Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File:                     fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier:          x4/33B6lIyCixAtWDDqYqy9wwJTY1B6QlPsrQVPQkT0=
Subject key identifier:   27:9F:3E:84:D9:4B:33:28:75:F2:73:70:E6:7F:2A:02:60:BA:04:88
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer:       /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial:       356C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number:          3565
Signing time:             Wed 22 Jul 2026 14:41:05 +0000
Manifest this update:     Wed 22 Jul 2026 14:41:04 +0000
Manifest next update:     Wed 29 Jul 2026 14:41:04 +0000
Files and hashes:         1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: GcVq4LiMMF2qFvU+/v5Jge9GyznuwO0r549suYOS0gI=)
                          2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: HjtXlASFfUyesyuq12S6h4/nNp1al3EbTL9dYMiuAwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13676 (0x356c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
        Validity
            Not Before: Jul 22 14:41:04 2026 GMT
            Not After : Jul 29 14:41:04 2026 GMT
        Subject: CN=6a60d681-8ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:e3:8d:5b:78:fe:d2:2b:cb:cc:0b:11:33:
                    b5:31:ee:61:d3:e7:1e:98:68:74:c2:69:ff:02:93:
                    b1:90:21:86:ea:49:aa:9c:de:ad:1d:92:53:36:14:
                    91:fe:f6:f4:68:b8:d6:d0:e2:14:63:8e:a2:3a:93:
                    31:7c:06:77:36:32:97:c2:69:ee:fc:83:74:0a:75:
                    09:9d:18:7b:16:85:4e:a6:e1:9f:56:56:72:45:05:
                    37:d1:65:a7:aa:43:0b:47:64:34:9a:3f:05:af:59:
                    62:e0:f5:a6:f2:76:58:03:ae:e1:db:3e:c8:40:ee:
                    ed:61:2d:2a:e4:23:6a:ab:5f:0d:e4:df:07:0b:73:
                    9d:53:5f:98:b1:e5:87:67:5f:62:1a:eb:ba:e0:a2:
                    d7:64:b0:c1:60:ed:1f:2e:fa:09:97:09:76:01:11:
                    27:42:8f:6f:1a:6c:56:89:9c:a8:89:55:e6:35:90:
                    0c:aa:b5:92:00:ab:80:fd:af:08:76:db:d3:3a:97:
                    02:b2:5e:92:95:6b:bf:88:fa:fe:bb:2f:98:49:dc:
                    56:23:bf:9e:ef:87:7a:7d:13:75:25:a2:85:99:98:
                    fc:53:ad:53:ce:4a:fd:59:bb:96:c9:97:e5:91:b0:
                    ec:0e:ea:e0:d0:74:b6:ec:35:12:1f:49:b7:00:a2:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:3E:84:D9:4B:33:28:75:F2:73:70:E6:7F:2A:02:60:BA:04:88
            X509v3 Authority Key Identifier:
                keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:dd:c3:cb:97:25:d5:dd:80:6a:56:aa:f4:ee:51:cd:70:ce:
         e3:23:09:51:31:86:ca:1c:f2:10:41:2f:25:19:7d:e1:64:82:
         99:e7:d1:4c:59:85:37:ac:f5:e3:5e:e8:81:44:b3:31:45:a9:
         f0:84:59:93:c5:0d:94:c8:76:c5:22:0a:09:7e:e7:12:c7:8d:
         34:61:7c:2c:68:5c:9c:5d:be:ea:a7:00:db:c4:74:e7:5a:c4:
         e7:88:d8:ff:29:28:64:9c:b7:c7:4b:e0:5e:ef:0b:a9:10:70:
         d5:a8:54:66:3c:4e:7d:e9:72:de:b4:51:67:eb:e4:26:c5:5e:
         0a:df:86:6a:d5:bc:37:1a:ff:86:66:15:7b:af:ba:d1:bc:82:
         e9:2a:97:5c:a1:fe:96:e3:8b:7d:bd:17:88:6b:06:f2:01:eb:
         af:06:3b:60:3b:c9:81:98:5f:c8:31:9e:ff:f0:4e:df:05:15:
         25:04:40:bc:38:c7:38:b2:14:e7:bc:36:a2:a1:5e:b2:dd:2c:
         23:be:a3:de:e7:8a:39:e9:93:60:df:13:fa:e1:8d:ab:e7:97:
         5c:17:ba:97:ad:38:b2:e8:67:fe:6d:75:f7:ff:7b:7b:62:2a:
         19:d7:58:f8:61:c6:e5:f6:a9:76:3b:4a:5c:cc:85:94:41:5c:
         ba:bf:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:16 2026 by rpki-client