Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
File:                     1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json)
Hash identifier:          duhQOb+Q0QTh4IpffI90rxDMJmzPTOa89mI8XCeGzXc=
Subject key identifier:   13:5F:31:75:7A:4D:18:FF:BE:9C:73:9F:93:ED:06:86:4A:87:BE:42
Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
Certificate issuer:       /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Certificate serial:       0346
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
Manifest number:          0340
Signing time:             Sat 05 Sep 2026 00:41:45 +0000
Manifest this update:     Sat 05 Sep 2026 00:41:45 +0000
Manifest next update:     Sat 12 Sep 2026 00:41:45 +0000
Files and hashes:         1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: fTDQxwiaHdDeb/YhVptWkiuURz8WfXYMyYUvRwwZYhQ=)
                          2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: m3cZCOL4b89wYo+1IDry+3qvdA4N289UzAOZJV0uUGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
                          rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
        Validity
            Not Before: Sep  5 00:41:45 2026 GMT
            Not After : Sep 12 00:41:45 2026 GMT
        Subject: CN=6a9b6549-7a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:9c:c1:39:d1:31:fd:0e:7c:77:bf:39:ab:
                    05:71:2e:d3:74:ae:ae:e8:1e:d9:fe:74:f3:a5:da:
                    b9:c4:1b:a6:bf:7a:28:8d:09:f9:97:7c:83:18:69:
                    8a:3b:1e:75:df:bb:ba:94:d7:81:30:c5:9b:0c:c7:
                    46:28:c5:41:0d:da:60:6d:ca:df:ba:79:35:ce:ed:
                    43:bb:04:e9:dd:0d:dd:da:e2:e5:2d:d1:5f:3c:9d:
                    ba:a4:d7:24:9e:e6:aa:84:cd:97:da:f6:19:8c:f3:
                    9f:40:c5:29:5a:f5:eb:97:8b:16:c0:fa:d9:dc:c3:
                    b4:fd:77:65:14:b7:7b:25:db:ae:79:46:dc:ea:da:
                    71:38:11:35:d2:d2:f3:66:8c:32:13:9d:6a:94:db:
                    77:cf:e1:a7:61:df:15:d9:3d:85:09:3f:39:e2:0b:
                    64:73:e8:6c:03:e4:49:b8:d1:17:e1:69:5a:75:87:
                    4b:7b:98:27:5d:92:b3:fb:1c:fe:5e:22:44:f6:b6:
                    ad:a5:aa:09:51:29:1c:65:d0:52:a3:d4:a0:11:b0:
                    2c:85:49:15:dd:e1:88:94:73:54:75:b8:17:ed:18:
                    f6:6a:f6:d6:98:8f:ff:50:dc:cb:c6:24:11:d3:19:
                    04:97:e2:96:b0:a1:2f:26:3e:70:c4:49:2c:10:82:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:31:75:7A:4D:18:FF:BE:9C:73:9F:93:ED:06:86:4A:87:BE:42
            X509v3 Authority Key Identifier:
                keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:52:65:3d:a2:66:a4:0b:39:b5:49:94:d2:ac:7b:b5:3a:5a:
         88:d4:02:14:c7:8e:2a:75:86:e8:e2:84:cf:4c:3b:45:99:3d:
         ca:2b:37:ec:5a:11:b4:31:58:8c:96:2c:6f:c8:db:38:16:b5:
         ac:01:8b:22:9a:a3:69:b5:0d:0b:44:57:f6:30:c9:19:b7:31:
         32:fa:93:51:ab:84:76:27:74:b6:9e:5b:99:3c:10:69:cf:16:
         e7:c7:dd:a3:be:d8:2d:d7:3e:00:27:ca:ec:52:24:cb:fb:44:
         b2:ba:7c:7e:82:02:f5:df:70:b8:8d:17:69:ef:1f:81:77:19:
         81:de:4d:aa:1d:01:fe:b1:41:fc:e4:56:da:07:a5:38:4c:c5:
         62:77:f5:ff:9b:e1:b7:cb:90:5c:65:27:ea:41:42:82:93:4a:
         95:f6:aa:34:b3:b9:bb:a0:35:08:28:68:c8:c9:ed:6f:f4:d6:
         f7:ca:1d:ab:d8:f9:2c:6f:57:d5:22:42:8c:17:12:ce:75:57:
         da:63:c0:d5:cb:5e:d6:d0:fe:75:88:f1:d4:75:47:6d:ec:f2:
         46:b7:54:ae:d0:cc:fa:42:70:7f:8b:8d:1c:f5:cb:c4:7a:0c:
         70:11:d0:4c:8d:53:e7:5b:69:e1:4e:c6:45:fb:e4:d0:48:07:
         d0:92:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:52:29 2026 by rpki-client