Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
File:                     3Hp9C5oBv4XomicX87lm2Z5F9-c.mft (raw, json)
Hash identifier:          D/9B/PsuIPTTFcu+LrOd6ckaMs9+fQFJvOA46OXE7rk=
Subject key identifier:   8B:28:A7:1B:8C:98:C6:1C:EA:08:1E:17:5A:D7:3D:EF:DE:1F:C6:70
Authority key identifier: DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7
Certificate issuer:       /CN=A9198A90/serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
Manifest number:          0E
Signing time:             Thu 23 Jul 2026 11:16:50 +0000
Manifest this update:     Thu 23 Jul 2026 11:16:50 +0000
Manifest next update:     Thu 30 Jul 2026 11:16:50 +0000
Files and hashes:         1: 3Hp9C5oBv4XomicX87lm2Z5F9-c.crl (hash: mKJlZvAD2xUWFCqpmUPx4jhZNOw4rRvwPbeq41vrM9c=)
                          2: 03C24D0680E611F1A15EA29461A30FBC.roa (hash: u7JbDFz3qAshRF4caNqctdr/Pu6iadoZfhpdKTIEvOY=)
                          3: 2E45B7DE80E611F1936909A061A30FBC.roa (hash: boIChwmQ8OLdUTt45ZhPNZwjS9L/s3K4KKRa2qyDCXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl
                          rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198A90, serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
        Validity
            Not Before: Jul 23 11:16:50 2026 GMT
            Not After : Jul 30 11:16:50 2026 GMT
        Subject: CN=6a61f822-9817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:fd:0f:f1:6c:e7:b7:3e:36:b0:b6:69:1f:
                    db:e0:ff:b7:6e:aa:a3:af:f0:47:8f:bf:0c:9d:12:
                    a7:c4:ca:4a:c9:03:c5:19:4d:b0:7c:00:c3:dc:d1:
                    87:9e:85:2a:7f:5c:f0:ef:3e:d6:64:22:a1:97:7d:
                    c8:68:5c:ed:4c:06:22:16:3e:40:42:9d:10:1f:e6:
                    d7:b2:de:95:7f:06:5e:c4:77:1c:66:7f:38:53:b3:
                    10:b1:b4:0e:68:22:cf:dd:4f:36:50:6e:80:36:f2:
                    9b:cc:74:bf:38:ff:a8:ea:8d:98:bc:1b:28:87:43:
                    d4:2a:53:fa:81:b1:ad:3b:dc:16:ec:bf:ad:92:97:
                    f9:34:b3:0b:56:82:3a:4d:9e:bd:cd:4c:6a:36:31:
                    28:21:bb:32:7f:e1:38:87:88:b3:d9:d6:de:8a:c4:
                    23:0a:f3:e0:ee:20:87:69:3d:7c:73:db:56:63:03:
                    97:c3:69:79:48:54:c2:e0:ff:97:a9:45:4b:70:7a:
                    3a:cf:13:16:fb:ef:75:fa:7c:cd:c8:02:23:90:ca:
                    8f:87:2e:af:85:d9:a0:87:38:b9:1a:77:18:cf:2b:
                    14:87:e2:7c:d5:79:da:08:3e:1a:c1:d7:5d:9d:c0:
                    95:52:c3:f2:c3:63:84:6a:8f:25:72:9f:a6:88:4b:
                    a2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:28:A7:1B:8C:98:C6:1C:EA:08:1E:17:5A:D7:3D:EF:DE:1F:C6:70
            X509v3 Authority Key Identifier:
                keyid:DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:be:f3:48:13:c9:b5:80:04:54:dc:5b:4b:ec:4f:9e:fb:8c:
         57:7c:8c:68:3a:7a:ed:80:56:34:9c:15:28:1f:0b:ed:9b:06:
         64:61:1d:01:03:47:03:12:39:de:75:99:6e:58:c7:22:e6:d5:
         0c:8f:49:26:9a:bc:e3:f0:0f:e1:3c:e4:73:77:89:b0:00:50:
         d7:c4:39:25:fc:0d:71:36:4d:4f:73:b7:25:38:d8:0c:0c:93:
         5f:77:61:8b:e8:77:25:2d:4c:ab:2d:ee:45:94:85:e8:0a:e9:
         da:cd:df:8c:bc:24:a4:5f:5c:35:37:5a:c1:27:14:64:80:ea:
         3a:c0:16:c4:58:b6:9f:79:45:83:ab:32:e1:48:56:cf:a3:71:
         36:3d:ef:b6:ff:f4:d2:ce:d1:f6:ec:3e:95:da:d4:72:49:d1:
         4f:0a:9d:38:93:8c:0a:02:68:b6:57:28:cf:93:59:3f:d8:75:
         55:e3:70:34:65:d8:d3:22:40:86:a7:27:94:36:65:64:0f:c6:
         40:08:47:69:17:5e:51:ab:c4:0e:ed:f0:e0:4c:e2:f9:3b:f1:
         7f:87:38:10:44:00:95:93:9b:71:d3:50:76:02:50:47:3f:6a:
         62:63:6c:46:85:65:70:8b:f2:18:be:9c:29:c2:ac:75:ee:31:
         6c:ef:25:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:37 2026 by rpki-client