Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File:                     3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier:          TS/2Z2ro44tdh1j36fc6y5cdvtiLxdQNqKCdwndgKQw=
Subject key identifier:   FB:BB:07:31:A9:31:05:68:FB:D0:13:13:9C:FC:84:56:B9:22:AA:D1
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer:       /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial:       0C17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number:          4172
Signing time:             Wed 22 Jul 2026 14:51:15 +0000
Manifest this update:     Wed 22 Jul 2026 14:51:14 +0000
Manifest next update:     Wed 29 Jul 2026 14:51:14 +0000
Files and hashes:         1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: d7D9Fv5ASc5unUu3eItOtGT7LDPYbwYmyov5wFvjYGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
        Validity
            Not Before: Jul 22 14:51:14 2026 GMT
            Not After : Jul 29 14:51:14 2026 GMT
        Subject: CN=6a60d8e2-bdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:48:e1:e3:52:79:2f:0a:eb:e3:d7:57:f1:
                    4f:e2:98:23:48:27:88:7c:77:f8:68:4c:4c:83:c7:
                    9c:e4:75:dc:97:fc:c2:ab:09:69:b4:69:b5:76:54:
                    1b:a4:f8:81:00:0a:90:44:50:a5:de:15:05:59:2c:
                    b3:f8:b5:1e:99:76:4e:1e:24:0d:ed:1c:0d:5c:86:
                    1a:aa:c7:89:67:ab:9e:f3:a9:e6:dd:43:56:b0:4c:
                    94:4f:49:40:43:c4:6e:22:02:78:bd:25:0d:63:d2:
                    22:7d:a9:1a:58:b4:e7:56:6e:42:ed:b3:35:09:41:
                    cb:41:dd:3c:ae:9c:c1:29:18:39:e5:44:0c:84:a9:
                    78:a9:96:2b:94:bb:53:19:5a:68:92:46:00:6e:ea:
                    c7:3f:59:e0:5e:4b:c3:3b:02:47:03:6a:38:10:c5:
                    3a:ae:3b:06:0b:c4:6e:45:0a:87:ff:d5:14:eb:54:
                    2e:0c:46:e6:89:d4:1c:cb:63:71:57:4c:25:d5:ce:
                    8a:1c:09:9e:88:6e:1c:01:38:e4:03:6f:0c:f1:b6:
                    ed:21:2a:a0:c8:b9:e5:08:7c:83:bb:ae:05:20:de:
                    28:2c:fb:e7:15:5b:5f:fb:0a:06:9f:e2:57:52:38:
                    3b:06:cf:77:42:b1:c0:f9:eb:1c:78:e2:8b:9c:ea:
                    eb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BB:07:31:A9:31:05:68:FB:D0:13:13:9C:FC:84:56:B9:22:AA:D1
            X509v3 Authority Key Identifier:
                keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:51:c2:44:28:ae:14:d4:bc:5b:08:42:92:97:82:a5:59:d9:
         d6:d5:1e:71:a9:be:9e:3f:27:3b:42:b6:60:5c:1b:9e:70:33:
         e3:d6:99:14:b3:e3:c5:d0:7e:e2:cb:1f:f1:38:b3:e4:38:88:
         2f:e5:82:23:1a:2a:71:09:01:7d:7d:f6:d9:fb:3d:38:a6:5f:
         68:ff:b4:25:ef:a8:1b:f3:2e:d3:0f:06:93:bb:6e:e5:64:82:
         93:e9:14:85:3b:a2:7a:83:97:7d:f5:3e:08:aa:0f:9f:08:4b:
         03:57:5e:37:7f:2d:bf:9f:30:c0:b9:77:5b:fa:56:cd:23:ea:
         70:64:48:25:23:1a:0a:25:8b:4f:95:26:2e:ba:77:e8:93:fc:
         b5:90:77:c2:d4:bb:07:f0:c0:19:d4:b5:36:0a:9e:cb:0b:62:
         58:a6:df:1c:a1:ed:bf:5e:df:26:27:c2:2b:5a:bf:62:96:43:
         7d:11:05:db:dc:cd:a4:22:0f:76:a8:b8:75:b4:04:b3:2c:f9:
         3a:1b:14:fb:ae:3c:64:40:1b:61:13:3b:3a:1a:5f:b9:04:9f:
         b8:36:b6:6f:61:a5:60:39:53:1c:53:f0:89:6d:14:33:2e:a3:
         6c:d6:82:33:53:15:62:19:ab:6e:9c:10:1b:c6:cd:8d:14:d2:
         43:aa:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:36 2026 by rpki-client