Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
File:                     fTg2zUKn77NatGSlAOJiVxXVzqM.mft (raw, json)
Hash identifier:          1RC7pTx1UlJlQt0u9a55IigNjxl/KfZw5tJSMqLmB98=
Subject key identifier:   F5:57:CA:1D:D8:0A:A8:A9:9D:9B:21:2A:2F:E4:CB:4A:E5:AD:E5:63
Authority key identifier: 7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
Certificate issuer:       /CN=A91F8949/serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
Manifest number:          3A
Signing time:             Tue 07 Jul 2026 09:51:20 +0000
Manifest this update:     Tue 07 Jul 2026 09:51:20 +0000
Manifest next update:     Tue 14 Jul 2026 09:51:20 +0000
Files and hashes:         1: fTg2zUKn77NatGSlAOJiVxXVzqM.crl (hash: z7bFQd8b8UiViLo+KcoK/wLCo9Ao8mxrqqvZSPNHZaw=)
                          2: 71A9485224D311F1BAC6A199AA833773.roa (hash: YplJkElj+wTMuvLaT6qEqUoRVs6FwFRdfKKxyCyC/nM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8949, serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
        Validity
            Not Before: Jul  7 09:51:20 2026 GMT
            Not After : Jul 14 09:51:20 2026 GMT
        Subject: CN=6a4ccc18-04d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:9f:0e:a5:4d:d9:22:a1:2c:95:2d:6e:61:
                    85:f6:24:5e:f9:59:2e:4a:e6:a5:26:71:a8:2e:8b:
                    e1:29:6e:e1:f4:90:50:f6:e4:c0:57:f5:ce:3b:1e:
                    de:90:9a:54:4d:5d:9c:aa:e3:b9:11:6e:4b:cc:28:
                    f3:53:e3:c6:f2:eb:62:9c:39:f5:94:18:c9:38:1e:
                    1a:09:5e:a1:71:98:22:68:82:62:95:ee:3b:95:2e:
                    d0:ba:64:1b:c2:a4:3f:2a:62:eb:5d:d2:d5:8c:af:
                    43:5d:b2:8e:10:a0:62:3b:58:22:ec:f1:83:9d:0d:
                    f7:d3:07:29:06:e8:5d:21:bb:2e:8a:20:ce:7c:7d:
                    71:4f:95:4c:40:63:72:f5:1a:8e:31:dd:ee:05:76:
                    61:23:e3:5b:18:f7:21:04:55:09:00:e6:9f:db:9d:
                    f6:a1:32:62:6e:8b:79:3c:63:19:df:72:1f:81:eb:
                    b4:b8:41:a0:08:61:86:4a:ad:02:ef:42:d6:18:01:
                    2a:20:05:a3:a8:68:d1:ed:5a:8f:63:23:81:6d:ad:
                    24:33:8b:08:fa:ea:bb:b2:42:ee:b4:de:6c:aa:25:
                    97:ae:59:28:1a:9c:65:47:5d:ae:35:f6:21:06:6a:
                    48:f2:18:72:17:20:21:08:a3:c6:bf:c9:da:64:8a:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:57:CA:1D:D8:0A:A8:A9:9D:9B:21:2A:2F:E4:CB:4A:E5:AD:E5:63
            X509v3 Authority Key Identifier:
                keyid:7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:23:cd:58:f2:3b:49:cd:12:8a:ee:9e:bb:35:57:aa:ca:51:
         44:89:49:8a:6e:3b:d8:d4:15:2d:78:d5:b8:f5:8c:7d:1a:8b:
         24:7c:7e:ab:52:1e:66:ff:a7:23:49:53:2b:8b:28:87:ac:11:
         33:d2:bc:b8:90:93:b6:57:28:58:f6:6c:11:d4:11:bf:2c:45:
         75:dc:bb:d7:90:ab:06:87:4e:39:49:2a:df:a1:3e:fb:3d:0c:
         3b:45:0b:8e:e7:69:a0:0c:f1:5e:f8:cb:45:5d:44:11:fd:44:
         a7:7b:95:64:72:96:cf:d6:1b:88:13:8b:1d:2b:56:58:7a:9c:
         72:d2:3d:07:b2:df:15:e6:62:9d:a3:ff:b5:8f:bb:ce:bb:e8:
         b0:d8:84:c0:27:d8:0f:14:e9:76:ed:ef:15:9c:47:d6:93:48:
         9e:80:7a:19:59:80:43:1f:f7:aa:3e:97:da:4b:d6:3b:92:68:
         9d:e4:50:df:1d:f2:02:82:bb:3e:04:07:c8:3d:7f:c4:e6:ea:
         fc:34:b3:d9:ee:1e:81:31:cd:46:c8:36:b9:12:df:b5:6f:07:
         57:e3:b0:fe:65:1c:8b:2c:88:bd:3c:19:5f:38:f8:c9:a6:e2:
         72:15:27:5f:8c:b4:8a:f7:a5:c0:04:30:57:71:6a:ec:07:51:
         9c:c9:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:04:36 2026 by rpki-client