Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File:                     3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier:          W6eQ1D0s8fxahi1cH+g5kct14FHYpbft4WtkizSki78=
Subject key identifier:   99:DB:65:3B:50:61:8E:59:21:A2:64:C7:09:93:4F:6F:15:06:C0:B6
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer:       /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial:       08FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number:          08F2
Signing time:             Sat 04 Jul 2026 20:28:17 +0000
Manifest this update:     Sat 04 Jul 2026 20:28:16 +0000
Manifest next update:     Sat 11 Jul 2026 20:28:16 +0000
Files and hashes:         1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: iEeMPgzWnNzN6E+WAIPP43nOewQD1T3G+bpHfTAiuBY=)
                          2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: 3Ec92baJsmBFXlv6Q2B/yYGvWMA45NR4PIY2EvsfluM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 20:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2303 (0x8ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
        Validity
            Not Before: Jul  4 20:28:16 2026 GMT
            Not After : Jul 11 20:28:16 2026 GMT
        Subject: CN=6a496ce0-2ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:a9:9a:51:b7:28:9e:ad:44:8c:d0:1c:fc:
                    50:a2:df:c0:eb:e1:f2:d2:0b:7c:e4:93:62:b3:29:
                    6d:dc:ea:17:00:5d:ed:dd:aa:87:15:6b:e3:4f:e7:
                    a3:43:0b:32:4c:12:f8:35:02:df:c5:7e:72:16:a4:
                    95:cd:00:71:c5:0a:21:23:44:06:db:50:c8:8c:4f:
                    14:54:d1:c6:54:53:c4:f4:9d:ba:64:bd:94:37:70:
                    1c:83:45:db:d6:f8:24:d3:a0:03:aa:24:38:53:0e:
                    c4:16:04:5e:bf:8b:08:53:4b:e6:92:d9:b5:4e:35:
                    d2:e3:41:4f:cf:06:45:4e:6a:33:bd:2b:bf:7e:c4:
                    e4:e4:97:85:d2:9c:48:6b:09:3a:7d:5c:d7:85:4c:
                    33:0f:de:18:cc:bf:0d:ca:74:f7:5f:7d:cf:91:ac:
                    0c:5e:f7:a0:1b:af:4f:cf:17:ab:26:72:c4:22:c9:
                    df:e6:55:74:da:28:32:ce:23:d6:e7:d7:61:66:ab:
                    90:be:13:bb:60:b5:21:54:64:a4:1a:2c:49:9d:dc:
                    3d:42:26:cc:d8:3f:cb:e5:d2:5f:57:42:de:74:86:
                    26:f1:35:1a:f5:23:0c:7d:f0:a8:ab:ea:79:d1:bc:
                    1e:98:64:3a:c9:2a:0a:8e:5e:89:cf:20:d5:50:05:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DB:65:3B:50:61:8E:59:21:A2:64:C7:09:93:4F:6F:15:06:C0:B6
            X509v3 Authority Key Identifier:
                keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:60:e4:65:0e:41:73:f1:d0:eb:bd:45:d9:2a:1c:d2:77:e8:
         54:a8:c0:cb:08:86:b2:74:75:b2:3a:9b:1d:dc:cb:9b:7b:99:
         5c:82:33:90:06:29:85:b5:fa:96:24:23:73:da:3b:3f:7c:60:
         a1:5e:32:5c:a5:46:79:2e:cc:cc:fa:7f:65:a5:cb:ce:76:d1:
         35:9f:96:80:cc:d6:4c:a6:9f:bc:eb:35:69:ac:f6:aa:46:b5:
         a7:67:63:30:ce:6a:92:47:d4:36:17:1e:bf:8d:46:79:67:fa:
         e9:57:f6:b3:16:eb:45:46:b6:38:f0:e3:81:69:28:1c:b0:b0:
         00:55:cb:3b:35:45:57:e5:00:1f:36:9c:2b:e5:fd:5c:9c:69:
         19:77:38:31:92:b9:42:dc:47:4f:9c:e9:31:74:bf:02:70:e7:
         e4:66:3a:07:6b:e4:83:09:5e:55:fa:42:16:f6:5a:a5:8e:af:
         52:24:e8:ce:95:ec:31:f8:97:2c:23:ab:75:90:86:be:16:23:
         09:39:b7:72:7b:f9:c4:da:19:1f:f2:1f:cb:bb:55:4e:ce:3b:
         5f:5b:58:ff:34:70:e5:be:75:d3:c1:12:22:d0:83:39:6f:33:
         c7:2e:fb:18:10:25:e7:23:7c:ea:34:fa:dc:35:e7:a6:61:55:
         76:f6:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:39 2026 by rpki-client