Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File:                     I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier:          zpCurO0ODPjY/WGw+WFC/lSUCja7Gv1o7cOISpkDFlA=
Subject key identifier:   16:F4:AC:9D:70:04:9C:42:7C:5B:A6:A7:0F:60:23:FE:5A:FA:47:B9
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer:       /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial:       0303
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number:          02FD
Signing time:             Wed 19 Aug 2026 01:32:33 +0000
Manifest this update:     Wed 19 Aug 2026 01:32:32 +0000
Manifest next update:     Wed 26 Aug 2026 01:32:32 +0000
Files and hashes:         1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: ZfCKjvdbsRZZbmkpZqC+q2RpNIVKQResllx8nGJ6eno=)
                          2: 623705DA339111ED9249064BC4F9AE02.roa (hash: roernNB+OJNNt1UVzBh6SQSSqUE+e0U1ZxC3K0oXdnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
        Validity
            Not Before: Aug 19 01:32:32 2026 GMT
            Not After : Aug 26 01:32:32 2026 GMT
        Subject: CN=6a8507b1-3bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:73:94:26:f4:f4:40:13:cf:f9:cf:ff:ac:
                    e1:76:ce:a6:d6:57:b5:35:7c:a6:56:63:d4:3e:be:
                    da:d5:44:bd:dc:a7:1f:38:f8:82:b8:68:b1:30:3a:
                    da:68:c6:fc:a1:b1:43:9b:2b:87:03:ee:a9:55:75:
                    be:40:76:ac:e4:4f:3d:99:35:da:de:fe:b3:bc:be:
                    85:21:e4:e7:51:93:85:7b:5b:bd:bc:22:f8:b6:e9:
                    3d:5b:60:fd:63:4d:70:de:c9:b7:f0:75:27:05:d0:
                    c5:d6:85:65:40:dc:89:3c:8f:6c:20:27:46:91:93:
                    22:a9:84:1c:e0:45:85:da:6c:26:c7:14:7b:61:41:
                    4f:64:5f:c9:9c:aa:c8:9d:cd:81:33:3a:fc:27:fd:
                    4f:6c:d1:53:e3:d1:82:50:60:cd:9a:6a:e5:e7:6e:
                    7a:9f:6b:13:91:90:63:1b:f8:67:94:24:e5:53:9e:
                    30:d2:14:e9:22:ae:37:7a:72:ca:cb:65:f6:17:b5:
                    99:f1:15:8a:4d:91:61:9d:e6:2c:05:88:85:b4:55:
                    ab:f0:44:71:33:48:1e:90:16:ee:bc:c9:3c:30:38:
                    cd:58:9c:30:69:71:7f:da:e0:e8:45:e5:17:ce:08:
                    5b:9b:7d:4e:f4:9b:23:c1:46:ee:ce:4e:95:ea:d8:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:AC:9D:70:04:9C:42:7C:5B:A6:A7:0F:60:23:FE:5A:FA:47:B9
            X509v3 Authority Key Identifier:
                keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:20:9c:d0:c5:af:26:60:d1:17:c4:24:d0:f2:e4:50:ff:fd:
         f1:3c:96:03:b8:27:02:eb:9a:68:00:ce:98:a5:11:a2:e0:b0:
         97:de:8a:4f:b0:d8:ae:0f:f9:a1:26:4f:1c:8a:37:eb:d1:0b:
         60:6b:8e:e0:8e:a6:34:38:cd:b1:2e:6b:88:98:c2:08:c4:4f:
         01:ee:39:89:87:e0:d4:30:17:a5:99:89:4e:15:72:fd:aa:94:
         51:7e:d3:9b:e9:b3:9f:62:4f:59:d7:80:13:73:eb:ee:3a:2c:
         7d:69:c6:e4:bc:90:f4:76:a0:26:e7:a7:b1:b2:c1:e7:74:54:
         71:ee:e3:ef:a3:1b:32:98:37:92:44:35:59:a2:64:00:b9:fa:
         f6:6e:aa:b2:0c:bc:a1:e8:ba:c2:05:31:bc:cc:ec:50:70:aa:
         b4:9f:7a:a0:98:cd:4f:ed:0d:41:19:50:ca:56:cd:43:2b:b0:
         25:1a:98:ae:ec:ea:f0:40:d1:35:52:a0:ae:6d:40:c0:4b:61:
         9d:95:c0:56:eb:62:1a:41:fb:f8:8f:aa:fd:ff:8a:58:1f:4d:
         86:96:93:8f:96:33:b3:f0:e4:ad:e3:52:0a:5e:54:84:91:87:
         a7:37:3c:3d:f0:5e:a7:bc:34:86:b3:cf:05:c2:b9:54:70:e1:
         98:5c:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:23 2026 by rpki-client