Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
File:                     PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json)
Hash identifier:          I0KjAbhGQYkpBG8/dLTyxFD6Q/S+AmoqrKTEhUQUSec=
Subject key identifier:   6E:B4:26:93:30:BC:3C:02:5F:F3:92:F2:79:04:F2:7B:E9:D3:4C:94
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Certificate issuer:       /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
Manifest number:          03F4
Signing time:             Thu 03 Sep 2026 00:24:15 +0000
Manifest this update:     Thu 03 Sep 2026 00:24:15 +0000
Manifest next update:     Thu 10 Sep 2026 00:24:15 +0000
Files and hashes:         1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: csz8nv8ac2YXYJmSdwL5auuk3BfYylWTs3sQeDALK28=)
                          2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: SFrPVIEcm3Sob1UjztJCMJRsgyH7hMthtgc0D0N7bCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
                          rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
        Validity
            Not Before: Sep  3 00:24:15 2026 GMT
            Not After : Sep 10 00:24:15 2026 GMT
        Subject: CN=6a98be2f-484f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:a7:63:db:39:de:1d:ea:41:9e:c7:70:b0:
                    e6:25:4c:0e:a5:61:c7:09:0c:ce:73:53:76:86:44:
                    ae:c0:ae:ae:ce:46:90:89:59:0e:c1:cc:4d:57:e6:
                    4b:f6:0c:27:ae:b6:02:80:cf:84:99:88:9c:f1:61:
                    a7:28:23:65:19:43:5b:f7:98:b4:af:02:a0:0e:6e:
                    73:b1:6e:75:88:ba:ca:e3:ce:f7:40:14:ea:5e:d0:
                    58:3d:19:fd:10:00:35:1c:bd:f1:93:2d:61:91:9a:
                    ad:34:f0:be:95:a3:97:a1:15:a7:a1:b2:90:ca:c2:
                    23:2c:07:e7:9f:52:a1:af:d9:19:85:32:69:52:4b:
                    1b:c6:2f:dc:03:3e:90:c3:64:2b:24:2a:dc:46:5a:
                    cb:05:68:1b:9c:26:ac:f6:0d:86:17:0e:cd:5b:e4:
                    de:43:fc:6e:b5:d3:5a:bf:35:8f:f7:00:23:20:b3:
                    5a:3f:47:83:83:06:4f:58:b6:50:46:4f:ca:d1:bd:
                    a0:51:ae:36:46:9e:cb:34:e2:86:db:84:33:fa:6d:
                    66:60:39:db:2b:80:1e:1a:68:af:f7:a5:58:af:3c:
                    19:c3:22:99:c0:ec:f5:cc:01:9c:e3:2a:42:0c:f5:
                    7d:b6:3f:82:fa:53:a9:fe:6b:bb:f8:5e:af:7c:f4:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B4:26:93:30:BC:3C:02:5F:F3:92:F2:79:04:F2:7B:E9:D3:4C:94
            X509v3 Authority Key Identifier:
                keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:6a:37:b1:f3:79:90:bf:ee:a3:7e:84:28:ea:c4:0a:db:
         94:5b:3c:e7:27:9b:40:83:8b:71:8e:6f:07:d7:de:2d:2c:6f:
         e2:dd:a7:ec:df:35:67:82:6a:fa:18:c1:83:6c:23:6c:eb:d1:
         40:e5:b4:94:db:1e:7a:d2:ae:ee:0b:fd:68:35:4a:d4:5d:17:
         07:14:c4:d6:79:d2:aa:6b:a1:23:42:f3:a2:43:ae:38:41:a9:
         f0:d2:68:40:ce:2c:6d:16:c2:90:a3:9c:88:40:a9:df:59:35:
         55:5c:85:60:60:58:f8:21:39:66:aa:18:6c:a8:a6:9f:70:3e:
         17:de:12:cb:be:77:a6:ce:ae:ad:6a:41:8f:0c:f1:69:34:f9:
         8c:e4:6f:aa:3f:a0:9f:2a:2e:d2:5b:34:83:d5:01:e0:05:a0:
         a8:a0:58:2d:e3:05:38:37:89:63:73:5a:6d:da:02:aa:48:56:
         cb:37:a5:29:42:f8:96:79:1c:3a:ce:64:53:77:92:fe:d6:2b:
         3b:32:a9:88:bc:8c:18:f3:a8:a5:6f:b6:1e:d4:37:9a:53:cf:
         98:ea:95:4c:ea:64:a1:cf:b3:a4:5f:11:c8:87:d5:33:f3:99:
         bf:00:05:dd:f8:b0:c5:2f:d8:4e:4c:87:37:85:f3:8e:a5:38:
         1e:d3:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:13 2026 by rpki-client