Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
File:                     4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json)
Hash identifier:          cv8AVL5gqZmbxWdlcbRCclJhu4UP/NMVL4VGqHbUudI=
Subject key identifier:   1F:9A:DF:9D:55:69:7E:E3:CF:F0:8D:D9:17:C8:15:13:B6:99:1F:67
Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
Certificate issuer:       /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
Manifest number:          3A
Signing time:             Thu 23 Jul 2026 10:37:17 +0000
Manifest this update:     Thu 23 Jul 2026 10:37:16 +0000
Manifest next update:     Thu 30 Jul 2026 10:37:16 +0000
Files and hashes:         1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: nl6P1YmfkoE29V5KU+5wonpzVeDFDREXRzna/s0mtzw=)
                          2: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=)
                          3: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl
                          rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
        Validity
            Not Before: Jul 23 10:37:16 2026 GMT
            Not After : Jul 30 10:37:16 2026 GMT
        Subject: CN=6a61eedd-b71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:96:4a:a7:e3:8d:7e:8d:10:ba:32:52:59:
                    93:43:8e:1a:36:0e:93:28:11:a3:14:1a:96:54:e4:
                    61:cf:34:52:31:7d:77:0f:a9:93:d5:8a:00:f2:f2:
                    57:70:cb:7e:b6:4b:8f:b9:e1:f6:da:ed:34:d7:d5:
                    d2:9a:71:28:5f:01:ae:20:f4:30:ac:91:db:82:d5:
                    10:88:37:c2:7c:b0:17:5d:e4:32:ba:44:30:7c:75:
                    2f:53:ac:a8:98:b6:b7:74:12:37:41:e5:6d:bd:df:
                    da:4f:93:60:80:86:7a:95:b4:e2:ab:e9:60:fb:cf:
                    e3:ac:ec:ad:c4:12:f0:d3:83:91:6b:69:fe:a4:2a:
                    c7:06:52:9d:f8:dd:ae:4d:c9:55:dc:80:9a:21:68:
                    95:a1:42:1e:9e:8e:66:2d:a4:77:34:f9:c8:4b:99:
                    0e:9a:bc:69:b8:98:7b:10:3b:92:17:8d:47:d3:9c:
                    f6:3f:c5:54:22:e5:64:77:75:76:81:37:9b:c1:95:
                    49:5f:23:ae:80:97:ca:a8:cf:89:2c:4c:41:bb:5f:
                    66:0a:c3:91:38:3e:0c:83:d4:7e:da:8f:5a:c7:e2:
                    ec:eb:e4:12:b0:a9:67:de:60:c3:77:c2:66:b7:57:
                    16:8d:c3:1e:59:27:aa:06:b8:e7:c5:e4:5d:7f:a1:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9A:DF:9D:55:69:7E:E3:CF:F0:8D:D9:17:C8:15:13:B6:99:1F:67
            X509v3 Authority Key Identifier:
                keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3c:d9:86:16:63:4d:57:c3:aa:1d:db:64:90:01:33:fb:42:
         c4:ce:4e:79:13:34:46:54:21:03:0b:da:1c:4e:5a:2a:6c:9a:
         6a:60:22:37:a5:ae:38:07:03:7a:3c:62:39:22:a2:b2:1b:9a:
         cf:70:c9:8c:b1:be:ed:c5:5f:17:b0:35:55:ee:24:7f:3b:17:
         c7:d3:55:db:29:9a:3d:e7:d6:1d:1d:3c:df:fd:1d:d8:3a:88:
         ea:47:41:18:a3:8e:4c:fc:20:c7:e5:5b:fd:4b:48:66:0f:28:
         c3:b7:6a:55:9c:0b:8d:87:31:5d:67:13:f6:0e:53:ed:e7:13:
         52:6c:74:17:6d:52:8e:1f:c6:67:51:9f:69:2f:66:da:c7:c3:
         a2:c7:8f:26:86:1d:4f:05:70:ec:1e:db:ef:37:93:48:6a:a0:
         c8:65:78:c0:8c:ac:e7:70:6f:0c:0d:0d:c4:6e:28:91:24:37:
         33:d2:b5:bb:3a:65:5c:95:b9:4d:c4:c2:12:37:63:b7:ae:5a:
         1c:a6:28:7d:28:01:06:2b:3e:84:c1:b6:1c:46:b7:ff:20:31:
         e5:fa:bc:b9:48:47:f9:00:55:ff:8f:ee:9b:bd:bb:3a:4a:c0:
         e5:48:be:81:38:3e:e6:59:b9:fa:e4:66:49:39:92:cb:a6:55:
         25:66:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:05 2026 by rpki-client