Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File:                     3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier:          UpCQVURMxI6xrqXyFMDUlaOecNV4gumOUuuEt7HB9sc=
Subject key identifier:   C1:7A:E0:A7:7F:5B:5F:34:61:29:20:33:22:BE:BF:1C:33:BB:4F:6A
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer:       /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial:       0B0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number:          0AFF
Signing time:             Wed 22 Jul 2026 19:44:12 +0000
Manifest this update:     Wed 22 Jul 2026 19:44:11 +0000
Manifest next update:     Wed 29 Jul 2026 19:44:11 +0000
Files and hashes:         1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: 4r/4pX2ExTQETfSVwk8ScyfhXjmBXfe6xQ/Ft7Sh/io=)
                          2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: P/kcrXkZBOpELFUVRD4sym1i0y2tovzreFKC78AoiZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
                          rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2828 (0xb0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
        Validity
            Not Before: Jul 22 19:44:11 2026 GMT
            Not After : Jul 29 19:44:11 2026 GMT
        Subject: CN=6a611d8c-7326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:65:6f:b9:f6:78:5b:b0:22:1e:3e:e7:54:
                    ac:09:05:24:9a:11:83:01:b3:e4:ba:09:47:b0:84:
                    12:e0:5b:50:4b:c6:27:3f:da:3f:59:f1:63:3b:da:
                    59:d6:01:d2:00:f1:0b:16:16:80:c3:69:ea:f1:ce:
                    aa:f1:2c:32:ef:45:50:5e:e2:6e:51:6b:6e:bb:66:
                    c7:03:60:a1:95:58:3a:b5:eb:35:36:e0:e8:c3:6f:
                    3c:9e:11:09:1b:ab:8b:a8:b3:65:6a:48:62:90:af:
                    c6:41:6a:06:ac:c1:3e:c6:50:82:ff:fa:98:2b:f2:
                    9f:6c:bf:70:09:ff:0d:3f:67:54:ca:77:a0:5a:af:
                    13:b3:2e:30:34:e4:a4:d1:3e:6d:73:fe:58:a4:58:
                    92:20:5f:2f:ed:0a:dc:e4:88:c6:c8:58:5a:dd:fa:
                    92:0f:b3:35:a0:fe:13:9f:04:4f:01:09:47:9d:4d:
                    96:6e:ab:c6:58:17:31:b8:45:fe:ec:24:e9:7b:97:
                    b1:6b:19:f3:b1:8b:f6:d4:ff:32:74:c2:10:54:0c:
                    78:6c:17:23:b7:f5:00:41:78:0c:82:10:6a:b0:c4:
                    ca:ab:f5:9c:7c:1f:ab:b1:3c:0a:69:81:21:7f:ff:
                    4f:a7:ba:30:cf:1e:af:67:2a:4f:b8:3d:98:2e:7d:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7A:E0:A7:7F:5B:5F:34:61:29:20:33:22:BE:BF:1C:33:BB:4F:6A
            X509v3 Authority Key Identifier:
                keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:91:1d:f4:54:71:8f:76:03:74:4b:bf:9f:69:d8:aa:85:e1:
         12:1d:86:8a:e2:1d:e8:26:36:1b:28:fb:79:d4:0a:3f:3a:b0:
         1b:5a:20:cd:f5:af:14:7e:f3:1a:b2:e5:6a:e8:76:2d:e5:a4:
         90:c9:70:15:43:18:d8:a6:5d:2c:a4:3e:5f:b9:32:34:6c:2e:
         a6:a8:d3:e1:8d:fe:b1:14:49:c5:65:fb:48:09:6b:77:5d:09:
         df:f1:cf:8a:59:24:db:8c:68:44:a2:5e:d0:de:0b:dd:6d:c4:
         ba:e5:29:74:96:25:62:24:3b:39:ba:df:5a:a9:f6:32:1a:7b:
         da:55:ad:80:95:84:f6:81:00:9c:6c:c7:ac:de:36:4c:91:63:
         d5:47:ca:3c:0e:2e:ca:d8:ff:26:bb:6a:a4:8d:8f:74:2d:62:
         76:23:1f:cb:96:9d:4a:9a:87:30:b8:c7:ba:be:9f:23:87:05:
         8c:cb:4f:d6:ca:02:5a:b8:63:46:35:53:e5:74:8b:9f:cd:e8:
         94:46:b4:9c:86:e3:7c:75:d2:bd:42:8a:6d:74:c9:2d:15:3f:
         c3:71:a5:d0:b4:15:f8:5f:49:36:59:fe:61:d8:fb:77:bf:e0:
         7a:20:7f:c0:f0:49:4e:26:19:9d:d1:b0:a5:46:33:cc:27:fa:
         b4:a9:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:27 2026 by rpki-client