Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
File:                     9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json)
Hash identifier:          S3aCPUCcbdQHxCrGQ64prWQdsJmVf3pj1gCiWt0UsAM=
Subject key identifier:   C9:35:CD:8B:2F:4D:CB:ED:22:92:FC:5A:60:97:DC:BA:44:50:B0:04
Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5
Certificate issuer:       /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
Certificate serial:       0D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
Manifest number:          0D25
Signing time:             Wed 22 Jul 2026 18:25:14 +0000
Manifest this update:     Wed 22 Jul 2026 18:25:13 +0000
Manifest next update:     Wed 29 Jul 2026 18:25:13 +0000
Files and hashes:         1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: lRiDhPnexYQ23SJwK+UdQHwe5ElF3cMcFo7hAX8Zcwc=)
                          2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lt2U8Cu18VjD9LLrlZLJxuz3gscrRVmnZ1LYN6DAgls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl
                          rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
        Validity
            Not Before: Jul 22 18:25:13 2026 GMT
            Not After : Jul 29 18:25:13 2026 GMT
        Subject: CN=6a610b0a-675c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:cd:48:db:1e:21:86:7a:70:29:50:33:84:
                    5b:31:7b:b6:cd:78:32:80:34:fb:e5:94:b7:2d:26:
                    b7:e7:fa:9e:87:03:79:a5:c8:97:e0:ee:07:7c:7e:
                    61:e2:00:76:0b:77:09:01:ed:08:31:ea:60:5c:86:
                    b1:df:2f:2b:76:36:aa:a2:e2:44:7b:f0:41:05:82:
                    ac:61:90:3f:46:2c:df:91:8d:b5:20:c3:24:d0:04:
                    b4:05:cd:f9:ea:cf:21:c3:72:4a:11:eb:e3:b9:e0:
                    fb:17:93:cc:31:46:fd:29:42:24:c5:b1:5b:f8:a5:
                    7f:4c:4f:09:b4:7f:1a:6a:1b:7a:71:ab:b5:0b:bd:
                    5b:3a:02:75:e5:69:7c:d0:d9:07:a1:d4:16:10:09:
                    3c:b8:de:92:ab:d7:ff:45:7c:85:8f:1e:eb:8a:0e:
                    46:07:f4:26:91:48:8b:8b:0e:10:c9:07:28:08:85:
                    6f:c6:9a:9b:f8:1b:ea:a0:ef:15:e9:be:16:f3:c0:
                    c0:68:29:b8:dd:a6:70:78:2e:36:f5:d2:b8:8e:78:
                    f4:57:64:14:3c:93:ed:07:73:d1:6e:ff:12:01:37:
                    3b:0b:ba:59:cb:91:2d:03:c2:b6:8f:45:4c:38:b3:
                    33:d2:1a:8a:f4:a9:6d:cb:8c:56:11:5a:a3:4d:6c:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:35:CD:8B:2F:4D:CB:ED:22:92:FC:5A:60:97:DC:BA:44:50:B0:04
            X509v3 Authority Key Identifier:
                keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a9:59:14:88:79:82:d0:15:27:e5:69:27:0a:b3:27:48:ec:
         83:b6:bd:6c:57:1a:16:01:d1:86:80:88:09:b7:41:f3:6d:37:
         1d:cb:a3:eb:e7:94:e7:9b:a2:8f:f7:90:0f:5b:8b:0d:91:71:
         56:4d:cc:e1:70:74:f5:86:25:a8:22:3d:33:0c:ba:69:0b:5a:
         9b:6a:e3:ba:8f:ae:e0:5b:c8:43:c9:c8:ad:e5:ce:6f:85:f9:
         6c:7e:62:5b:9e:cc:48:71:aa:0c:12:ee:d3:c8:f0:8e:0e:d0:
         c9:87:33:4d:c9:b3:f9:5c:1e:ff:2b:b0:81:5b:54:0b:3b:e9:
         80:e8:e6:80:ed:e0:f3:e4:ca:a6:ba:a0:b5:03:ee:10:ec:04:
         72:a2:c5:4b:52:7f:88:1c:55:00:34:55:e2:98:db:a4:17:e4:
         71:62:87:68:79:73:4e:bc:75:57:36:21:92:ef:4d:e4:4a:2b:
         28:25:8e:1b:cf:ef:6f:6d:84:2e:d2:43:6c:4d:61:f9:28:5e:
         ab:aa:e3:1c:00:3d:30:59:dc:87:d5:02:6e:1e:a0:08:5b:c0:
         8b:dd:50:29:2e:4c:c9:21:91:ef:e2:1f:82:cb:98:c1:07:ca:
         bc:d3:80:b2:3a:34:06:3d:30:80:76:f9:4d:64:57:6d:7c:53:
         0b:e0:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:16 2026 by rpki-client