Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
File:                     9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json)
Hash identifier:          s0taOVot51cHUdCBp2DHFI9m0d68AFMXqmX2Xy6G+uc=
Subject key identifier:   3F:D1:86:F8:24:0E:7D:2A:5B:ED:CF:22:11:08:F9:56:09:8E:41:CF
Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5
Certificate issuer:       /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
Certificate serial:       0D30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
Manifest number:          0D24
Signing time:             Mon 20 Jul 2026 18:25:54 +0000
Manifest this update:     Mon 20 Jul 2026 18:25:53 +0000
Manifest next update:     Mon 27 Jul 2026 18:25:53 +0000
Files and hashes:         1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: Edst5NvG8KCq1wxxNXTkeh4M4rgoTHQGXqpotHT/UYg=)
                          2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lt2U8Cu18VjD9LLrlZLJxuz3gscrRVmnZ1LYN6DAgls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl
                          rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 18:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3376 (0xd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
        Validity
            Not Before: Jul 20 18:25:53 2026 GMT
            Not After : Jul 27 18:25:53 2026 GMT
        Subject: CN=6a5e6831-3aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:6c:d6:23:f1:4b:1e:6e:cc:2b:52:7f:96:
                    d1:71:21:6f:88:87:8b:83:21:9d:d4:a3:63:64:e7:
                    44:31:85:0c:a9:13:9a:3e:de:f0:7c:f5:39:d2:25:
                    28:aa:09:9a:9f:8b:d7:9d:92:0d:ae:2f:a0:ad:30:
                    c3:71:99:42:1b:ac:2d:12:a6:c1:1c:e2:a6:70:0e:
                    70:8d:f3:fc:00:f2:9d:e8:f7:73:fb:be:b7:b0:0c:
                    cd:4a:bd:d2:26:62:a6:a5:32:18:0d:4f:2f:ec:3c:
                    43:95:3c:0a:59:a8:4f:42:9c:4f:ea:d9:ed:7c:02:
                    35:b0:01:18:66:88:c4:31:83:77:54:db:4a:2a:62:
                    70:0a:81:ff:bc:4f:02:09:08:54:7e:83:13:a1:91:
                    46:05:44:9e:58:54:85:91:dc:ad:b7:42:c4:26:ce:
                    53:e3:83:c4:d7:b1:cf:07:2f:63:c3:12:ae:bc:80:
                    f1:f7:b1:63:16:1b:38:35:17:45:bc:32:91:6b:fa:
                    f7:da:4a:c0:f9:ce:a6:78:e7:bf:86:4d:e9:6f:49:
                    3e:ce:a2:0b:46:c2:61:d8:a4:3c:9b:eb:25:cd:69:
                    ab:af:db:ab:46:1c:cb:2e:c2:7d:0a:2e:3b:fb:58:
                    ce:3b:2d:d8:65:a5:d7:93:22:01:ab:00:9c:19:58:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D1:86:F8:24:0E:7D:2A:5B:ED:CF:22:11:08:F9:56:09:8E:41:CF
            X509v3 Authority Key Identifier:
                keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:48:e8:85:ed:f4:05:8a:64:ff:cd:5f:2f:28:75:e7:02:96:
         05:61:e4:ea:b7:da:5f:cf:4e:7f:f7:54:cc:28:0c:ab:d7:34:
         30:99:77:e3:49:17:06:42:34:a7:ac:e3:9e:23:30:4c:93:25:
         08:5f:4a:59:53:4f:fe:26:ea:5b:12:88:ac:4b:79:2c:22:94:
         e4:02:9b:36:26:bf:bd:25:30:19:e0:22:d3:c4:e1:2d:81:fb:
         1f:15:5f:68:66:10:f0:19:a2:ea:5e:3e:a9:74:e4:cf:45:e9:
         b2:69:c9:dc:03:6d:12:e7:ec:1b:9d:dc:b0:42:0d:07:64:fd:
         ac:a1:ea:c4:9a:7c:0e:cc:ed:1d:89:3d:83:83:b8:c1:3d:e6:
         ab:9e:77:06:03:9d:bb:5f:84:cd:f4:5b:50:df:eb:1a:d5:2d:
         7a:aa:d9:fa:ce:73:30:8c:6b:73:1d:d6:4f:bb:cc:a6:5b:76:
         e5:3e:98:0a:35:aa:79:a6:5e:b8:34:2a:f8:be:51:3b:e2:b4:
         38:d0:ca:26:7e:68:ba:c7:35:1d:2f:10:f3:72:37:77:25:82:
         c0:24:e5:8a:4c:5c:82:16:08:d2:fc:d2:86:16:2a:6a:ec:db:
         34:16:7a:e9:9d:9f:28:cb:dc:c8:fc:8b:01:f0:68:d9:26:a3:
         98:27:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 08:21:23 2026 by rpki-client