Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
File:                     3Y89lj-o0fItV_Tfspq9cNJVjjc.mft (raw, json)
Hash identifier:          ZcwkXJYq7PAUMI0nS9P/wn+E29fuGt+MwKrBCRegl3Y=
Subject key identifier:   08:F2:BC:18:36:FE:9B:45:0B:06:2C:30:3D:92:FD:2C:02:03:78:43
Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37
Certificate issuer:       /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
Certificate serial:       0398
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
Manifest number:          0391
Signing time:             Thu 23 Jul 2026 01:38:36 +0000
Manifest this update:     Thu 23 Jul 2026 01:38:35 +0000
Manifest next update:     Thu 30 Jul 2026 01:38:35 +0000
Files and hashes:         1: 3Y89lj-o0fItV_Tfspq9cNJVjjc.crl (hash: OdH+bAESRgOXAGqK2K+ODDdc+21ymCdb5LcvK/Gedcg=)
                          2: 76C5241CF47311EC8721C33DC4F9AE02.roa (hash: PJNN23fDPqaEdDsm5vZGPWP/DmPwgv21Z3U/EtL0Bso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl
                          rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D506C, serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
        Validity
            Not Before: Jul 23 01:38:35 2026 GMT
            Not After : Jul 30 01:38:35 2026 GMT
        Subject: CN=6a61709c-da0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:b7:6f:8d:c8:9c:e0:65:2a:aa:e6:a4:c7:
                    a7:1a:4e:42:6a:d5:79:71:6b:90:da:12:db:63:2d:
                    52:31:ee:29:b0:c1:03:a3:e5:11:b7:8b:be:01:c3:
                    ae:28:b6:4b:31:00:a7:5f:76:9a:63:9d:bd:e8:c1:
                    7a:1a:de:82:ac:42:55:69:24:65:85:8c:33:b1:fa:
                    10:17:47:11:b9:c0:aa:85:01:91:5e:7d:37:e7:4c:
                    47:69:00:97:eb:dc:c7:2c:58:80:91:56:5c:35:e0:
                    60:1c:06:b3:54:b4:eb:64:b2:61:70:8d:19:5c:66:
                    d4:95:57:2e:19:f0:eb:b2:98:ee:53:e8:0e:5d:2a:
                    48:1b:11:de:d6:93:e0:cb:72:a2:8f:92:9c:3b:30:
                    a4:bf:7b:d3:40:72:9d:8f:fd:33:d7:aa:8a:7f:6c:
                    f6:85:d6:74:dc:20:f8:fd:29:30:64:d8:0b:ef:a8:
                    49:2d:2c:9b:70:f3:f5:c5:89:b1:6e:55:d7:12:e2:
                    f6:56:de:f0:04:9e:6e:e3:93:bf:99:27:d9:d7:c5:
                    51:41:cc:f4:18:f4:1d:9a:a9:33:52:34:ce:8e:14:
                    7d:34:b7:f1:8d:5f:ed:16:4a:1d:a7:9d:4b:73:81:
                    bb:fd:48:7f:57:3f:39:14:88:f0:26:21:cc:cf:a6:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F2:BC:18:36:FE:9B:45:0B:06:2C:30:3D:92:FD:2C:02:03:78:43
            X509v3 Authority Key Identifier:
                keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:da:bc:5e:c3:35:4f:a8:46:2d:64:d8:63:a2:88:d9:87:43:
         73:1b:bf:5a:be:93:96:e2:61:76:df:2a:c6:62:a7:84:1f:74:
         a1:2d:f5:3c:7e:f6:97:24:3f:40:a9:fa:74:81:b1:d0:2a:fb:
         8f:62:13:bc:0a:db:43:3a:37:17:04:dc:43:d1:4e:da:3f:96:
         93:6a:40:5d:c0:9a:28:32:11:37:f3:93:5c:65:3f:20:67:4c:
         75:99:05:2d:f1:b5:f4:63:6a:43:d6:57:ee:16:de:e7:f3:21:
         c9:ad:da:d0:2e:0b:0e:e7:07:23:90:23:ad:dc:24:c9:2d:62:
         6b:0a:63:ab:43:2c:ec:4c:e5:0e:75:22:76:4f:d9:5e:36:e4:
         66:31:6c:ea:42:8b:cf:47:f9:fd:c4:fd:18:f2:50:19:e5:32:
         0d:70:87:bf:db:16:9b:90:eb:bb:cb:7e:db:70:93:81:a5:97:
         21:65:f5:01:71:18:4d:ec:48:4f:0a:08:00:59:0d:ac:c2:66:
         93:02:55:b7:13:89:06:0b:12:c0:e4:75:ad:7c:1c:8e:03:ec:
         4f:41:13:65:04:54:16:2f:5d:be:60:ad:50:27:ce:5e:fd:b4:
         48:fa:a8:76:dd:50:7a:20:3d:9d:fa:91:c2:1b:26:42:ad:b9:
         e7:5a:8a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:12:23 2026 by rpki-client