Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
File:                     3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json)
Hash identifier:          XV/5oG+irX+FEMq0w3dkKV6jDQJ+fZFlDtUqKscOLwk=
Subject key identifier:   C3:C8:E3:38:1C:D7:1F:CA:B5:4D:90:07:B2:FB:E9:24:A1:D3:7F:B4
Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
Certificate issuer:       /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Certificate serial:       08E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
Manifest number:          09E4
Signing time:             Wed 22 Jul 2026 20:53:32 +0000
Manifest this update:     Wed 22 Jul 2026 20:53:31 +0000
Manifest next update:     Wed 29 Jul 2026 20:53:31 +0000
Files and hashes:         1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: Ja+XrwNBc9hjMnIuL2ESSImWBPDX+tNsBbUmoF1flDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
                          rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
        Validity
            Not Before: Jul 22 20:53:31 2026 GMT
            Not After : Jul 29 20:53:31 2026 GMT
        Subject: CN=6a612dcc-6afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:ef:1b:36:f3:95:a3:20:d5:fb:1f:3d:0f:
                    7e:3a:a3:f2:4f:7b:50:6a:e3:03:3e:4b:66:7d:72:
                    c0:fd:c1:27:34:47:db:1c:71:6b:39:e7:1c:ec:47:
                    79:5b:7e:48:74:35:19:6a:0a:ca:b8:07:ca:b9:bb:
                    b0:8a:ff:6d:96:37:42:76:df:e4:ae:97:51:0b:95:
                    66:da:a3:09:c2:69:1c:b6:19:c5:d2:17:ad:3e:71:
                    2d:a9:17:64:64:24:e1:17:d5:58:08:2f:f6:d3:18:
                    a7:cf:bf:12:41:40:a6:15:63:0d:7b:d3:21:1b:b1:
                    5c:dd:7b:d0:f5:80:01:31:af:76:5b:0a:05:76:24:
                    01:f5:d4:73:73:28:ca:d8:6c:0c:12:6c:3b:cb:17:
                    74:5b:c7:4b:a6:30:f0:60:5d:b7:78:1c:93:2c:b6:
                    70:d9:48:d1:11:ff:e0:a7:b6:7e:a2:6a:f2:32:6b:
                    de:28:19:e5:cf:a2:57:c0:64:55:da:76:64:f4:60:
                    d7:97:75:98:06:f3:08:57:b4:6c:f4:2b:3f:3c:62:
                    a8:44:49:08:d8:94:f6:0a:17:7f:71:c8:62:ed:34:
                    75:02:19:a1:55:aa:4d:43:8e:c3:81:6f:bd:fc:9c:
                    84:bb:50:19:7f:3f:c5:e3:dc:d1:f6:8f:12:e7:5f:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:E3:38:1C:D7:1F:CA:B5:4D:90:07:B2:FB:E9:24:A1:D3:7F:B4
            X509v3 Authority Key Identifier:
                keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:df:73:f8:8b:e1:66:29:3a:cc:46:a2:56:ed:8f:0f:56:fa:
         01:5c:bc:ce:4c:b3:04:80:5b:64:56:d9:ea:88:18:b1:54:9d:
         1d:9a:db:ae:f4:75:59:ee:f9:e3:64:6d:27:97:15:92:cc:98:
         cd:ca:65:13:bb:18:c6:c0:5b:17:5d:b0:63:e5:7f:c1:fd:08:
         43:cb:0b:d9:c7:86:b0:df:d8:c2:3e:07:cd:14:99:46:d2:5c:
         37:56:6a:5d:cc:db:2f:57:02:9b:b6:22:c8:6f:55:2d:85:83:
         aa:30:1c:da:98:fd:d4:e5:a4:4d:54:ac:02:b4:95:7f:22:b6:
         d5:2f:d8:19:ca:18:b0:62:1b:7a:81:c5:b9:4a:e9:9b:83:7a:
         a6:ba:85:1b:a8:6f:c3:49:ed:49:0a:15:5d:97:6c:05:63:47:
         6d:18:ad:ca:04:ac:34:ec:25:5a:e0:8f:2f:b7:64:57:65:59:
         a9:ad:6e:35:f7:04:54:eb:96:8a:04:19:51:50:ff:66:ca:70:
         02:a9:9d:6d:d8:e4:c0:a1:7b:f0:9a:7b:68:ed:32:e8:1b:01:
         ba:37:d8:37:f9:6f:1e:86:a3:5b:88:33:48:51:79:91:52:3b:
         a6:ff:6b:b4:bc:ee:4e:dc:c5:c2:bd:2e:a3:71:e8:9c:93:02:
         e6:19:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:07 2026 by rpki-client