Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File:                     n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier:          hhOsJCVqvZbvpM6UHQfwycXGMp6KSilzyhPaF7NvR90=
Subject key identifier:   62:FE:56:59:00:0A:8F:38:A8:63:53:80:A2:4F:57:E2:07:0B:4B:D4
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer:       /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number:          0104
Signing time:             Thu 23 Jul 2026 07:53:39 +0000
Manifest this update:     Thu 23 Jul 2026 07:53:39 +0000
Manifest next update:     Thu 30 Jul 2026 07:53:39 +0000
Files and hashes:         1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: JMdezEhsWr98e8qo6tGI0i7A7E87M/4EGXlisOxsHTU=)
                          2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
        Validity
            Not Before: Jul 23 07:53:39 2026 GMT
            Not After : Jul 30 07:53:39 2026 GMT
        Subject: CN=6a61c883-4616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:fe:eb:2f:40:9f:30:8f:ae:dd:c1:ae:d5:
                    bb:34:6f:32:bb:7b:83:fa:1f:de:2e:fc:b3:fb:e6:
                    d9:b6:bb:2c:0b:f7:6f:fc:64:37:9e:8f:44:cd:30:
                    ce:fe:43:ba:ba:b2:8e:cd:be:c4:48:70:cc:4c:8e:
                    9a:bb:10:16:fa:59:cb:b5:58:c6:3a:21:54:22:d5:
                    27:d9:7b:45:9b:06:a9:cf:f3:24:0d:fe:c4:76:25:
                    c9:c2:19:8e:63:e1:23:e4:65:01:14:80:2e:12:87:
                    de:03:23:95:5b:45:ca:15:77:b0:bf:8c:5b:b6:13:
                    86:cc:43:d9:2c:8d:eb:38:95:93:49:90:e6:ee:01:
                    a0:37:b6:7c:4b:99:3a:68:98:68:24:07:b4:db:95:
                    18:0f:24:74:ec:b9:52:fc:df:c5:3e:59:e9:45:49:
                    f7:75:ce:cf:fd:e0:5b:c6:6a:6d:60:fa:b0:52:48:
                    a9:ca:38:be:54:0f:82:0d:17:57:c4:5d:27:6e:25:
                    5d:7e:d9:fb:54:80:23:44:ef:1a:46:d4:55:a2:47:
                    9a:a1:8a:f2:21:77:1e:80:1a:9e:a9:e0:e9:6d:8b:
                    0d:b6:45:0d:2e:eb:31:91:aa:e5:0b:a0:28:18:c0:
                    db:a5:84:f9:08:9c:2d:0c:3d:69:e7:51:7f:67:bd:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FE:56:59:00:0A:8F:38:A8:63:53:80:A2:4F:57:E2:07:0B:4B:D4
            X509v3 Authority Key Identifier:
                keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2d:fb:9e:fb:24:41:b8:41:1c:66:7a:2c:99:ca:3f:65:e8:
         ab:aa:70:e7:cc:2d:47:28:dd:5f:9a:53:a8:69:56:45:2d:5b:
         1c:b9:ab:14:e1:07:af:99:c9:3f:38:2f:91:f0:61:3d:7e:33:
         2b:5c:06:91:51:e8:67:bc:58:1e:52:f8:b5:8c:ce:40:ce:08:
         29:f7:e0:b7:ea:8e:0c:ad:0b:62:c2:ea:a8:a6:9e:8c:1c:67:
         03:c2:77:1f:b1:fb:fb:56:a7:cb:20:4c:1d:ef:20:e4:63:88:
         2d:be:8b:d2:f9:be:24:4d:6c:bc:16:e4:2c:c8:14:30:80:59:
         62:cb:a3:ff:39:6e:3f:84:f6:db:4f:bf:9e:22:8c:0e:a8:3d:
         29:06:c4:24:14:a3:6c:3c:90:e1:db:50:a2:9f:72:62:b2:8b:
         81:2f:96:ac:c0:f1:5c:f9:4e:89:bc:98:db:30:3c:42:bf:db:
         72:f3:68:83:ce:c0:4c:ae:f2:db:49:6b:95:16:c4:eb:0d:5f:
         e1:74:0f:e8:2a:b3:b8:23:ab:1c:ad:eb:42:12:7f:ec:a0:39:
         6d:e6:e3:85:87:30:e2:79:3f:0f:7d:5f:af:51:06:e0:d4:0b:
         ca:f4:a5:f4:48:e9:b2:41:0d:df:b7:d7:ce:5d:5b:96:a6:72:
         56:ae:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:48 2026 by rpki-client