Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
File:                     kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json)
Hash identifier:          xHINo+gM1S7yHjCACnyJPaUcct7xy+gYI8Li8fjXhsM=
Subject key identifier:   71:7D:88:59:51:3D:6E:3B:67:6E:B7:E1:8F:D4:30:FE:9C:42:D3:06
Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62
Certificate issuer:       /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
Manifest number:          03F7
Signing time:             Thu 23 Jul 2026 03:25:40 +0000
Manifest this update:     Thu 23 Jul 2026 03:25:40 +0000
Manifest next update:     Thu 30 Jul 2026 03:25:40 +0000
Files and hashes:         1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: gtJyengakuc1Qpt2UegW1iqfi9cqBRVKmBxKeSz0JZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl
                          rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
        Validity
            Not Before: Jul 23 03:25:40 2026 GMT
            Not After : Jul 30 03:25:40 2026 GMT
        Subject: CN=6a6189b4-788c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:55:9d:6a:fb:55:35:43:9b:09:14:a2:4c:
                    d9:21:9a:7b:d0:3a:48:f7:54:66:ec:85:9c:0e:e8:
                    77:34:0f:28:0f:7f:7a:88:79:30:dc:3c:57:1d:3c:
                    64:14:f7:08:15:16:60:eb:a3:8a:67:b3:d9:08:33:
                    93:4a:62:c5:2d:c9:c5:e0:41:21:30:b9:41:bc:36:
                    3d:c7:ad:92:1e:7d:4e:2f:92:06:93:20:4a:ef:0c:
                    86:06:1b:48:7c:d3:79:65:a5:a8:f4:ec:d7:f9:4c:
                    01:1a:1a:94:31:c4:d3:29:40:2c:90:8f:a6:b9:67:
                    e5:81:39:67:3a:29:fa:4f:a5:ec:0e:be:57:e9:aa:
                    aa:f8:3d:a2:72:dc:fd:96:60:f9:f8:b8:ae:af:be:
                    75:7c:6e:9c:8a:03:ed:87:97:be:bb:1f:27:47:ba:
                    c9:d6:b3:8f:7d:f7:51:2c:2b:e3:5f:1b:75:7c:69:
                    2e:20:62:77:df:66:57:2b:d5:21:ca:bd:80:9e:3e:
                    a4:9c:68:8a:78:7c:08:4c:b3:18:65:67:98:a1:2c:
                    60:7a:51:3f:15:81:49:22:3a:8b:de:57:4e:72:f6:
                    8a:9f:5a:49:42:4a:7a:6d:1b:50:07:7d:0a:67:14:
                    3c:99:df:bc:bb:9a:30:7a:16:19:9d:2a:b5:e1:e0:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7D:88:59:51:3D:6E:3B:67:6E:B7:E1:8F:D4:30:FE:9C:42:D3:06
            X509v3 Authority Key Identifier:
                keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:bc:b8:38:b4:18:0f:b2:c9:4b:65:8a:2b:a3:46:1d:23:59:
         32:0f:25:53:e6:50:93:38:32:45:e6:27:59:8c:77:41:06:7c:
         15:4c:18:ee:d0:55:58:e6:af:f7:fd:4d:89:74:7e:da:ef:67:
         e8:fe:70:40:17:44:af:00:96:1f:29:60:a2:b1:bc:5e:6b:e9:
         43:36:ee:76:75:e6:a1:66:29:bd:ec:ba:c7:f2:fa:32:17:de:
         28:f4:d4:c2:13:87:53:67:3d:7b:53:de:f2:d5:61:ec:34:02:
         88:30:ea:c2:b3:a3:00:c8:f8:ab:b1:fb:15:44:08:7b:d2:87:
         49:1e:d1:8c:d5:ca:df:94:5d:40:e2:03:0d:6a:60:37:e2:c9:
         61:4d:ab:84:cc:0e:e0:0b:21:95:23:22:e3:57:32:c8:b9:01:
         cd:2b:a7:44:1a:a7:db:2e:e3:1b:99:19:62:ce:59:5c:ae:de:
         12:07:b7:d8:31:fe:d9:8d:89:9b:c8:cc:e6:ba:8a:7d:58:6a:
         dc:b1:b4:ce:ab:d3:b6:b1:29:61:f0:bd:bd:25:c5:ad:2c:5c:
         6b:a4:17:db:ee:54:9b:0c:d5:6e:18:4a:92:69:e8:e4:fd:fe:
         52:4b:eb:15:c1:69:7f:26:de:88:c8:4b:1d:4a:4d:06:1c:20:
         70:fb:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:37 2026 by rpki-client