Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
File:                     3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json)
Hash identifier:          rb3IneMjgyD/d5dV7N2WM5MMisnWly9JBs9zKLlZiQc=
Subject key identifier:   DB:EF:EB:5E:06:99:71:C9:2D:7E:7D:4B:7E:63:AB:7A:FA:B7:40:3E
Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C
Certificate issuer:       /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
Manifest number:          024B
Signing time:             Thu 23 Jul 2026 02:48:57 +0000
Manifest this update:     Thu 23 Jul 2026 02:48:57 +0000
Manifest next update:     Thu 30 Jul 2026 02:48:57 +0000
Files and hashes:         1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: 3+J01tUCMG5GeNdlT/JiU9qDP6y7N27Swj5uTbPmdd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
        Validity
            Not Before: Jul 23 02:48:57 2026 GMT
            Not After : Jul 30 02:48:57 2026 GMT
        Subject: CN=6a618119-d62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:62:d9:79:1f:4e:9c:16:4d:7a:30:b8:de:
                    8d:1c:4e:c5:1a:77:6b:ba:71:26:fa:ec:15:78:cd:
                    a9:f5:f5:bd:63:21:1f:19:86:2c:23:30:23:23:08:
                    3d:37:87:26:91:39:47:ff:ea:f9:66:c6:90:fc:1e:
                    78:18:a0:e2:67:b8:3c:1c:4b:0d:e0:81:8c:5b:ef:
                    09:78:ef:d4:e5:2c:aa:32:49:7c:69:57:58:6f:d5:
                    c3:cf:ac:6f:e4:3a:81:a9:17:e4:ac:7e:ea:09:ae:
                    ca:12:49:23:d8:9f:50:50:b1:98:29:aa:2a:73:51:
                    b0:67:27:f0:fa:bc:5f:ad:1d:fc:d1:96:6a:33:be:
                    b3:45:35:2f:3e:6d:f3:38:2d:74:5d:9f:4e:fa:4d:
                    d0:8c:48:66:e6:2f:c9:48:63:89:4d:42:69:8f:a6:
                    42:fd:74:c4:c7:b1:d7:ff:a4:31:4e:47:6a:fc:83:
                    fd:df:86:ca:46:3f:40:a1:b4:aa:f9:a8:25:d9:7f:
                    ba:cc:07:93:92:f1:f3:74:6a:9c:54:5b:85:5d:63:
                    77:4e:4e:6e:c2:69:f1:d5:69:ec:c7:c7:03:62:5b:
                    72:72:d6:21:ae:cd:53:de:d1:d9:2d:2e:9c:fe:8c:
                    cc:d4:d8:35:e7:53:5b:f7:4c:74:ee:0f:78:a0:69:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EF:EB:5E:06:99:71:C9:2D:7E:7D:4B:7E:63:AB:7A:FA:B7:40:3E
            X509v3 Authority Key Identifier:
                keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:31:7c:bd:d3:7c:e9:58:fb:12:40:15:cb:46:e8:62:56:
         ed:81:7a:d9:74:21:58:79:9b:72:e5:2a:da:ee:04:d5:7d:2c:
         89:ee:fc:07:b1:81:b6:58:a1:83:ad:cb:1f:2b:15:fc:af:c2:
         66:c5:1d:9c:0f:88:3d:c5:5f:4a:0e:f3:2c:e7:e7:77:8b:f7:
         d7:2b:5d:52:90:6a:c7:1c:2b:c6:41:7c:1a:6b:66:35:1b:6e:
         d7:1e:35:c0:36:48:fd:72:55:8c:47:e7:e3:75:73:5f:b4:50:
         d9:19:a1:5a:55:d4:0a:74:f8:e2:68:48:c5:ba:a9:6f:e1:02:
         9a:21:56:1f:20:9d:c0:13:26:9e:e4:1a:0c:07:5a:65:de:0e:
         63:5f:d7:96:90:78:79:e1:99:d2:d2:01:eb:8f:28:1e:a9:fd:
         06:f9:fe:f2:01:8e:1f:b2:21:d1:de:14:c7:23:e3:74:68:48:
         9b:22:c7:34:d0:9f:34:e0:a5:9b:25:ab:7f:95:61:38:4e:f7:
         52:3f:0c:f8:ce:62:5a:2e:8d:78:1f:e9:24:7f:b0:1a:a1:50:
         eb:3f:9c:7f:87:5b:6b:a9:0d:7e:ff:69:73:1b:8c:62:3e:e5:
         d6:55:fc:90:fa:7c:f2:aa:bc:45:ef:bf:11:b7:5b:c5:36:77:
         c2:5c:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:37 2026 by rpki-client