Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File:                     3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier:          /aDZgWKGiE82RdiQsYcVQsINBRPZKDUhsWeor1Bc2BQ=
Subject key identifier:   81:62:EE:B5:99:2A:94:CD:7A:9E:84:4A:72:06:7F:12:78:44:70:A8
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number:          0130
Signing time:             Tue 07 Jul 2026 07:01:49 +0000
Manifest this update:     Tue 07 Jul 2026 07:01:48 +0000
Manifest next update:     Tue 14 Jul 2026 07:01:48 +0000
Files and hashes:         1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: +MkhRvrXioFYzhIaarZCB2J0Q+yevCmuh7Iz5juELeg=)
                          2: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=)
                          3: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: Jul  7 07:01:48 2026 GMT
            Not After : Jul 14 07:01:48 2026 GMT
        Subject: CN=6a4ca45d-d603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:f6:8a:f9:14:78:72:ac:df:c8:bb:bf:42:
                    43:c7:c4:f2:7e:07:5b:c4:59:12:b1:6b:70:bf:b9:
                    ba:6e:73:19:07:a9:67:26:15:f8:bc:2e:cd:e6:e8:
                    7d:a1:27:cc:a3:06:65:be:bd:9e:eb:7a:fb:2a:49:
                    94:25:9a:5d:50:7a:b0:87:48:32:68:85:09:88:d2:
                    b9:52:3e:62:7f:b5:c2:5a:ee:cf:3c:59:44:5e:bf:
                    f7:9e:fc:f9:58:49:ce:c8:4f:8e:b6:c1:ad:6b:5f:
                    e0:a7:95:c3:87:25:57:40:5c:9e:93:d8:1d:94:ec:
                    5d:45:13:81:57:43:c3:72:bb:b3:f0:da:a7:22:93:
                    fe:2c:50:af:9d:a2:7d:8b:7f:f9:7b:1b:fe:dd:76:
                    cf:b9:47:73:f4:0f:f5:98:7d:0c:e7:51:e1:df:58:
                    8e:02:96:a3:51:38:39:aa:5e:fd:75:97:b3:19:ee:
                    a9:27:b6:7b:8d:48:87:e4:a0:ab:e5:fd:14:d3:49:
                    c4:ff:81:be:9d:94:ea:65:58:74:f3:9c:42:22:dc:
                    65:ef:23:66:80:d6:b4:b7:41:a5:9e:80:6c:51:8f:
                    84:06:6b:bb:51:f3:d6:d5:be:16:f6:86:15:ea:79:
                    17:86:97:79:7e:28:6a:b1:c1:50:48:7d:a9:78:fc:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:62:EE:B5:99:2A:94:CD:7A:9E:84:4A:72:06:7F:12:78:44:70:A8
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a0:f8:ea:6c:3a:ba:32:da:82:d4:8e:a0:67:8a:f1:c8:54:
         d0:30:d3:8e:b2:77:07:a0:af:31:d6:ad:96:40:bf:d8:fc:5c:
         e9:22:fa:80:3c:d0:fb:3b:90:25:2f:b8:d8:c9:f0:49:cc:1b:
         d8:64:c8:5a:a3:2c:63:20:e3:ac:07:63:85:12:ba:aa:14:e4:
         f3:99:88:94:de:98:66:c8:d9:38:cc:6c:2a:7f:f8:dc:c9:15:
         97:28:b5:d9:c9:d0:79:ba:b4:74:29:6c:c2:ca:06:8d:25:79:
         2e:7d:1c:4a:6e:cb:e1:21:d6:28:50:65:83:9e:01:ac:d3:42:
         c5:a1:fd:05:71:48:e0:5f:47:bc:aa:44:b5:ca:80:ab:8b:00:
         c9:92:94:bc:35:a6:a7:82:a2:07:c2:5f:07:8f:36:3d:9f:d5:
         d2:54:53:3e:d2:93:7f:20:b9:9b:d4:c4:96:94:8f:32:bb:bc:
         2c:69:4a:82:e6:34:cc:cc:d7:d0:1c:ca:c6:8f:d6:2d:ad:28:
         b4:a0:d7:3a:f0:67:7c:2c:2b:26:7f:30:22:8d:54:07:08:4a:
         21:7d:54:1e:72:f1:04:e5:69:d1:d8:8a:bf:86:86:63:e4:27:
         df:c2:e6:f2:2a:51:35:62:56:f3:ac:51:e5:72:70:69:27:cd:
         0a:1a:3e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 07:30:08 2026 by rpki-client