Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
File:                     3panNCLI2QZghYm5zxT4SUcGqMM.mft (raw, json)
Hash identifier:          8Y/FFSGR4JEwhknsojH1zVKG9A1DNgS90VNimdp3p98=
Subject key identifier:   3B:5E:48:F9:EF:70:3E:BD:E8:33:BA:04:20:3F:7B:02:9F:0B:85:6B
Authority key identifier: DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3
Certificate issuer:       /CN=A91BE8A9/serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
Manifest number:          5D
Signing time:             Thu 23 Jul 2026 10:05:47 +0000
Manifest this update:     Thu 23 Jul 2026 10:05:46 +0000
Manifest next update:     Thu 30 Jul 2026 10:05:46 +0000
Files and hashes:         1: 3panNCLI2QZghYm5zxT4SUcGqMM.crl (hash: kjoyRNhGXLrDWcHtKevii7BgJ9LFma+ZqUrI52cyQbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl
                          rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE8A9, serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3
        Validity
            Not Before: Jul 23 10:05:46 2026 GMT
            Not After : Jul 30 10:05:46 2026 GMT
        Subject: CN=6a61e77a-78bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:a4:18:50:eb:fa:81:12:5e:6c:30:9a:38:
                    e0:53:d3:13:2c:d0:3b:20:48:41:7c:61:a8:09:47:
                    f3:59:fe:dd:68:d2:d3:ec:5c:a8:c0:fc:67:2e:ae:
                    51:79:bd:61:79:5d:23:59:30:e7:0e:bb:50:7a:c2:
                    ae:10:be:69:eb:d8:62:29:8f:c7:bd:74:d7:08:32:
                    d9:44:35:bb:09:a6:d0:15:da:bc:f1:95:5f:25:0f:
                    6b:06:9b:58:a7:e9:8e:9f:c7:1d:8d:21:c7:da:85:
                    fa:57:0d:09:86:a9:60:de:e4:b2:29:1a:73:e2:a1:
                    e5:9d:5a:fa:98:10:19:9e:79:b6:f8:b1:ca:c1:2a:
                    97:d7:22:7d:48:05:0d:41:17:10:b0:99:b5:66:e4:
                    c9:39:04:4b:41:3b:92:7b:da:1d:ff:47:0c:33:76:
                    01:ac:a8:57:3f:6f:25:28:6d:c9:6e:9a:76:99:c5:
                    5c:7e:39:2a:80:17:53:1a:56:02:92:0a:5b:b1:e9:
                    72:89:e3:f8:75:b4:0f:0b:d4:a8:26:41:41:87:97:
                    7f:23:f8:81:d0:0a:d9:ee:76:bb:c0:b3:43:80:35:
                    84:ed:99:54:ea:99:d7:a2:48:60:b0:85:c4:3b:e5:
                    0c:e3:b9:3b:fc:c0:4f:10:02:80:e1:37:82:00:8a:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5E:48:F9:EF:70:3E:BD:E8:33:BA:04:20:3F:7B:02:9F:0B:85:6B
            X509v3 Authority Key Identifier:
                keyid:DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:39:47:f5:76:68:1d:cc:74:58:07:23:e2:a3:65:a9:41:
         45:55:9a:b0:b1:5d:4d:5b:51:b0:7a:e4:ff:46:9d:e5:63:be:
         46:6d:e1:85:09:be:03:de:4c:61:4f:7c:bb:36:ae:ed:72:37:
         cd:00:a5:1e:16:96:e7:dc:a7:44:bc:82:30:55:c8:26:2f:36:
         b2:8e:78:53:45:52:8b:73:2d:99:61:c0:6c:2d:e1:79:04:c2:
         c4:7f:d6:c3:c6:c6:0d:ae:d2:69:39:ff:31:cd:13:6a:3f:87:
         3a:7e:a0:25:13:1f:54:93:3c:bd:60:4d:80:69:5d:7b:c8:20:
         3d:f3:55:01:16:e4:72:f1:68:3c:36:ff:ab:c6:ce:b2:c8:3d:
         da:c5:85:57:fa:62:00:7d:a0:0f:8e:ed:1e:72:5f:e6:1d:c8:
         e4:96:92:b1:63:93:a1:58:56:22:a4:2b:3f:1d:b7:bf:65:b5:
         74:ad:27:16:f7:a4:98:a3:8c:66:c4:ca:05:1b:0f:db:e2:e5:
         6c:2d:b1:8e:42:76:65:bd:30:37:c5:0d:ae:1e:fa:1f:1f:3c:
         29:78:58:9f:5f:94:36:a1:d5:8a:db:6c:86:c0:c4:3f:35:1e:
         f8:c5:37:c5:7f:38:ab:33:46:4c:df:48:1e:ac:2e:d9:a2:c5:
         b0:a5:12:e7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RThBOTExMC8GA1UEBRMoREU5NkE3MzQyMkM4RDkwNjYwODU4OUI5Q0YxNEY4NDk0
NzA2QThDMzAeFw0yNjA3MjMxMDA1NDZaFw0yNjA3MzAxMDA1NDZaMBgxFjAUBgNV
BAMTDTZhNjFlNzdhLTc4YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4g6QYUOv6gRJebDCaOOBT0xMs0DsgSEF8YagJR/NZ/t1o0tPsXKjA/GcurlF5
vWF5XSNZMOcOu1B6wq4Qvmnr2GIpj8e9dNcIMtlENbsJptAV2rzxlV8lD2sGm1in
6Y6fxx2NIcfahfpXDQmGqWDe5LIpGnPioeWdWvqYEBmeebb4scrBKpfXIn1IBQ1B
FxCwmbVm5Mk5BEtBO5J72h3/RwwzdgGsqFc/byUobclumnaZxVx+OSqAF1MaVgKS
Clux6XKJ4/h1tA8L1KgmQUGHl38j+IHQCtnudrvAs0OANYTtmVTqmdeiSGCwhcQ7
5QzjuTv8wE8QAoDhN4IAinhNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO15I+e9w
Pr3oM7oEID97Ap8LhWswHwYDVR0jBBgwFoAU3panNCLI2QZghYm5zxT4SUcGqMMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0I1N0FGQzJFRkJG
NzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFaZ2hZbTV6eFQ0U1VjR3FN
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3Bhbk5DTEkyUVpnaFltNXp4VDRTVWNHcU1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF
OEE5L0I1N0FGQzJFRkJGNzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFa
Z2hZbTV6eFQ0U1VjR3FNTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBd+DlH9XZoHcx0WAcj4qNlqUFFVZqwsV1NW1GweuT/Rp3lY75GbeGFCb4D3kxh
T3y7Nq7tcjfNAKUeFpbn3KdEvIIwVcgmLzayjnhTRVKLcy2ZYcBsLeF5BMLEf9bD
xsYNrtJpOf8xzRNqP4c6fqAlEx9Ukzy9YE2AaV17yCA981UBFuRy8Wg8Nv+rxs6y
yD3axYVX+mIAfaAPju0ecl/mHcjklpKxY5OhWFYipCs/Hbe/ZbV0rScW96SYo4xm
xMoFGw/b4uVsLbGOQnZlvTA3xQ2uHvofHzwpeFifX5Q2odWK22yGwMQ/NR74xTfF
fzirM0ZM30gerC7ZosWwpRLn
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:38 2026 by rpki-client