Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
File:                     3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json)
Hash identifier:          mHPjYaedpiG75bQWtlNbjsdnuDiJl6jhKxVvDT+3rO0=
Subject key identifier:   C2:0A:EC:50:56:D8:D5:87:7F:DA:C9:49:38:10:4B:EC:D6:1F:CB:73
Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E
Certificate issuer:       /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
Certificate serial:       1C41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
Manifest number:          1C18
Signing time:             Wed 22 Jul 2026 16:18:30 +0000
Manifest this update:     Wed 22 Jul 2026 16:18:30 +0000
Manifest next update:     Wed 29 Jul 2026 16:18:30 +0000
Files and hashes:         1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: 8CW3/FfsnMr/bFSXsQaPPPH3uzbbwrVU+vKXV0U0ZzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl
                          rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7233 (0x1c41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
        Validity
            Not Before: Jul 22 16:18:30 2026 GMT
            Not After : Jul 29 16:18:30 2026 GMT
        Subject: CN=6a60ed56-8b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:7d:5c:0d:ef:66:3a:ad:99:9c:67:7f:1d:
                    b6:df:8a:af:25:16:e4:fc:ef:c0:b9:74:99:fd:ee:
                    a6:98:92:e3:ae:f4:bc:8f:2f:50:8d:e3:c6:15:c1:
                    5b:99:bf:ba:b5:32:be:4b:09:06:81:19:2f:73:ae:
                    e4:69:e2:cb:88:97:11:89:e6:c6:2a:ea:5b:16:c2:
                    53:de:6b:f4:e0:a2:0b:a8:df:a3:ee:ec:60:bf:3b:
                    52:f8:11:4f:6e:42:24:be:de:a7:17:d5:bc:e7:7c:
                    6c:fe:99:f2:5c:05:1a:b1:2d:d2:3c:16:11:62:e1:
                    a6:2e:be:b8:8e:b2:b5:25:4e:26:56:72:19:99:ea:
                    a3:ab:2b:40:ba:d1:58:cf:ec:62:ab:66:43:cd:cd:
                    76:50:94:6e:e4:72:ad:91:2d:5f:00:42:f3:3c:d6:
                    ce:b3:c1:52:f7:14:ed:c9:ad:8b:77:c5:b4:1f:b3:
                    4b:d4:c7:d6:d9:84:7a:f3:90:e4:5d:13:70:1c:17:
                    94:e0:18:33:26:be:59:86:1e:ab:a8:16:60:e2:4e:
                    b9:1d:18:b2:b8:b4:ec:07:1f:c6:08:80:a1:40:c4:
                    6a:69:bf:74:52:47:73:9b:a9:f4:b7:d4:d7:7a:30:
                    a5:80:f0:26:b6:f2:a5:e4:6a:dc:a8:d9:e1:a1:b7:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0A:EC:50:56:D8:D5:87:7F:DA:C9:49:38:10:4B:EC:D6:1F:CB:73
            X509v3 Authority Key Identifier:
                keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:b7:af:de:9a:69:96:16:4d:91:e0:1d:4a:97:a1:2f:f4:
         72:10:96:58:be:dd:5a:dc:d0:cf:50:8b:c4:f6:b4:56:66:07:
         45:7e:aa:ed:b8:7d:90:54:2e:1f:ae:60:fe:2d:09:82:59:df:
         5b:60:b6:a9:3c:e3:83:9e:ff:ff:f3:c3:31:ba:8b:c1:69:8d:
         21:69:38:39:99:3b:44:e9:0d:3b:2b:dc:b0:38:37:55:c3:cb:
         61:dc:28:a4:54:65:6e:89:4d:2e:52:74:c4:63:51:46:20:d6:
         52:8b:d4:22:ba:14:ce:7a:91:ff:62:bc:a9:ae:14:de:e4:7c:
         dc:97:4b:86:07:13:f6:28:8e:77:cc:61:e7:95:53:b4:ac:56:
         55:dd:d3:62:8b:4f:82:d8:fe:ca:c8:ef:ec:9e:c8:4e:e5:a6:
         22:a5:03:15:ef:a1:22:8a:85:2e:d6:cb:4c:f7:c4:d4:c3:8f:
         20:2f:ca:38:78:45:e1:c2:b5:d0:d1:23:4d:11:9b:87:a1:e5:
         ad:bd:29:e0:f8:7c:f4:bb:36:20:e9:ab:fd:7f:62:4f:71:05:
         74:12:d3:17:37:a8:34:15:07:24:b9:3a:cb:88:58:af:a4:97:
         cc:c8:a6:d8:b0:8b:a0:cd:37:95:69:2c:c2:25:e4:b8:7c:19:
         6d:45:e7:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM0RTExMTAvBgNVBAUTKERDMUIzOUI1NEY2MDg5MUFDNzc4QTkzMTZENzFCMEJF
ODAwNjM5NkUwHhcNMjYwNzIyMTYxODMwWhcNMjYwNzI5MTYxODMwWjAYMRYwFAYD
VQQDEw02YTYwZWQ1Ni04YjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+59XA3vZjqtmZxnfx2234qvJRbk/O/AuXSZ/e6mmJLjrvS8jy9QjePGFcFb
mb+6tTK+SwkGgRkvc67kaeLLiJcRiebGKupbFsJT3mv04KILqN+j7uxgvztS+BFP
bkIkvt6nF9W853xs/pnyXAUasS3SPBYRYuGmLr64jrK1JU4mVnIZmeqjqytAutFY
z+xiq2ZDzc12UJRu5HKtkS1fAELzPNbOs8FS9xTtya2Ld8W0H7NL1MfW2YR685Dk
XRNwHBeU4BgzJr5Zhh6rqBZg4k65HRiyuLTsBx/GCIChQMRqab90Ukdzm6n0t9TX
ejClgPAmtvKl5GrcqNnhobccfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIK7FBW
2NWHf9rJSTgQS+zWH8tzMB8GA1UdIwQYMBaAFNwbObVPYIkax3ipMW1xsL6ABjlu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzRFMS8yMDA0RjE0NDE2
MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lSckhlS2t4YlhHd3ZvQUdP
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNCczV0VTlnaVJySGVLa3hiWEd3dm9BR09XNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzRFMS8yMDA0RjE0NDE2MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lS
ckhlS2t4YlhHd3ZvQUdPVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf+y3r96aaZYWTZHgHUqXoS/0chCWWL7dWtzQz1CLxPa0VmYHRX6q7bh9kFQu
H65g/i0JglnfW2C2qTzjg57///PDMbqLwWmNIWk4OZk7ROkNOyvcsDg3VcPLYdwo
pFRlbolNLlJ0xGNRRiDWUovUIroUznqR/2K8qa4U3uR83JdLhgcT9iiOd8xh55VT
tKxWVd3TYotPgtj+ysjv7J7ITuWmIqUDFe+hIoqFLtbLTPfE1MOPIC/KOHhF4cK1
0NEjTRGbh6Hlrb0p4Ph89Ls2IOmr/X9iT3EFdBLTFzeoNBUHJLk6y4hYr6SXzMim
2LCLoM03lWkswiXkuHwZbUXn+g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:31:18 2026 by rpki-client