Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
File:                     N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json)
Hash identifier:          3F8DMhSYtDbHXz7E9t+R83zxWgciOH9zfToyryMe720=
Subject key identifier:   B4:6C:4F:06:C3:4D:37:93:6B:2C:35:E2:A4:D2:FC:1E:41:34:C7:A3
Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
Certificate issuer:       /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
Manifest number:          01B8
Signing time:             Thu 23 Jul 2026 05:18:21 +0000
Manifest this update:     Thu 23 Jul 2026 05:18:21 +0000
Manifest next update:     Thu 30 Jul 2026 05:18:21 +0000
Files and hashes:         1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: eowS09Wiiaq0yAMlr2RdmEtZDee5qW6OlQqqFxLm/yY=)
                          2: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=)
                          3: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=)
                          4: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
        Validity
            Not Before: Jul 23 05:18:21 2026 GMT
            Not After : Jul 30 05:18:21 2026 GMT
        Subject: CN=6a61a41d-d899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:72:e5:e9:1c:4d:d9:74:71:dd:dc:84:10:
                    15:3e:09:8f:0c:82:cb:11:06:d3:23:1e:ca:2b:6b:
                    7f:c7:e4:fb:3b:ed:e2:03:b3:c8:f5:a6:d1:34:e8:
                    a8:23:cd:59:7b:86:eb:1f:46:b7:d7:7d:70:63:a2:
                    88:a5:cf:b4:0e:90:30:27:ff:cc:d3:85:e1:d9:12:
                    44:46:5e:e3:c9:62:13:97:3e:e8:9e:0b:ba:17:7d:
                    b3:21:67:6c:67:93:c9:5c:6e:f2:61:e2:2a:c5:05:
                    25:e7:b4:b2:7b:59:eb:d9:2b:ee:44:b1:da:bc:d2:
                    dd:2a:62:3e:1d:37:fd:96:0d:7c:cd:f5:e4:ff:42:
                    7d:a7:ff:4a:12:3a:c9:90:95:a9:ae:a1:b5:13:81:
                    b4:67:12:d3:80:e8:22:cb:02:42:ef:85:78:0e:c4:
                    b1:ed:ed:f0:a0:b0:a6:d3:ee:86:bf:a0:5a:82:25:
                    69:c7:bf:ce:9e:f8:f9:73:12:b4:e6:0a:42:c1:bc:
                    a2:9d:5c:96:a6:fd:12:45:66:e3:da:1b:40:90:b7:
                    10:0a:99:e0:72:33:22:38:24:4c:eb:1b:1d:01:a8:
                    46:71:21:37:67:12:2a:55:c9:4e:64:73:2e:b2:bc:
                    c3:cc:ae:89:99:eb:be:05:3e:9c:58:52:f0:f9:66:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:4F:06:C3:4D:37:93:6B:2C:35:E2:A4:D2:FC:1E:41:34:C7:A3
            X509v3 Authority Key Identifier:
                keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:64:ad:7d:8f:4c:d2:bd:fb:43:98:2c:e3:34:92:67:29:cd:
         12:7d:1d:75:05:18:59:cf:59:06:1d:8e:ad:30:6a:fd:02:d2:
         fc:e7:dd:0e:99:02:07:36:d4:49:6f:e7:10:08:59:0f:25:ed:
         ef:2b:11:42:d1:02:82:98:57:ec:3e:81:a0:84:33:81:ad:99:
         06:27:c5:da:34:24:71:6b:52:7a:f8:6d:53:a7:7d:df:8d:07:
         62:d6:76:f6:46:e3:89:78:30:aa:3b:c3:4e:63:e3:bb:a3:2e:
         4d:29:b6:16:5f:6d:c5:5e:f6:d8:c2:81:b7:30:7c:92:91:ef:
         52:64:02:d3:48:45:a9:14:4e:43:35:d4:71:25:9a:24:c8:46:
         34:e7:1d:0d:b2:0c:f7:73:43:86:c9:a8:2b:23:a6:28:f0:04:
         41:c5:fd:8b:fb:ee:74:2d:d6:81:cd:23:7d:3b:b8:33:c1:15:
         c3:63:7c:76:c3:42:e5:a0:3e:7b:89:79:fd:e0:c8:95:4c:42:
         01:23:2a:d7:60:bc:f5:af:6a:f7:01:dc:3a:10:31:83:9c:22:
         18:ae:eb:bc:d6:90:20:f2:af:c9:11:e6:ec:3c:25:cd:e8:ad:
         e5:58:b7:18:f5:30:68:d3:0e:b1:a7:37:b5:51:33:61:0a:b6:
         50:b4:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:09 2026 by rpki-client