4f:de:87:ee:f8:fc:e3:
         7d:14:2f:fd:1c:2a:b5:4d:2a:b4:d9:d3:21:53:31:8e:6f:dc:
         b7:ff:37:3e:7a:77:70:71:23:ef:1c:2f:c7:c5:3a:f3:b1:b1:
         6a:ed:3e:08:2d:ab:ab:0a:44:0b:67:8b:6d:c7:9c:fb:10:1e:
         da:6f:0b:11:8b:6e:f2:47:e3:83:b4:81:b5:72:86:c9:68:db:
         17:37:86:59:89:fc:2c:9c:68:eb:59:25:cb:fb:a4:b5:7a:06:
         61:45:e9:1f:67:a4:10:94:36:0f:b6:66:ce:5a:c1:ae:90:cf:
         82:ce:d5:92:7c:1a:24:2e:03:cc:f4:05:3a:0c:c5:d6:29:9d:
         87:8d:9c:ba:b3:c7:2b:b8:81:0d:91:4a:b8:65:19:b7:36:ce:
         42:10:88:08:00:3c:e5:3e:7d:eb:58:bd:4e:04:a8:7a:1c:67:
         e3:01:2f:a3:e2:d8:4e:3d:b8:e8:60:9b:51:cc:4f:48:8f:43:
         97:67:02:41:a1:ec:14:8b:c2:4b:07:f0:fe:2b:c7:3c:0c:13:
         03:4d:93:f6:b3:a9:82:fc:28:23:5f:92:32:78:04:13:69:d8:
         23:87:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:25 2026 by rpki-client