Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
File:                     N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft (raw, json)
Hash identifier:          3A7wg5LQgs857BrF1w2Wx7mw9Ukx6ZY+M2L0PNZ2mWE=
Subject key identifier:   14:AF:25:99:DE:35:05:3D:86:9B:B5:08:23:CD:AA:23:96:6E:C2:24
Authority key identifier: 37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
Certificate issuer:       /CN=A91F53A5/serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
Manifest number:          28
Signing time:             Thu 23 Jul 2026 01:27:26 +0000
Manifest this update:     Thu 23 Jul 2026 01:27:25 +0000
Manifest next update:     Thu 30 Jul 2026 01:27:25 +0000
Files and hashes:         1: N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl (hash: oYcH2o7cPmv1l8AlsFPL0DIK/+X2mOfOTaEVbn3KV58=)
                          2: 8F3BB5304DCD11F191088215B4833773.roa (hash: lA3Zts59kRJf+K26QY68A9dBrBr6aTNWe+CFgHwsnZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
                          rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53A5, serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
        Validity
            Not Before: Jul 23 01:27:25 2026 GMT
            Not After : Jul 30 01:27:25 2026 GMT
        Subject: CN=6a616dfe-f599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:08:ff:45:b7:34:c8:72:6e:fa:df:ae:d8:
                    45:48:6a:af:15:2e:1a:ef:25:55:71:de:18:13:f9:
                    c2:c3:2f:93:86:33:42:ae:0b:c0:7f:d9:6b:9f:1c:
                    3b:f6:56:3b:d6:1e:e8:4c:dd:c1:52:a5:d7:4d:ec:
                    09:3a:fa:20:84:1d:75:66:c4:22:28:b5:a9:27:a9:
                    96:ca:85:e8:30:8f:d5:5e:55:f3:f6:f5:52:3e:40:
                    40:ed:a9:3e:db:66:64:07:ae:a9:65:3a:c3:14:1b:
                    47:3c:fc:db:cc:55:e9:ea:d1:2f:81:2e:57:43:2c:
                    f9:79:01:d5:af:56:7e:0f:3f:ac:55:7f:45:b6:38:
                    2e:af:e2:70:83:17:0b:8f:09:08:e6:0e:8e:45:6e:
                    33:b7:34:b6:c5:87:dc:1f:1e:5b:fa:0a:03:86:7a:
                    69:69:9c:c3:11:fc:e1:b7:31:5f:bc:28:47:b7:f6:
                    25:af:44:9c:92:4d:ea:1c:25:cd:4d:bc:ff:62:da:
                    0c:81:e5:57:c4:65:39:fc:3a:ae:41:4e:59:90:c8:
                    de:f3:c1:0f:37:d3:7a:6e:ca:da:2b:2b:b5:95:56:
                    8a:72:4c:0e:d2:30:9d:f8:ef:7d:14:c7:57:bb:bb:
                    91:15:a4:39:49:54:16:64:c4:6c:18:ae:03:fa:ed:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:25:99:DE:35:05:3D:86:9B:B5:08:23:CD:AA:23:96:6E:C2:24
            X509v3 Authority Key Identifier:
                keyid:37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:07:93:c5:4b:fc:e4:bd:ec:65:21:db:de:21:36:e1:d8:00:
         45:3a:92:c6:d2:e2:b0:3a:d9:0b:86:f6:b2:94:b6:d3:64:9b:
         82:ff:ed:c0:ea:8d:82:e7:73:7d:e2:9d:e2:37:37:83:ad:85:
         f4:7d:29:1a:b6:ab:27:0e:26:4f:0c:2a:77:00:5d:70:68:c7:
         27:6f:7e:05:3a:4d:a3:ae:e2:76:2b:91:35:be:fc:ac:f7:94:
         cc:cd:84:55:8e:96:3e:40:7f:83:df:cb:10:37:09:89:ee:dd:
         bf:24:d1:73:e5:be:d9:0c:ae:89:01:24:c0:95:1e:bb:9b:d1:
         93:72:f0:86:54:14:8e:51:dc:d8:15:21:a5:47:11:8b:93:01:
         2c:f0:dc:89:02:b9:d0:82:6f:b8:e2:bd:63:ff:35:68:5c:d2:
         06:0f:a5:f3:3e:50:98:6d:cb:20:ce:4e:d6:05:9b:20:82:0d:
         8e:42:16:54:8b:7e:06:bd:24:c5:64:ed:48:cb:5c:13:cd:c4:
         37:02:2e:f3:c3:62:e2:8d:61:5c:86:a4:8a:30:a8:3f:84:6e:
         51:80:ce:ac:48:bf:56:fc:1a:61:86:c2:87:93:9f:fa:39:25:
         b5:af:39:d9:54:97:77:a8:07:61:27:62:02:c7:6b:89:65:39:
         7e:e8:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:45 2026 by rpki-client