Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
File:                     3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json)
Hash identifier:          rgOj94F79LjWtz9h50d2X1K8oeNbaxClOuSxP0fbVjY=
Subject key identifier:   3A:60:C2:43:C2:6A:E5:8E:F0:D2:34:D8:63:3B:4B:40:B1:1C:75:FB
Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C
Certificate issuer:       /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
Manifest number:          0248
Signing time:             Fri 17 Jul 2026 02:32:29 +0000
Manifest this update:     Fri 17 Jul 2026 02:32:29 +0000
Manifest next update:     Fri 24 Jul 2026 02:32:29 +0000
Files and hashes:         1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: ga1+/osP0iVNw09HXcNfwfNsn601k2gORrrEf4rI5MY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
        Validity
            Not Before: Jul 17 02:32:29 2026 GMT
            Not After : Jul 24 02:32:29 2026 GMT
        Subject: CN=6a59943d-3897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:09:e2:4c:45:50:cd:cc:2c:85:6d:a3:23:
                    82:4d:c5:6a:ea:15:70:0b:db:a6:7c:de:e5:1c:38:
                    2e:2e:cd:ae:6c:c4:ce:86:50:51:f8:a1:4c:32:32:
                    80:e9:54:cf:e6:a0:45:e3:e3:70:aa:e4:11:d0:a0:
                    c1:ab:28:3c:81:71:d8:f3:68:3d:39:29:6f:c7:ad:
                    51:c6:2d:10:aa:29:b7:a8:94:b5:7e:9e:f0:95:d4:
                    7b:bf:38:28:40:47:60:be:d9:a6:70:37:95:46:5e:
                    f8:a3:59:f4:b0:9e:3a:13:d4:88:8a:6a:b7:fc:66:
                    4f:9a:c2:68:f8:ef:58:ef:17:83:1e:42:ff:65:ae:
                    b9:2b:8c:ce:02:a6:73:35:98:3b:c0:e3:89:ee:84:
                    49:7a:85:58:5d:f5:28:16:e4:58:98:1b:7b:8b:41:
                    5c:4d:66:9a:e7:7a:57:e1:b5:30:23:f8:d2:a2:c4:
                    8b:b6:8e:7c:4b:44:bc:ce:79:ce:d0:e0:ef:d5:97:
                    8d:11:72:8b:36:39:58:d5:5f:cf:5d:06:55:4e:1e:
                    5a:75:7e:6f:82:d3:f0:4d:c0:2d:f1:4c:01:c6:7c:
                    ad:b6:ac:93:bb:12:da:df:b3:85:64:59:37:da:08:
                    55:97:71:78:ff:6d:52:e3:30:45:fe:3d:75:e4:53:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:C2:43:C2:6A:E5:8E:F0:D2:34:D8:63:3B:4B:40:B1:1C:75:FB
            X509v3 Authority Key Identifier:
                keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:50:6a:85:31:15:54:ac:79:ee:5c:43:1e:10:bd:8b:ac:
         01:40:17:0f:cc:d3:fb:fd:88:6b:a6:2c:64:13:4a:02:8e:78:
         1d:6b:f4:3c:f5:8f:84:ef:1f:d6:2f:3b:c1:86:f5:5a:d6:4c:
         8b:bc:09:e6:32:98:75:26:8b:f4:5b:77:ca:89:e4:67:59:ad:
         24:f9:09:f1:db:77:98:d1:43:09:bb:32:f1:1f:cb:a1:6e:25:
         4c:61:4e:46:88:86:b2:2d:17:da:cb:cd:b5:6f:ef:6f:3b:ac:
         eb:d0:36:91:50:b4:23:f4:ea:65:39:54:9a:0b:f6:c6:29:11:
         ec:0a:0b:ff:98:67:4f:08:ca:77:ab:06:09:2f:a0:44:ef:43:
         82:3f:b7:a2:43:2f:33:ba:64:92:2b:ac:6f:39:ad:b9:4b:68:
         92:7e:5b:d1:10:e3:e1:9e:9f:24:e0:35:bd:0c:36:8a:7b:40:
         14:4c:7e:8e:42:42:2d:c2:8b:f6:25:51:69:74:1b:9d:b8:87:
         13:4a:35:ae:a0:20:bf:e0:b7:54:0c:a9:b6:f2:36:62:e0:44:
         00:bc:24:74:78:57:34:66:2b:2f:52:f4:e0:f7:5a:04:b2:16:
         a8:b8:48:7f:0a:b8:f0:94:ac:47:89:36:e8:ea:92:67:cd:ac:
         81:19:2b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:31 2026 by rpki-client