Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
File:                     L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json)
Hash identifier:          oBFHAnIVmL5FNSerqTAUA5uiMLnQNkPqHd8XqR06upw=
Subject key identifier:   DA:EE:DA:9A:1E:92:DF:C0:A2:6F:8F:43:86:03:16:59:CA:41:EF:5F
Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
Certificate issuer:       /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Certificate serial:       0570
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
Manifest number:          0562
Signing time:             Thu 23 Jul 2026 00:09:27 +0000
Manifest this update:     Thu 23 Jul 2026 00:09:27 +0000
Manifest next update:     Thu 30 Jul 2026 00:09:27 +0000
Files and hashes:         1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: DrZGeHX/83dgO4WXg0A+Ebx9FK9z5YC643q67louG80=)
                          2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=)
                          3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
        Validity
            Not Before: Jul 23 00:09:27 2026 GMT
            Not After : Jul 30 00:09:27 2026 GMT
        Subject: CN=6a615bb7-eafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:29:ff:4e:00:ed:bd:14:82:ba:7f:52:65:
                    91:1d:4b:af:40:b6:db:49:c1:af:48:ca:ad:1d:e5:
                    0b:b4:ae:0b:d5:a5:c9:1d:d4:bb:f8:e6:37:37:84:
                    f9:8e:b4:ca:e9:12:f2:9a:1c:58:01:84:44:0f:a4:
                    48:12:96:af:f8:62:d9:6f:a8:61:6f:11:d0:70:d7:
                    e1:29:48:49:bd:d6:38:5c:c8:ae:87:c0:03:02:45:
                    1c:25:0e:51:ca:73:ed:b6:99:ee:e4:ee:36:b3:2a:
                    b1:f1:85:67:3c:c6:70:87:f7:0c:9b:24:84:53:07:
                    32:d0:62:5a:e1:16:ef:53:be:49:7d:f8:c4:1f:05:
                    bd:86:c5:f4:c9:fb:c0:a5:f7:f6:ae:fd:f2:f3:40:
                    b3:bd:0f:b8:34:12:53:ae:69:75:85:c6:55:35:9e:
                    6a:04:74:03:43:10:d9:d0:33:d9:5e:bb:00:7c:c6:
                    fe:bd:79:a5:75:64:04:18:51:52:bc:4c:4b:e8:16:
                    e0:22:18:73:c7:75:33:56:86:ac:32:a4:d8:21:c8:
                    61:16:3b:ff:ef:5d:66:4c:a2:4c:9f:47:ee:b8:e7:
                    04:82:9c:06:61:ce:59:bd:f9:51:65:3d:16:e9:19:
                    d0:5d:2d:2e:ba:f4:7e:9f:27:01:77:66:8f:c4:8b:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EE:DA:9A:1E:92:DF:C0:A2:6F:8F:43:86:03:16:59:CA:41:EF:5F
            X509v3 Authority Key Identifier:
                keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:60:74:d5:26:ae:e6:5c:7c:b1:b1:03:95:86:2a:4f:ca:a4:
         e8:fa:2f:0b:14:ed:0e:e7:f1:eb:58:22:9d:89:18:95:80:d2:
         74:ae:16:15:39:95:ec:10:ab:63:2d:fa:55:f0:4b:fa:1e:53:
         78:1e:e7:c3:f0:ce:e9:c3:20:b3:82:6f:2d:7c:a7:a6:29:75:
         f7:e9:7c:e0:4f:29:75:f3:4e:50:14:36:1c:66:d4:2e:7f:0f:
         94:f0:09:c1:fa:e5:ca:7c:42:cc:94:9d:9e:b9:15:6e:97:33:
         d2:c7:eb:bc:0d:3a:cc:ac:28:b7:44:ea:5b:c3:17:d5:21:88:
         af:31:d1:36:93:a9:9d:00:18:b9:f9:9d:b2:cc:a2:fc:e7:16:
         0d:66:ba:a3:4d:6e:55:8a:96:26:96:6a:ad:50:d8:82:cf:f3:
         cb:a7:f2:ea:47:ec:9c:63:c2:49:31:cf:07:e8:52:dc:fb:0a:
         32:1d:c3:f4:d9:63:9e:f9:a0:9c:42:15:9b:e5:81:ea:e4:60:
         da:a4:d9:ca:41:47:6e:82:16:f5:e4:1a:9d:7b:f5:88:fc:16:
         2a:50:5c:94:e5:36:30:8c:24:a6:be:d3:0c:7c:88:97:15:d4:
         7f:f8:27:a1:98:52:a2:e2:7d:a0:65:67:a8:07:96:7f:8b:9e:
         89:69:4c:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2
NzkyRjg1QTEwHhcNMjYwNzIzMDAwOTI3WhcNMjYwNzMwMDAwOTI3WjAYMRYwFAYD
VQQDEw02YTYxNWJiNy1lYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr2wp/04A7b0Ugrp/UmWRHUuvQLbbScGvSMqtHeULtK4L1aXJHdS7+OY3N4T5
jrTK6RLymhxYAYRED6RIEpav+GLZb6hhbxHQcNfhKUhJvdY4XMiuh8ADAkUcJQ5R
ynPttpnu5O42syqx8YVnPMZwh/cMmySEUwcy0GJa4RbvU75JffjEHwW9hsX0yfvA
pff2rv3y80CzvQ+4NBJTrml1hcZVNZ5qBHQDQxDZ0DPZXrsAfMb+vXmldWQEGFFS
vExL6BbgIhhzx3UzVoasMqTYIchhFjv/711mTKJMn0fuuOcEgpwGYc5ZvflRZT0W
6RnQXS0uuvR+nycBd2aPxItzawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNru2poe
kt/Aom+PQ4YDFlnKQe9fMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE
MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt
X0djSUQ3bTJHN0pua3ZoYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALWB01Sau5lx8sbEDlYYqT8qk6PovCxTtDufx61ginYkYlYDSdK4WFTmV7BCr
Yy36VfBL+h5TeB7nw/DO6cMgs4JvLXynpil19+l84E8pdfNOUBQ2HGbULn8PlPAJ
wfrlynxCzJSdnrkVbpcz0sfrvA06zKwot0TqW8MX1SGIrzHRNpOpnQAYufmdssyi
/OcWDWa6o01uVYqWJpZqrVDYgs/zy6fy6kfsnGPCSTHPB+hS3PsKMh3D9Nljnvmg
nEIVm+WB6uRg2qTZykFHboIW9eQanXv1iPwWKlBclOU2MIwkpr7TDHyIlxXUf/gn
oZhSouJ9oGVnqAeWf4ueiWlM6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:24 2026 by rpki-client