Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
File:                     3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json)
Hash identifier:          gpwlj9vBwn4QHTQBy8vAXS6OdLgPLTVmsPXsArKhYVI=
Subject key identifier:   51:1F:72:1F:AA:85:69:30:29:E1:DD:EB:18:AE:7F:BD:D0:91:E1:02
Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
Certificate issuer:       /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
Manifest number:          AA
Signing time:             Sat 11 Jul 2026 08:12:55 +0000
Manifest this update:     Sat 11 Jul 2026 08:12:55 +0000
Manifest next update:     Sat 18 Jul 2026 08:12:55 +0000
Files and hashes:         1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: eqswKZIG0wR3dc3A8AqkbCskQhu+Tayyov3uUvqg7wU=)
                          2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: M/En5GKZgRPs8xA5rjGsaCEY3++9OzoqoEMQTbP1dII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 08:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
        Validity
            Not Before: Jul 11 08:12:55 2026 GMT
            Not After : Jul 18 08:12:55 2026 GMT
        Subject: CN=6a51fb07-336c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:60:78:5f:8d:53:19:2d:25:70:54:fc:04:
                    0e:6a:5d:2d:4f:04:57:a5:9e:c5:65:38:ae:f4:85:
                    e3:f4:72:61:e7:d8:15:e7:22:5f:17:79:98:bb:7a:
                    d6:0c:7c:8f:b0:b1:2f:d8:0f:bd:7d:c7:96:f8:bf:
                    b2:b7:1f:96:44:5e:37:37:0c:06:1f:c4:67:ed:3e:
                    d2:7b:aa:2a:04:c2:57:89:77:96:81:3b:d2:6e:14:
                    c5:61:24:ec:78:d2:b9:ec:6c:b0:2b:33:e7:45:34:
                    73:21:2a:51:57:95:90:9a:71:31:c3:08:34:e3:dd:
                    3c:ea:f5:b5:bd:e8:b0:54:9c:56:db:24:71:cb:11:
                    25:16:0b:90:71:5e:0c:bb:e9:e4:1f:44:39:d0:5e:
                    8c:86:9e:4f:5c:d4:a6:bb:54:d8:4c:12:32:13:a5:
                    8a:f4:3b:59:af:e0:44:64:52:09:8f:30:40:cb:d3:
                    f5:6f:41:d8:89:06:c1:df:99:61:33:ef:0c:7a:0e:
                    03:26:ae:e6:0e:96:d3:0f:26:91:4b:0f:ba:81:d7:
                    82:82:a9:a1:e3:3b:9a:07:b5:f1:10:0a:da:20:9a:
                    c5:0d:11:e2:d0:85:47:1a:80:0a:86:90:d2:ae:25:
                    3d:06:22:a9:fe:e6:6f:71:00:04:b9:a9:b4:a2:fb:
                    de:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:72:1F:AA:85:69:30:29:E1:DD:EB:18:AE:7F:BD:D0:91:E1:02
            X509v3 Authority Key Identifier:
                keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:fd:7e:43:0c:c8:22:bf:00:42:1b:b4:47:0e:83:43:c9:
         e9:80:fb:e7:45:0b:a6:4b:70:4d:a3:7a:39:8c:6c:23:20:ca:
         78:2c:e6:9b:56:4f:79:24:f1:b6:b4:65:60:70:b9:4b:ab:98:
         56:d3:30:ff:41:47:09:86:ed:96:70:3c:e1:45:ea:42:04:21:
         96:83:78:8c:f7:0c:33:5b:b4:79:48:22:fa:76:40:eb:d6:55:
         4a:f8:ce:a2:a7:f9:c8:84:70:ad:8f:6f:2c:63:ed:db:a1:28:
         64:a8:6b:35:53:41:1a:d1:8a:76:7b:ec:11:60:53:0f:06:a0:
         39:fc:5c:1d:42:17:60:08:b7:e4:0b:90:20:6b:f0:8a:de:76:
         89:67:94:f8:53:39:35:69:37:01:ac:de:d4:5d:9e:1e:e1:8b:
         26:9c:5e:e3:9e:f3:98:49:0a:5a:99:72:49:77:ed:3a:1e:66:
         02:d0:77:2e:77:21:bb:7a:94:7a:77:d1:23:7e:2c:e8:c2:b3:
         29:96:24:a6:29:57:21:cf:23:9c:33:a5:a7:7c:c9:a5:b9:ec:
         50:47:ae:b1:5a:24:8c:08:29:80:fc:26:f9:95:dd:a2:02:c0:
         fd:70:83:46:ba:0b:16:1f:cc:50:f5:fa:34:6a:4f:ef:57:7d:
         56:2f:5e:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEQUMxMTAvBgNVBAUTKERERkNBOUQwMzQ5NDVBNTkyNDExNjEzN0Q2Mjg3N0Yw
Q0U1MkJGMUIwHhcNMjYwNzExMDgxMjU1WhcNMjYwNzE4MDgxMjU1WjAYMRYwFAYD
VQQDEw02YTUxZmIwNy0zMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw8JgeF+NUxktJXBU/AQOal0tTwRXpZ7FZTiu9IXj9HJh59gV5yJfF3mYu3rW
DHyPsLEv2A+9fceW+L+ytx+WRF43NwwGH8Rn7T7Se6oqBMJXiXeWgTvSbhTFYSTs
eNK57GywKzPnRTRzISpRV5WQmnExwwg049086vW1veiwVJxW2yRxyxElFguQcV4M
u+nkH0Q50F6Mhp5PXNSmu1TYTBIyE6WK9DtZr+BEZFIJjzBAy9P1b0HYiQbB35lh
M+8Meg4DJq7mDpbTDyaRSw+6gdeCgqmh4zuaB7XxEAraIJrFDRHi0IVHGoAKhpDS
riU9BiKp/uZvcQAEuam0ovveXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEfch+q
hWkwKeHd6xiuf73QkeECMB8GA1UdIwQYMBaAFN38qdA0lFpZJBFhN9Yod/DOUr8b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RBQy83OEQ1OTMxODhG
MzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zZnlwMERTVVdsa2tFV0UzMWloMzhNNVN2
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNmeXAwRFNVV2xra0VXRTMxaWgzOE01U3Z4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RBQy83OEQ1OTMxODhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zZnlwMERTVVds
a2tFV0UzMWloMzhNNVN2eHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASbr9fkMMyCK/AEIbtEcOg0PJ6YD750ULpktwTaN6OYxsIyDKeCzmm1ZPeSTx
trRlYHC5S6uYVtMw/0FHCYbtlnA84UXqQgQhloN4jPcMM1u0eUgi+nZA69ZVSvjO
oqf5yIRwrY9vLGPt26EoZKhrNVNBGtGKdnvsEWBTDwagOfxcHUIXYAi35AuQIGvw
it52iWeU+FM5NWk3Aaze1F2eHuGLJpxe457zmEkKWplySXftOh5mAtB3Lnchu3qU
enfRI34s6MKzKZYkpilXIc8jnDOlp3zJpbnsUEeusVokjAgpgPwm+ZXdogLA/XCD
RroLFh/MUPX6NGpP71d9Vi9eXg==
-----END CERTIFICATE-----
Generated at Mon Jul 13 04:16:31 2026 by rpki-client