Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File:                     3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier:          /+L/pSOSz1N9K/1KHruM523rib9PbLQX5Rw86k69JDw=
Subject key identifier:   C8:9D:7C:32:52:5F:7E:8D:A0:0A:BC:9E:B4:69:DD:A5:42:E4:31:32
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer:       /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number:          F2
Signing time:             Sat 25 Jul 2026 08:03:08 +0000
Manifest this update:     Sat 25 Jul 2026 08:03:07 +0000
Manifest next update:     Sat 01 Aug 2026 08:03:07 +0000
Files and hashes:         1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: uKxXFzUvULngW59WTcPWigXZm5QY33x3TZ9z0HZGmXA=)
                          2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: T6VpKK0GSgbr7FyO43J42BuxmDs3Uod/nZfdKOm/b7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 08:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
        Validity
            Not Before: Jul 25 08:03:07 2026 GMT
            Not After : Aug  1 08:03:07 2026 GMT
        Subject: CN=6a646dbb-aaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:3e:7f:c1:1c:51:f5:99:9b:2e:61:3e:04:
                    06:5d:b0:9c:6d:b8:a7:93:fe:1a:90:eb:1f:5f:33:
                    bf:85:fd:84:f6:39:a1:92:b0:63:9c:50:fc:e9:3f:
                    53:e8:6d:3c:5a:42:9e:fd:1a:ae:e5:51:5f:5d:73:
                    0d:28:f0:5b:be:d0:c6:59:9b:5f:f8:93:7b:28:0c:
                    69:85:53:b9:82:b1:d2:3a:ce:2d:2e:e7:37:89:43:
                    c5:ec:87:f4:76:49:b5:45:9e:a6:05:18:c4:2c:58:
                    41:05:1a:8e:c8:b3:c1:de:ca:ff:4b:0f:9c:35:07:
                    98:b7:f6:d1:49:9a:91:9d:98:4a:2f:fc:56:4f:e3:
                    9d:08:43:d8:ff:1f:9b:25:6c:79:37:53:c2:f8:4f:
                    99:a8:1b:e6:d7:26:fe:65:f1:2d:73:16:62:74:36:
                    0b:38:7e:7b:f1:aa:b5:c7:e8:82:2c:5f:3c:6e:cf:
                    44:78:17:82:9f:03:4f:cd:36:2f:5e:68:e3:9d:b5:
                    ba:62:de:8a:23:6d:50:63:9a:d3:80:97:30:58:a9:
                    7f:51:b9:a1:58:3c:94:37:d9:8b:74:57:41:d0:18:
                    07:84:20:57:7b:ea:4c:3f:be:25:93:6b:ea:69:96:
                    75:51:97:ef:ae:68:53:16:db:ba:13:71:08:9e:18:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9D:7C:32:52:5F:7E:8D:A0:0A:BC:9E:B4:69:DD:A5:42:E4:31:32
            X509v3 Authority Key Identifier:
                keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e8:6b:99:5a:db:79:af:61:f0:f1:01:71:87:14:42:70:80:
         35:3d:23:72:bf:17:89:1d:fe:af:b9:58:32:6d:e9:54:6b:ed:
         e1:94:fe:05:77:d8:d5:e3:07:e0:44:c5:ed:48:0d:a0:ca:ae:
         ea:2d:2e:63:cb:93:48:a2:fc:30:ac:4b:bb:c9:84:2a:72:25:
         d8:bd:d8:0d:37:43:dd:c5:b6:d5:a7:cf:4e:32:d4:1c:0a:16:
         70:d2:c9:f4:75:b1:cb:cc:5b:96:f5:e9:c1:5f:83:4c:36:71:
         32:cd:33:e3:0c:73:1c:c4:08:bd:cf:2e:cd:89:7b:2f:bc:94:
         09:80:f3:8c:a7:e7:76:09:24:95:0e:a9:69:41:14:c3:ae:cd:
         5a:5f:b4:55:df:26:41:8b:5e:2e:53:19:39:2e:fe:5b:10:2f:
         d8:3b:dd:63:08:7a:0f:0e:65:ef:cb:5d:e5:83:7e:1c:1c:4b:
         5d:66:97:27:22:80:d6:85:33:38:82:0c:53:68:c0:36:d7:d5:
         f7:86:8c:89:7c:6f:72:b3:97:67:29:a2:82:c9:fd:ca:be:3b:
         28:e3:29:74:00:b5:21:91:b2:43:2f:7d:5c:ee:6c:30:4a:fd:
         36:e5:2c:6f:8a:0a:4d:c3:b1:f6:ab:37:eb:28:53:8f:0c:aa:
         eb:c3:6b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:48 2026 by rpki-client