Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
File:                     x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json)
Hash identifier:          cotV2sipZslRdysVwnEGsRaupgkNI7MGKYeTMSLUpNk=
Subject key identifier:   7D:D0:BF:E2:1E:51:B8:1C:44:60:91:9D:7F:35:47:EF:D4:B1:35:0F
Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B
Certificate issuer:       /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
Manifest number:          0625
Signing time:             Wed 22 Jul 2026 23:30:51 +0000
Manifest this update:     Wed 22 Jul 2026 23:30:50 +0000
Manifest next update:     Wed 29 Jul 2026 23:30:50 +0000
Files and hashes:         1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: +vV3ciJK/ROsJV+g6B5/eeYoWlnPscfL0gFMB1VR5eM=)
                          2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: MxvR1rcmc4G61O3M2p+Nubwh7XGQrabkCeb791C2Gt0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl
                          rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B
        Validity
            Not Before: Jul 22 23:30:50 2026 GMT
            Not After : Jul 29 23:30:50 2026 GMT
        Subject: CN=6a6152ab-4379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:e9:7d:1c:14:8f:4b:ef:10:b6:32:78:1c:
                    94:f3:2b:35:5b:6d:a3:0a:2b:b4:4e:e9:8e:be:9c:
                    7f:a9:1d:20:57:4a:5e:5f:29:93:c7:a4:6b:ae:27:
                    a1:4b:e8:5a:04:5e:56:db:7d:18:b6:0b:15:6a:0d:
                    99:ce:3e:9c:56:89:21:f9:0f:8e:44:a5:85:d6:3f:
                    9d:b4:25:d8:69:69:3d:38:56:f6:ce:bb:27:74:12:
                    ea:bb:70:73:fe:5f:51:03:d9:1e:2f:a7:b4:48:17:
                    e4:5a:5e:5f:4c:cc:1d:8a:f5:c1:de:f1:8a:75:74:
                    b3:fa:34:6d:18:8e:8e:08:75:66:c0:78:c4:e8:fa:
                    49:0c:56:ff:0a:88:1c:cc:da:6b:ef:b0:3d:3c:2c:
                    59:d2:e0:05:fc:23:98:24:d0:e9:81:a1:ab:13:88:
                    2d:ca:a0:71:64:1e:21:ce:50:e0:f8:5b:2b:d2:68:
                    b3:91:dd:d7:eb:d0:02:58:88:b5:f5:b8:69:80:c3:
                    35:b5:e3:52:e8:ca:8c:05:6e:36:64:da:28:0b:67:
                    3a:99:7c:77:90:ba:6d:d0:dd:f7:99:8f:c0:45:99:
                    e8:d2:a5:d1:55:bd:37:9b:3c:3a:50:d1:d7:e3:5e:
                    b9:7d:a0:22:03:53:ad:25:60:4e:c1:d6:0b:74:4c:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D0:BF:E2:1E:51:B8:1C:44:60:91:9D:7F:35:47:EF:D4:B1:35:0F
            X509v3 Authority Key Identifier:
                keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:43:cd:c6:74:50:9c:c5:53:95:2b:29:36:14:ab:dc:fd:70:
         9c:11:89:4b:2d:dd:3a:19:f6:22:e4:ac:88:2a:4d:66:e4:84:
         a3:3e:24:0a:4e:63:29:ad:5f:44:17:8b:8c:9b:ae:22:12:87:
         ac:44:13:6a:c0:34:f3:25:c9:5b:dc:73:6d:c4:db:6d:c5:b1:
         38:27:84:02:13:89:ea:c7:5b:72:66:91:fa:90:44:e9:e1:55:
         21:49:ec:55:95:06:b9:b9:85:60:44:2a:6a:75:9f:b5:9a:de:
         98:6d:88:29:13:11:7c:00:7f:16:89:ba:c2:d1:39:53:87:5c:
         6b:2d:18:68:6e:14:81:40:f0:04:d2:b2:ef:f8:9c:f5:39:10:
         45:87:64:bf:ca:bb:2d:3b:d1:20:66:da:f2:ad:3b:54:75:df:
         06:dd:73:57:1d:4e:3e:21:ae:bc:74:66:23:39:74:f3:55:a4:
         a5:a6:e0:3b:79:8b:9a:9a:74:6a:7a:9c:a8:c0:a2:a9:d7:98:
         1d:1b:20:6c:a0:81:5b:3e:89:88:47:0b:7e:22:81:68:23:f8:
         f7:56:c7:61:7d:98:c1:c7:7f:8e:02:3e:ea:4a:87:32:e4:f8:
         06:e3:d8:91:65:e4:43:81:47:d6:2a:31:03:29:99:9f:eb:36:
         5a:90:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:28 2026 by rpki-client