Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File:                     3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier:          fKJPVmwSJhsAgGJQ51jsTWTFRt0SgUyrHoyGzjwtMtw=
Subject key identifier:   D0:B1:A8:BF:4B:9F:87:5B:0F:6A:6C:06:13:F1:BC:6A:B9:33:3E:F9
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer:       /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial:       0908
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number:          08FB
Signing time:             Wed 22 Jul 2026 20:46:20 +0000
Manifest this update:     Wed 22 Jul 2026 20:46:19 +0000
Manifest next update:     Wed 29 Jul 2026 20:46:19 +0000
Files and hashes:         1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: 5P6sV7uNNuyaTO+CseZdyd38D6gneOkfspVrepqwJN8=)
                          2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: 3Ec92baJsmBFXlv6Q2B/yYGvWMA45NR4PIY2EvsfluM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
        Validity
            Not Before: Jul 22 20:46:19 2026 GMT
            Not After : Jul 29 20:46:19 2026 GMT
        Subject: CN=6a612c1c-adc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8d:63:56:1a:80:4b:48:26:ec:80:a2:f1:5b:
                    d0:28:2c:d9:a7:37:ff:65:9b:4b:46:aa:57:b4:c0:
                    f2:ab:a2:4a:7c:83:a5:23:e1:0e:a7:17:ad:56:4b:
                    e4:03:d7:4f:de:3b:5b:04:43:22:2a:79:ca:1a:bf:
                    8d:34:78:8d:0a:68:1d:46:1d:50:00:42:2e:1c:4e:
                    cc:d0:b0:35:2b:4a:07:7b:8e:61:73:ca:6d:ff:1a:
                    1b:b0:fc:f5:5d:63:15:e8:0b:60:78:69:42:89:d9:
                    87:54:a9:c7:36:16:0d:c6:83:37:11:57:41:2b:99:
                    27:35:77:ce:b2:b1:c8:1f:eb:d7:78:d6:ba:12:85:
                    19:94:8f:57:df:d9:f6:d9:dc:78:ed:74:f3:97:50:
                    e3:a2:a4:4a:df:60:ee:14:fa:62:0c:74:dc:67:db:
                    84:3e:21:3d:65:4d:d1:f4:4a:ed:29:8a:5d:c5:80:
                    7d:5f:bd:ee:92:cb:26:16:98:3a:20:a6:fe:41:f3:
                    82:a6:22:95:e8:7d:3e:3c:cf:f7:64:86:2f:ec:1c:
                    13:34:06:56:db:88:92:0d:c0:a4:b7:a3:8c:d3:3d:
                    21:fe:60:db:7d:51:31:ef:31:da:99:6f:98:20:b9:
                    ac:3d:e9:02:49:66:a9:27:7d:e7:88:c4:e9:d5:52:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B1:A8:BF:4B:9F:87:5B:0F:6A:6C:06:13:F1:BC:6A:B9:33:3E:F9
            X509v3 Authority Key Identifier:
                keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d7:fc:99:ac:52:7c:2e:b1:27:64:3e:ac:ab:a7:bd:3d:f5:
         df:52:51:e6:3b:d4:a0:d5:e1:fa:47:15:a1:52:49:9a:e0:78:
         8a:81:95:05:fe:59:90:77:2e:85:ae:c5:44:61:a9:b5:ca:bb:
         96:a6:8f:4a:bf:0d:8a:3b:62:01:d9:05:c9:0e:f4:b2:8a:91:
         38:11:02:59:8b:d0:c2:00:4a:6f:9a:58:ff:23:af:f4:68:f7:
         94:81:9f:4b:5d:3a:db:a6:56:5d:43:30:02:31:48:2c:ae:e5:
         04:80:01:e6:0a:d4:ad:8f:68:d7:8c:52:8c:75:b4:1c:c8:23:
         c9:54:7a:b4:d9:93:e2:53:ec:19:52:80:9c:df:3a:6a:82:39:
         ea:32:5e:20:ca:2d:af:e8:53:75:86:69:e8:24:1e:1e:50:1b:
         d9:5d:16:ee:18:b7:e5:ee:84:b8:16:e8:2e:1e:45:f7:9f:28:
         90:c4:5b:e0:fa:ec:73:ef:2b:2a:4d:47:d6:c9:3c:19:d6:ff:
         7d:de:d1:54:e2:ef:59:0a:d8:05:41:56:52:63:0e:87:a2:22:
         bd:ca:8d:eb:a1:f8:6c:47:fd:85:28:3f:65:57:40:59:59:0a:
         9d:08:7c:a3:20:d1:0b:aa:bc:a8:16:d9:eb:3f:02:35:09:ea:
         bb:5d:71:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4
RjhBMjA2QzYwHhcNMjYwNzIyMjA0NjE5WhcNMjYwNzI5MjA0NjE5WjAYMRYwFAYD
VQQDEw02YTYxMmMxYy1hZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA241jVhqAS0gm7ICi8VvQKCzZpzf/ZZtLRqpXtMDyq6JKfIOlI+EOpxetVkvk
A9dP3jtbBEMiKnnKGr+NNHiNCmgdRh1QAEIuHE7M0LA1K0oHe45hc8pt/xobsPz1
XWMV6AtgeGlCidmHVKnHNhYNxoM3EVdBK5knNXfOsrHIH+vXeNa6EoUZlI9X39n2
2dx47XTzl1DjoqRK32DuFPpiDHTcZ9uEPiE9ZU3R9ErtKYpdxYB9X73ukssmFpg6
IKb+QfOCpiKV6H0+PM/3ZIYv7BwTNAZW24iSDcCkt6OM0z0h/mDbfVEx7zHamW+Y
ILmsPekCSWapJ33niMTp1VIywwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCxqL9L
n4dbD2psBhPxvGq5Mz75MB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0
RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3
M2dfRVMtZUVKQkdQaWlCc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADNf8maxSfC6xJ2Q+rKunvT3131JR5jvUoNXh+kcVoVJJmuB4ioGVBf5ZkHcu
ha7FRGGptcq7lqaPSr8NijtiAdkFyQ70soqROBECWYvQwgBKb5pY/yOv9Gj3lIGf
S10626ZWXUMwAjFILK7lBIAB5grUrY9o14xSjHW0HMgjyVR6tNmT4lPsGVKAnN86
aoI56jJeIMotr+hTdYZp6CQeHlAb2V0W7hi35e6EuBboLh5F958okMRb4Prsc+8r
Kk1H1sk8Gdb/fd7RVOLvWQrYBUFWUmMOh6IivcqN66H4bEf9hSg/ZVdAWVkKnQh8
oyDRC6q8qBbZ6z8CNQnqu11xHw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:39 2026 by rpki-client