Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          QLuoGuVw+BvsC12UZf1zOrrjrS2ML05HAiSFfxcWX1A=
Subject key identifier:   F6:F8:C3:2D:54:0C:AB:33:93:D4:27:4B:A1:B5:C5:21:F7:5B:F5:82
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          0122
Signing time:             Fri 17 Jul 2026 06:56:45 +0000
Manifest this update:     Fri 17 Jul 2026 06:56:44 +0000
Manifest next update:     Fri 24 Jul 2026 06:56:44 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: Mim4E4rB85L00ot7RVXF4HbXAEPMIBhAePZun38GWHU=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: Jul 17 06:56:44 2026 GMT
            Not After : Jul 24 06:56:44 2026 GMT
        Subject: CN=6a59d22d-a9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:3e:60:6b:01:e5:06:00:16:b6:b7:92:be:
                    21:b0:ab:b2:6c:10:91:ec:2e:c4:86:01:73:2a:26:
                    f3:78:7a:52:65:1a:49:d1:8e:cb:07:90:9b:97:74:
                    53:20:fb:08:a5:4f:d5:4e:5b:39:f5:d1:b4:7a:05:
                    64:27:6a:34:de:ca:16:7d:59:95:e1:69:a7:c2:d1:
                    34:cf:0e:cf:2f:e6:0e:d1:1c:84:8f:2d:b0:0f:d6:
                    49:2a:da:12:2d:66:06:83:42:ad:c8:9e:70:12:c4:
                    83:0f:4c:71:e1:b6:90:55:d0:56:73:4f:b8:5c:dc:
                    7e:c5:12:a6:b3:57:4e:28:22:1d:db:42:13:f5:fd:
                    f2:97:93:a5:93:65:4f:9c:df:e8:06:c8:85:5d:e9:
                    77:f4:ed:a9:f5:61:14:7f:5b:83:a8:e4:3f:b7:47:
                    45:fe:d4:f1:84:03:4c:d1:07:0a:08:1f:98:05:ba:
                    73:a6:5c:d2:48:32:c0:4c:6a:e2:25:a2:e8:72:e4:
                    ee:80:71:5a:00:77:6e:c9:5e:ce:ec:f9:3e:6c:13:
                    dd:9b:be:04:8a:ce:db:49:ae:0c:40:ab:33:41:f1:
                    ce:7e:3e:2b:08:db:a8:d1:8b:29:7f:d3:4b:ce:0e:
                    15:70:b4:77:f5:fc:06:1a:89:43:97:0e:b2:4f:6e:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F8:C3:2D:54:0C:AB:33:93:D4:27:4B:A1:B5:C5:21:F7:5B:F5:82
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:f4:e1:dd:01:1e:6c:3c:fc:8e:c1:3d:c9:fe:70:6a:b3:c1:
         b6:ff:d5:ed:d9:cd:4b:57:a8:03:c7:57:90:e8:6f:10:b1:20:
         35:5e:3a:c3:42:dc:4c:c3:f9:0e:7d:cd:ab:2b:af:db:99:10:
         c4:0e:70:01:e4:2e:1b:d8:2d:27:18:ec:98:54:81:42:16:9b:
         46:8f:20:b2:fc:57:35:c8:aa:7c:42:8c:f0:4d:b8:a9:70:c3:
         1b:fc:3f:4d:f1:e2:e8:45:18:59:da:cd:d4:f8:9f:ff:bb:b3:
         4c:e7:f9:55:f1:a5:82:04:b2:6b:17:c1:17:b2:42:84:99:01:
         a0:1e:7f:0a:c9:fe:06:f6:4a:79:0e:62:0a:43:01:25:0a:10:
         e6:7d:e7:2f:22:67:b9:c3:52:a6:6e:f2:1f:7d:a4:83:62:8e:
         f8:92:cb:7f:ef:cd:fc:be:ad:b1:5f:3a:4d:a0:a8:d8:0b:56:
         62:f2:8f:d9:67:f0:0d:78:94:b4:d4:d1:ad:93:5c:2c:4e:61:
         cb:fa:ed:2e:8f:9e:4d:f7:f8:cc:d1:de:2f:2d:1e:a2:f3:89:
         da:00:d5:cb:ce:b3:43:4b:1a:6b:c0:23:32:48:07:c9:cd:d2:
         bb:c0:6c:b5:be:e7:52:9e:b9:de:98:ed:7e:2d:9b:6e:1e:93:
         1a:73:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:30 2026 by rpki-client