Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
File:                     3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json)
Hash identifier:          Op8san/Qz1R7YR1qcpQLlj/MScg9jzxXaGlx007UZgc=
Subject key identifier:   67:05:0E:21:ED:7F:9D:94:25:02:9E:31:0C:D0:7A:7F:A9:C3:DE:DE
Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
Certificate issuer:       /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Certificate serial:       03F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
Manifest number:          03E3
Signing time:             Thu 23 Jul 2026 01:27:03 +0000
Manifest this update:     Thu 23 Jul 2026 01:27:02 +0000
Manifest next update:     Thu 30 Jul 2026 01:27:02 +0000
Files and hashes:         1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: bT1i1ZURIENNbilHxH8crOWbEhsxTYc5H1730GV8MWQ=)
                          2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: 4btki8MufbxcYjK/3ldd2OyHnoFsKyUfQZm8u1lkOas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
                          rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
        Validity
            Not Before: Jul 23 01:27:02 2026 GMT
            Not After : Jul 30 01:27:02 2026 GMT
        Subject: CN=6a616de6-a12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8b:be:51:7b:76:b0:d2:08:6f:62:d0:bb:59:
                    21:50:2b:e6:b7:1f:78:79:7e:1b:84:ad:65:fd:8d:
                    79:e0:33:c2:c3:2b:6f:49:64:46:bf:5f:3d:12:c3:
                    6f:87:6e:b5:dc:ae:2b:54:ee:90:0d:dd:17:bb:e6:
                    dc:76:46:e8:19:0d:b0:6f:a3:74:49:9b:43:ac:92:
                    ad:da:4e:e7:f6:20:e3:13:36:91:bd:03:67:73:5c:
                    2a:18:8a:01:28:bd:e4:51:be:6f:21:d6:64:19:e5:
                    65:8b:ed:d7:91:a8:09:24:9f:31:32:79:96:bd:30:
                    c3:62:1c:fc:4a:59:39:c4:9a:da:31:70:ea:66:e9:
                    a0:2d:bd:cf:fd:ef:08:94:62:21:c0:b1:49:4f:03:
                    dc:02:03:86:de:dc:bb:89:e6:99:db:fd:a8:ba:56:
                    fe:53:39:50:c9:0e:5f:ce:06:3d:fb:f2:8d:b6:21:
                    cd:04:ae:82:b4:81:d3:94:f6:91:65:4b:3e:89:19:
                    3c:b7:d8:cb:e9:0a:db:41:26:a6:b8:96:e0:da:b9:
                    15:d5:6a:62:f6:df:22:74:17:f7:e7:82:af:8e:c9:
                    0d:3c:a6:00:28:2d:b8:ef:9c:48:d4:d9:b3:0e:51:
                    7a:fd:99:e1:29:fd:3f:f7:42:ef:cf:81:1a:d5:71:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:05:0E:21:ED:7F:9D:94:25:02:9E:31:0C:D0:7A:7F:A9:C3:DE:DE
            X509v3 Authority Key Identifier:
                keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:43:9a:99:53:6d:56:87:ed:f5:06:f5:a4:71:0c:de:2a:
         f2:ce:e9:19:61:e9:25:18:08:ef:45:88:a8:85:a5:eb:6f:ab:
         51:5f:c7:55:f7:0e:d1:6d:65:f0:8f:b1:77:61:7c:68:e5:08:
         c8:a0:ca:31:a3:fa:04:32:f8:d9:48:b5:cd:ba:f7:8f:59:0d:
         e8:72:7f:d2:d8:14:0b:63:d3:b6:1c:58:55:ca:a9:7b:7d:80:
         d6:8d:b8:ab:18:23:11:b5:4d:2a:b6:55:a5:0b:f2:7d:fe:92:
         7c:7b:d2:0d:ae:28:db:8a:fb:94:8c:f9:0f:5e:f2:30:e6:92:
         77:3b:03:7b:d8:4f:a9:a9:07:43:a4:0c:eb:1f:36:70:0c:2d:
         c8:a1:43:80:49:cb:bd:70:21:a8:96:ab:a5:8c:e5:ea:00:e8:
         c4:18:28:0f:9a:52:14:88:1f:6a:04:b6:f2:8c:b6:71:97:6c:
         a6:ed:68:7a:d5:59:28:96:6a:17:26:b8:b6:40:d7:7b:d7:b5:
         8b:b2:da:ef:28:18:d2:7e:3e:b2:82:23:89:38:8d:01:b1:5f:
         87:89:b7:69:2c:7e:40:5a:76:dd:ef:66:56:1e:e2:da:dd:b8:
         7b:d6:e0:d9:15:7e:07:fc:87:d6:18:34:1a:e0:ed:89:7f:38:
         19:d5:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:27 2026 by rpki-client