Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File:                     M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier:          vXO3WRzzAMhf/5B4H/4LLsCZaEj2J23JNLZqYIU+AS8=
Subject key identifier:   D1:29:3A:CE:9B:D2:6F:CF:53:EC:8E:65:C7:C4:44:D3:03:55:77:7C
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number:          01DB
Signing time:             Fri 17 Jul 2026 04:36:24 +0000
Manifest this update:     Fri 17 Jul 2026 04:36:23 +0000
Manifest next update:     Fri 24 Jul 2026 04:36:23 +0000
Files and hashes:         1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: qWQXK3qdeEQk7wDg7isMbj9UFaHnhwgHg+qq5BC0gns=)
                          2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: JywGGgtSRiccbe4SHID4l5TKHjN2URlgdMd3UPD4Hlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: Jul 17 04:36:23 2026 GMT
            Not After : Jul 24 04:36:23 2026 GMT
        Subject: CN=6a59b147-c173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:ad:a8:d5:8d:04:31:46:ed:c3:10:13:f1:
                    4d:e8:da:39:e4:e8:a1:df:3f:d9:01:44:4d:2b:f2:
                    4a:4d:11:b2:04:35:12:b7:27:52:fc:13:19:1c:3a:
                    b0:b4:70:29:34:fd:09:a0:c9:2d:fc:e3:96:90:00:
                    ec:c9:95:2e:52:30:8b:48:2d:b1:46:4f:20:15:44:
                    81:3a:38:12:66:4c:d4:0f:30:c6:31:31:77:a6:bf:
                    4c:6c:e4:fb:7a:f6:a6:e8:ec:44:ff:4a:96:01:be:
                    50:e8:0c:03:c4:c4:b4:30:de:95:b5:90:aa:5f:e3:
                    42:ad:17:e3:0f:b8:4d:a4:98:8a:d2:8a:32:ea:f2:
                    91:94:b9:90:1a:9b:2f:e8:36:c8:cd:7e:c9:ff:73:
                    95:96:21:d7:13:82:58:9b:35:a5:cd:05:65:5e:b1:
                    95:41:ea:1d:3b:42:02:89:a2:11:96:27:83:4b:34:
                    32:50:76:81:68:07:e3:2b:63:e8:bd:94:45:25:82:
                    e3:54:95:a4:a5:7a:28:4c:af:e8:a5:f8:f2:d2:b0:
                    b4:21:00:39:af:92:d7:35:8c:50:44:e9:87:b1:3b:
                    3f:23:2f:7e:b2:a0:8c:06:74:55:cd:ac:61:6d:6f:
                    26:8c:39:d1:05:94:d5:27:c7:e7:0d:87:26:68:e4:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:29:3A:CE:9B:D2:6F:CF:53:EC:8E:65:C7:C4:44:D3:03:55:77:7C
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:09:23:7a:b6:bf:93:84:fb:08:88:3b:29:b3:99:27:1d:
         ea:d1:89:b5:57:84:a3:5b:5b:24:6d:1a:b5:9c:12:d5:9b:21:
         f6:f6:e0:65:05:70:31:27:f5:db:b6:82:af:f5:14:96:e7:bd:
         39:be:00:65:e1:82:f6:56:29:2a:96:c6:21:4d:67:46:3c:e9:
         af:68:5c:05:03:65:4b:be:dd:d4:1c:60:69:3c:ea:b5:be:39:
         79:3d:41:8f:79:02:1e:84:81:36:42:cd:f2:e9:89:c7:5e:22:
         9f:1e:1a:8c:d3:67:b6:65:6a:18:18:81:2f:7c:82:b9:0d:0a:
         f7:fa:ad:fd:4e:da:a6:61:8c:09:4f:60:a5:09:4a:48:ac:2f:
         4c:59:0c:dd:d6:5e:8e:15:71:3d:29:82:7a:18:87:f3:dc:f3:
         8b:df:ca:26:99:65:fb:87:63:cd:c5:9d:84:05:6f:18:9b:37:
         60:7f:0d:f2:bb:91:0d:39:58:b4:fa:72:64:1d:3f:ca:4a:b7:
         b3:56:59:3a:8c:eb:b5:e3:29:a2:3a:ab:94:9a:81:f3:4f:bd:
         ab:c2:b7:fe:ec:3d:0b:c7:4b:69:d2:95:a5:0f:f8:d2:77:33:
         c9:44:6b:7c:fc:67:4f:95:16:5a:a0:85:bf:8d:3d:1b:1a:57:
         4e:df:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:35 2026 by rpki-client