Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
File:                     3eQo-rsWskLR46Gm8A_V48OKpY8.mft (raw, json)
Hash identifier:          9H5wR+66N7rR8Q25kDGMqH6ZP7LtUGDKkPGO1Vn2rOo=
Subject key identifier:   D1:34:42:9C:C6:46:36:14:93:D4:1B:FD:FA:F2:DB:A4:D1:B9:46:3D
Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
Certificate issuer:       /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
Manifest number:          52
Signing time:             Thu 23 Jul 2026 10:16:04 +0000
Manifest this update:     Thu 23 Jul 2026 10:16:03 +0000
Manifest next update:     Thu 30 Jul 2026 10:16:03 +0000
Files and hashes:         1: 3eQo-rsWskLR46Gm8A_V48OKpY8.crl (hash: dfVN9Cs9I46ckJhrWumasQEKL3RS35kvyyuHTPMqKgs=)
                          2: 50B86BE40BE411F1BD6D7437333D8C67.roa (hash: QFwXm5LgnQBWOl/6IqW37SOmW7TOlLZtTt8RxXnukJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl
                          rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
        Validity
            Not Before: Jul 23 10:16:03 2026 GMT
            Not After : Jul 30 10:16:03 2026 GMT
        Subject: CN=6a61e9e4-4cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:ef:bb:aa:f1:1c:b3:a0:17:c9:c1:c6:29:
                    1e:1d:23:b9:12:05:72:0c:36:33:77:3a:fb:bf:cc:
                    d2:48:6e:9c:42:d4:57:60:fb:bc:bd:75:12:2e:ca:
                    18:40:f1:bd:f0:79:c9:d3:0e:c1:b0:e3:c7:13:68:
                    00:e7:05:bc:c0:8e:98:97:ec:04:71:8b:ab:2f:d0:
                    53:49:da:39:64:df:5e:bb:df:8a:60:ab:12:e0:ec:
                    9c:b0:05:0b:97:de:cd:df:ad:eb:c8:85:92:f8:47:
                    4f:81:57:cf:14:a7:c4:14:8c:e8:d1:3d:16:65:30:
                    58:93:ab:2e:76:3d:27:6e:42:9c:7c:47:d0:83:31:
                    9b:69:b8:ac:66:9f:b5:59:de:70:a0:38:b6:2e:ef:
                    41:93:e9:95:ba:b1:74:08:0c:a9:de:32:66:f9:08:
                    46:93:f1:8d:f2:c3:9e:12:8b:14:56:b5:7d:c6:82:
                    63:e8:a2:4f:cd:35:3a:68:ec:cd:37:77:cc:15:6e:
                    59:c6:2b:77:93:ea:a3:86:73:c9:f4:21:73:7a:a3:
                    c0:19:5a:27:24:3f:55:65:d6:09:0d:a1:eb:1b:87:
                    e1:8f:a6:a0:88:22:ea:7f:11:6e:6b:f1:c9:18:75:
                    81:54:82:d0:bb:46:51:6c:77:18:f3:b2:a3:8a:9a:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:34:42:9C:C6:46:36:14:93:D4:1B:FD:FA:F2:DB:A4:D1:B9:46:3D
            X509v3 Authority Key Identifier:
                keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:85:e8:b1:6e:66:74:cd:ab:5b:ac:eb:f8:b4:ac:26:86:a4:
         25:90:6f:1a:68:21:7c:4b:9e:4a:80:f2:9e:e0:0e:2b:47:45:
         b6:66:6e:44:69:d6:96:27:ce:32:a4:98:e4:8e:a8:ef:72:cc:
         cd:f0:3d:28:49:83:88:a5:8a:ea:25:5c:0f:d9:f0:f1:da:89:
         e7:51:7d:62:3c:18:af:4b:05:0e:25:11:65:ee:de:b3:45:85:
         77:a9:4b:64:23:0a:42:a6:b3:b4:15:50:1b:00:2a:c3:57:6a:
         af:59:4b:71:52:49:c7:7b:df:d9:3a:67:a7:50:9c:be:7e:b5:
         26:a4:7c:6a:9a:e2:15:12:d3:6e:6f:b4:a7:37:55:35:44:92:
         ab:a0:21:89:b8:d5:1b:45:9e:52:35:ee:7d:66:41:c2:1a:39:
         e8:79:97:c1:75:4c:4f:da:f5:38:b9:e0:da:82:eb:8a:0c:84:
         24:26:4e:ef:b1:5b:05:39:94:79:aa:1e:9d:ee:b8:72:e9:e5:
         9e:7e:c8:da:74:ab:5c:56:1b:c4:b1:2d:62:7d:68:bd:42:fa:
         89:ce:2a:cf:44:6d:12:94:4f:b6:05:53:09:b1:ba:6e:f7:b5:
         55:b7:f5:ce:96:e7:d8:20:8f:49:b9:9c:56:82:4c:dd:11:99:
         5a:a4:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:06 2026 by rpki-client