Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
File:                     379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json)
Hash identifier:          t7pUpa8hnmVvbeTG9K1IsI9+bOx0m+Z/4XMhGay9NUs=
Subject key identifier:   8A:E3:04:36:58:05:A4:72:08:FD:CE:E5:33:ED:D9:E5:40:3C:E3:30
Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
Certificate issuer:       /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Certificate serial:       05A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
Manifest number:          0599
Signing time:             Wed 22 Jul 2026 23:58:56 +0000
Manifest this update:     Wed 22 Jul 2026 23:58:56 +0000
Manifest next update:     Wed 29 Jul 2026 23:58:56 +0000
Files and hashes:         1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: G4/nAAcqwfaWVoskel5WVcS6mptvo4ps3bDms7UIgGI=)
                          2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: bUHBBf5sOas57JoBnuGlqh7PgAmJoHgi2CnQkJdmpgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl
                          rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
        Validity
            Not Before: Jul 22 23:58:56 2026 GMT
            Not After : Jul 29 23:58:56 2026 GMT
        Subject: CN=6a615940-a8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:d9:ba:19:d4:74:c0:cd:da:63:9b:ca:f5:
                    ac:8c:45:e0:c0:58:6b:da:7d:a4:06:47:49:6c:1f:
                    ae:07:d1:6c:c8:d7:c8:cc:17:60:57:97:00:4e:2c:
                    ca:9b:49:c6:82:82:a6:72:ea:05:c9:5b:e4:35:df:
                    a1:0c:0f:85:f7:18:ff:3e:e0:d1:0f:9a:8a:c8:be:
                    da:b4:4b:57:e0:0d:4a:6b:e7:8c:2e:29:62:02:7f:
                    38:e6:8f:cd:7a:f7:e1:94:80:02:58:4b:b1:d2:75:
                    07:03:fb:17:6c:b6:a0:52:df:4a:e5:92:99:14:27:
                    78:53:9a:31:a0:d8:c6:e5:d8:03:60:e9:30:9c:89:
                    9a:90:7b:ba:a3:3b:87:9a:fb:95:2c:fc:9b:5f:02:
                    88:7c:bf:aa:cb:dd:a6:95:f9:6c:a5:2f:58:de:8e:
                    24:e7:44:65:73:3a:14:72:cd:54:77:9e:12:18:32:
                    f3:6e:85:49:67:d2:11:ec:9d:e9:de:e1:cd:81:7f:
                    d1:e9:ad:03:07:55:f3:8c:b4:b9:d6:1f:e8:a2:95:
                    36:27:8d:24:c6:4d:a3:75:f2:64:0e:c3:8c:76:47:
                    93:bc:77:fe:03:45:ae:cf:17:07:39:5c:c2:45:95:
                    82:0b:c9:45:9c:c8:5b:80:13:d1:28:0f:69:4a:58:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E3:04:36:58:05:A4:72:08:FD:CE:E5:33:ED:D9:E5:40:3C:E3:30
            X509v3 Authority Key Identifier:
                keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:f9:ae:5f:32:9d:e0:a6:dc:e0:5e:c0:69:68:40:88:84:
         3b:09:ed:70:d2:b2:5c:96:ec:ae:fc:76:ab:c9:de:4a:32:7d:
         92:6a:4f:7f:b7:c7:3d:52:f6:7e:1c:4c:2e:bc:3e:ba:a5:a9:
         fa:3e:c7:4d:b8:05:a7:be:d5:51:6d:f7:74:9f:ea:61:f5:09:
         18:ee:41:0d:51:29:27:89:e2:87:c6:09:a1:6d:ba:6a:00:6a:
         0e:ed:88:43:46:e7:81:a6:0c:7b:9c:42:be:ce:49:9d:d1:17:
         cd:94:eb:7e:91:79:cc:e6:38:a8:f9:5d:bd:6a:f3:75:19:0d:
         e3:2b:5e:45:8e:1d:74:92:2b:bc:9f:b7:d0:62:d1:b3:39:0e:
         bf:66:b1:61:d8:02:33:55:cc:34:fa:b0:dd:92:a4:39:e9:8c:
         e2:21:3f:4e:c6:25:da:8e:c0:7b:84:e4:d4:bd:96:f4:d0:79:
         22:92:4a:64:72:65:cc:9e:96:78:c6:e6:a6:d2:65:2a:f4:1f:
         9d:00:a3:6e:56:75:ad:5e:d7:f6:d4:0d:77:d2:eb:03:a3:26:
         35:ff:6e:14:79:af:a3:67:ea:5e:de:6c:dc:bc:7b:29:5d:b9:
         ba:ec:65:4a:99:af:73:24:23:d1:54:c8:88:87:3a:5d:59:5f:
         ee:09:f7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:20 2026 by rpki-client