Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
File:                     3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json)
Hash identifier:          s6Nq/Ru99zlk6li84EyrPEEXw8y67hEEBpaiGKoF6Ec=
Subject key identifier:   CF:ED:D4:9D:55:E0:8A:7C:72:25:65:F4:02:A3:0C:83:D8:9B:C2:50
Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62
Certificate issuer:       /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
Manifest number:          0113
Signing time:             Thu 23 Jul 2026 07:41:06 +0000
Manifest this update:     Thu 23 Jul 2026 07:41:05 +0000
Manifest next update:     Thu 30 Jul 2026 07:41:05 +0000
Files and hashes:         1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: krxu9TBeR5GCcfFptOjGL0ylU+f4aKrjuroudJNO8k0=)
                          2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: xBMqZvhUayr3U1URgwrl8EIqJ+zMDOpes797KaEjYwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl
                          rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762
        Validity
            Not Before: Jul 23 07:41:05 2026 GMT
            Not After : Jul 30 07:41:05 2026 GMT
        Subject: CN=6a61c592-71bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:50:34:f7:3c:cf:35:0a:6d:e1:5d:7e:41:
                    26:76:41:b3:94:82:f5:5a:d0:ff:b2:10:29:95:57:
                    98:eb:41:fc:8b:95:9e:4b:5e:d8:c9:d5:67:91:12:
                    28:04:cb:27:99:78:f0:f5:53:48:1a:e7:75:ea:2c:
                    e9:ee:83:1e:a3:c8:e5:c4:11:ec:44:1e:6d:a0:d4:
                    22:d0:9e:41:fd:20:95:78:4b:bc:dd:4c:9e:07:74:
                    6f:f1:11:87:51:a6:4a:14:d9:17:18:64:1b:a7:11:
                    01:1c:16:6e:a0:bf:14:3e:4e:3a:c0:23:88:16:f2:
                    fe:16:03:d1:e6:5b:2c:bd:cd:04:8f:e5:13:f6:ba:
                    85:9f:17:58:62:eb:2c:75:1f:84:b4:82:1d:b5:5c:
                    5e:e4:60:93:05:9c:e8:af:0f:f4:6e:77:90:fc:f8:
                    68:d4:8e:77:8a:1f:22:a7:cf:78:fe:fd:54:2a:d2:
                    6c:a6:30:fc:86:1f:73:ed:00:de:f4:bb:b8:e8:c7:
                    e7:1f:d3:5d:76:fc:78:a0:c7:2a:15:59:c5:90:97:
                    ed:8a:b8:49:79:32:20:c9:5c:3f:f4:32:b2:30:14:
                    15:76:88:c3:5f:0f:08:bf:37:80:9a:3f:13:62:46:
                    32:06:86:cc:9f:47:f7:ec:ca:f1:4c:30:3a:71:73:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:ED:D4:9D:55:E0:8A:7C:72:25:65:F4:02:A3:0C:83:D8:9B:C2:50
            X509v3 Authority Key Identifier:
                keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ad:87:b3:e5:26:ab:e4:16:18:40:5e:24:32:d9:11:83:a0:
         6a:a0:74:b7:23:d8:4d:45:17:39:8f:5c:7a:87:3f:53:9a:0b:
         a1:d9:6e:06:5b:46:eb:16:6b:fe:7a:30:9d:b2:a2:61:40:90:
         0a:a0:6d:86:8c:a4:2b:ea:e0:09:df:48:9b:7f:ed:9a:fa:26:
         d0:52:23:c6:fd:0b:1d:90:69:e1:36:7b:73:eb:55:3b:d3:44:
         14:8c:4b:fd:37:a6:11:59:5a:c2:88:af:3c:dd:75:0d:6a:a3:
         91:88:00:ff:65:84:39:17:a6:43:d0:55:71:74:f5:c7:93:97:
         b5:89:65:46:8d:b9:ed:47:7c:0b:f8:11:5e:df:f3:a3:1c:07:
         8e:a7:d7:14:96:3e:a0:3d:7a:44:c7:11:4e:95:0a:27:22:f1:
         ac:0c:24:70:bb:2b:e4:1a:6c:28:09:9e:01:1e:dd:31:da:ba:
         88:f8:bf:7a:5d:66:4e:82:38:a7:68:70:58:20:e6:36:9b:03:
         fd:88:15:1c:50:32:88:8b:a9:c3:85:b8:f5:4c:fa:c0:41:d5:
         ab:ef:90:48:76:8c:df:04:b8:ef:21:68:73:2d:0b:dd:7c:5a:
         9b:fb:41:c5:69:75:c1:03:84:d2:92:d3:ba:9f:80:7c:af:af:
         c4:f8:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:52 2026 by rpki-client