Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File:                     3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier:          gPmzDsTi1q1ihIQVjDb1t3frWMSuRFELq8E51OmbQnA=
Subject key identifier:   4D:A8:66:94:48:28:DC:E9:39:B7:AC:68:2C:A7:44:A9:CE:3F:8F:DD
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer:       /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial:       0760
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number:          0756
Signing time:             Thu 10 Sep 2026 21:41:29 +0000
Manifest this update:     Thu 10 Sep 2026 21:41:28 +0000
Manifest next update:     Thu 17 Sep 2026 21:41:28 +0000
Files and hashes:         1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: 0wS/92N+GVwjzOWyovt0DJepM/c/s1Pr49DyVfFcg9I=)
                          2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: 7b7X7lAmpe4VIztKAFHWhrlQ0MJNaUA4ExxoVQIfMEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
                          rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 21:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
        Validity
            Not Before: Sep 10 21:41:28 2026 GMT
            Not After : Sep 17 21:41:28 2026 GMT
        Subject: CN=6aa32409-4c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:0a:a3:c0:4d:b7:f7:4b:8f:2e:41:f6:38:
                    b2:59:87:ca:2e:0f:05:6d:4e:b5:1f:20:bf:5b:ac:
                    13:33:cd:36:2d:0d:db:48:8b:da:1a:6e:1e:f7:cd:
                    bc:b4:fc:14:30:fa:0a:c7:6c:b8:dc:83:9e:2b:07:
                    90:48:95:4f:af:88:f6:6a:32:49:64:64:61:ae:7f:
                    37:f4:e6:03:65:a1:83:74:8f:f2:87:83:e0:08:cb:
                    57:ef:cd:d9:a9:4b:02:43:a9:b2:48:22:f4:62:b5:
                    42:88:d8:45:2b:44:72:79:ff:46:90:f7:98:54:5d:
                    4a:28:72:6f:a1:e2:0e:9d:d3:46:84:59:68:b0:44:
                    8e:3a:38:bf:fe:06:72:bd:f7:ac:5e:6f:7d:f8:3e:
                    f1:b8:ff:a2:47:42:fc:49:51:17:f3:2d:8e:85:44:
                    da:4f:b8:29:57:3a:09:00:aa:90:5c:d5:5a:8d:87:
                    db:cb:4d:a1:a9:31:e8:12:50:cc:5d:b1:5a:44:0e:
                    24:5c:26:5b:18:de:7e:58:67:8f:44:ff:03:22:77:
                    8b:96:9b:a3:f2:b6:7f:27:25:3c:c3:40:8d:90:ea:
                    8e:c4:a5:1f:ac:68:03:60:54:f9:0a:44:fc:63:7a:
                    6c:4e:cb:3c:92:bb:c4:14:c5:66:88:1f:74:db:ca:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A8:66:94:48:28:DC:E9:39:B7:AC:68:2C:A7:44:A9:CE:3F:8F:DD
            X509v3 Authority Key Identifier:
                keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:81:05:64:d7:39:e2:62:28:89:92:1f:6d:b1:bf:a2:b3:
         f0:cb:bb:b7:ca:3f:44:e5:6b:f1:00:f8:54:13:71:6e:9e:9c:
         58:64:3b:85:a1:89:d1:8e:b7:76:52:b4:96:b6:2c:39:e5:46:
         6e:25:e4:99:91:af:f0:22:2f:98:10:f8:17:80:4b:86:53:37:
         ce:e0:e5:20:37:af:79:07:fb:92:93:7d:cb:5c:0b:79:46:e0:
         e1:78:fa:d9:16:d5:13:f5:67:e0:47:54:15:fe:4b:e3:b3:aa:
         03:3f:bf:4a:4e:6f:af:ec:08:bf:9d:38:de:ff:ec:12:03:61:
         e4:d4:5c:79:b9:6a:ba:a0:d3:eb:f5:17:b0:f6:3b:ef:8f:78:
         aa:c8:d6:46:93:39:68:66:6b:50:e3:a3:6e:25:0b:78:c5:8f:
         34:b0:4b:ae:fc:7b:60:d0:16:6d:9f:7b:7c:30:9a:39:02:5f:
         52:f7:d1:54:72:3e:a4:d9:53:16:32:3c:a3:48:cf:f1:e8:75:
         c7:37:55:eb:94:98:86:80:f8:f6:8a:2c:47:fb:8e:14:f6:91:
         9f:41:21:f8:97:72:38:57:c9:18:5d:7b:00:13:6f:a3:f3:00:
         93:a4:4a:d2:73:ca:4e:b7:d9:87:76:8b:a2:c1:e9:4a:94:36:
         b4:a9:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:08 2026 by rpki-client