Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File:                     3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier:          +ECGxZmOQG8hWv7yMKHJfK7wHF8NYh2fDqg1fAETzLg=
Subject key identifier:   FF:E9:7E:8A:5E:C0:6B:32:F0:A7:6A:8F:01:C8:A1:E0:CD:04:0B:C4
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer:       /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial:       0748
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number:          073E
Signing time:             Sun 26 Jul 2026 22:36:00 +0000
Manifest this update:     Sun 26 Jul 2026 22:35:59 +0000
Manifest next update:     Sun 02 Aug 2026 22:35:59 +0000
Files and hashes:         1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: 9DWln/VgmvpwuS32ao2SSK7Wv5eX6KYaHi12t2xeP/E=)
                          2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: 7b7X7lAmpe4VIztKAFHWhrlQ0MJNaUA4ExxoVQIfMEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
                          rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
        Validity
            Not Before: Jul 26 22:35:59 2026 GMT
            Not After : Aug  2 22:35:59 2026 GMT
        Subject: CN=6a668bd0-af9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:30:da:3e:25:b7:39:14:47:ef:9d:ef:15:
                    65:71:ba:92:9b:81:be:37:6b:1a:0d:18:1e:37:34:
                    ce:b5:5b:7f:89:a9:cf:a3:4d:99:69:74:73:e6:fe:
                    72:fe:8e:44:14:9e:1f:8a:5c:bb:57:eb:e3:e1:11:
                    c8:df:30:12:5e:8a:96:1f:91:70:8e:53:f2:b6:25:
                    f4:19:b8:53:40:24:87:75:9e:bd:94:3e:77:85:ee:
                    04:2e:f4:98:ca:bf:60:99:cf:2c:bb:de:25:55:ac:
                    3f:7e:8b:5d:a3:1e:05:33:31:a9:e7:ef:3b:21:bd:
                    54:39:24:3d:76:49:8d:8d:bd:93:63:62:a8:90:af:
                    49:f3:21:60:85:c6:a5:63:8a:9f:da:71:d0:10:ce:
                    b1:e7:b1:5b:dc:31:0b:0d:86:1f:ad:4b:6e:6a:62:
                    7d:54:14:f1:c9:8f:83:c5:8a:a8:ae:38:dd:a3:ca:
                    ee:e8:8c:e9:f4:b6:23:ce:51:ea:d6:96:8a:45:0d:
                    8b:7b:de:39:41:31:b8:1d:88:f1:09:5b:71:25:22:
                    51:57:4c:ca:a0:8e:8c:14:76:02:a9:2c:10:4f:01:
                    08:d2:bb:ab:c4:bb:d9:fb:9e:97:2e:a1:3a:06:13:
                    fd:df:ec:89:67:e6:1c:59:5f:d7:02:68:2c:ec:fe:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E9:7E:8A:5E:C0:6B:32:F0:A7:6A:8F:01:C8:A1:E0:CD:04:0B:C4
            X509v3 Authority Key Identifier:
                keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9f:5c:9f:ad:7a:f0:72:a1:4a:bc:55:e5:00:83:0e:e8:1f:
         a8:d2:d9:11:0d:32:0f:62:67:da:17:57:cd:27:0f:1e:fb:02:
         65:87:1e:5e:74:41:d8:51:92:c1:f0:d5:43:28:6c:79:56:22:
         2a:9c:a8:9e:22:90:f1:19:44:46:1e:6b:70:a4:48:93:93:6b:
         46:af:6d:63:77:a5:8a:10:36:b9:a1:71:1b:a8:0f:b5:68:fd:
         77:4c:04:8a:52:f9:0d:ad:14:d4:f5:6f:96:62:92:ec:39:cf:
         69:55:4a:5c:86:c1:3f:4f:3f:6f:e1:75:5c:70:b3:83:f6:e5:
         09:bf:d3:a8:12:7d:cb:1d:ab:b7:5d:95:b1:61:3a:c5:44:57:
         ab:d4:0c:e3:77:ac:7e:c9:2c:7c:94:e0:e4:2d:f7:cd:1a:3d:
         2f:09:76:93:79:f6:1a:54:bb:8b:45:d2:3d:86:7f:ad:09:7a:
         bb:63:62:71:72:36:65:ae:14:d1:cf:90:35:2c:61:07:e2:91:
         6c:11:9b:76:e3:0b:09:92:29:19:21:b0:1d:af:98:6a:79:90:
         e7:23:a9:ed:2a:81:0b:0c:53:7a:77:e2:79:9f:1d:27:c0:f8:
         70:82:f6:c2:a1:d9:e8:37:c3:1b:cd:73:61:f9:b9:c0:19:31:
         53:89:0c:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3
NEVERUJCQkYwHhcNMjYwNzI2MjIzNTU5WhcNMjYwODAyMjIzNTU5WjAYMRYwFAYD
VQQDEw02YTY2OGJkMC1hZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvkw2j4ltzkUR++d7xVlcbqSm4G+N2saDRgeNzTOtVt/ianPo02ZaXRz5v5y
/o5EFJ4fily7V+vj4RHI3zASXoqWH5FwjlPytiX0GbhTQCSHdZ69lD53he4ELvSY
yr9gmc8su94lVaw/fotdox4FMzGp5+87Ib1UOSQ9dkmNjb2TY2KokK9J8yFghcal
Y4qf2nHQEM6x57Fb3DELDYYfrUtuamJ9VBTxyY+DxYqorjjdo8ru6Izp9LYjzlHq
1paKRQ2Le945QTG4HYjxCVtxJSJRV0zKoI6MFHYCqSwQTwEI0rurxLvZ+56XLqE6
BhP93+yJZ+YcWV/XAmgs7P7AnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/pfope
wGsy8KdqjwHIoeDNBAvEMB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy
M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy
ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANZ9cn6168HKhSrxV5QCDDugfqNLZEQ0yD2Jn2hdXzScPHvsCZYceXnRB2FGS
wfDVQyhseVYiKpyoniKQ8RlERh5rcKRIk5NrRq9tY3elihA2uaFxG6gPtWj9d0wE
ilL5Da0U1PVvlmKS7DnPaVVKXIbBP08/b+F1XHCzg/blCb/TqBJ9yx2rt12VsWE6
xURXq9QM43esfsksfJTg5C33zRo9Lwl2k3n2GlS7i0XSPYZ/rQl6u2NicXI2Za4U
0c+QNSxhB+KRbBGbduMLCZIpGSGwHa+YanmQ5yOp7SqBCwxTenfieZ8dJ8D4cIL2
wqHZ6DfDG81zYfm5wBkxU4kMdA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:40 2026 by rpki-client