Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
File:                     d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft (raw, json)
Hash identifier:          0Fec4rNamY9No6n10pno+J1xJuhsYLY6sqi5bLEqjcE=
Subject key identifier:   63:35:C7:91:A1:3C:9E:C0:A3:FB:4B:15:5D:05:75:3D:DF:6F:53:A5
Authority key identifier: 77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B
Certificate issuer:       /CN=A91F8A7D/serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
Manifest number:          1E
Signing time:             Fri 17 Jul 2026 10:15:48 +0000
Manifest this update:     Fri 17 Jul 2026 10:15:47 +0000
Manifest next update:     Fri 24 Jul 2026 10:15:47 +0000
Files and hashes:         1: d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl (hash: kxAsWOgacrf4PjY5028wviYPS7fERs3rwzhHjYWq/2w=)
                          2: 91FB34E2559511F1BB2B33C094833773.roa (hash: /gb08kbBAX/TgmBzdK2NO6dLCZws+/ifOStMBIrUaVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A7D, serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B
        Validity
            Not Before: Jul 17 10:15:47 2026 GMT
            Not After : Jul 24 10:15:47 2026 GMT
        Subject: CN=6a5a00d4-9aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:46:f5:fa:18:4c:ed:3e:81:55:54:34:c5:
                    ca:2f:1c:b9:d9:a9:72:5d:d9:4a:62:ea:1b:3a:2e:
                    5d:04:6d:1d:ea:5c:53:a5:19:e9:ce:db:3a:8f:a1:
                    48:bf:75:5a:4e:d8:2c:d5:1c:bb:38:c6:a3:d4:bb:
                    d1:ab:b3:bd:21:fe:fa:fe:5b:8d:1d:16:36:17:48:
                    e0:95:bc:24:b6:69:47:38:97:72:17:76:7f:bf:35:
                    4d:c6:fa:8e:13:e0:9f:a9:9a:a8:e1:54:e4:17:1d:
                    c0:b7:6e:95:03:de:52:48:bd:29:32:5b:b4:ef:91:
                    a4:24:88:eb:f4:e3:75:0c:af:d3:85:09:42:a8:b5:
                    be:69:dc:4e:b5:66:25:9c:78:4f:38:2b:8f:d3:e1:
                    9e:fd:21:65:36:1e:38:56:ce:e4:b9:3a:7e:a7:11:
                    5e:4b:ec:9e:03:16:b0:53:ba:8e:c2:a5:5e:2a:74:
                    35:b6:a9:03:67:39:65:92:9e:f5:90:79:1a:80:46:
                    e1:49:22:5e:b1:7a:7b:b2:39:2d:7b:63:23:84:df:
                    78:8b:e2:7e:31:2b:fe:03:47:34:c6:1e:23:a8:ab:
                    b2:d9:2d:68:4c:09:a5:cd:12:03:91:bc:6a:ed:ad:
                    6d:77:6d:d4:b9:57:92:2b:14:d1:44:1b:44:93:89:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:35:C7:91:A1:3C:9E:C0:A3:FB:4B:15:5D:05:75:3D:DF:6F:53:A5
            X509v3 Authority Key Identifier:
                keyid:77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:0b:ae:6b:3e:4e:0a:4d:d2:1b:bc:a3:00:2b:11:9f:a6:
         35:fb:0b:a5:80:05:41:35:ea:63:f0:4d:82:d8:1b:83:6d:16:
         72:b8:e6:16:67:1a:db:07:fa:4d:8f:27:7c:1c:7a:2b:0f:f9:
         67:18:73:4c:c2:77:14:77:2d:8b:0b:2e:0c:a5:a0:fb:9a:0d:
         53:67:13:95:25:c2:6c:fb:f5:ca:67:10:a8:bc:4d:fb:09:8f:
         eb:50:08:20:a1:d3:93:cb:ab:6e:1f:a0:3b:e0:cc:5d:5a:c4:
         bc:88:a5:7d:c5:6f:6a:53:cd:04:41:79:8e:84:49:dd:b1:09:
         5d:c8:9b:15:13:2e:47:72:90:f2:c1:40:a5:5a:2f:21:84:99:
         45:86:1a:69:df:8a:2d:af:c2:7d:8e:63:7c:22:7a:e9:a0:8b:
         b9:09:67:b3:48:26:14:32:4b:70:4b:45:76:b9:cb:e6:59:10:
         a2:ea:98:2e:3a:97:f7:aa:2d:0c:57:68:55:c2:28:56:c8:0c:
         4d:73:7e:f7:f2:2d:99:33:cb:21:75:3f:da:00:b2:79:82:cc:
         58:02:39:dc:6d:51:34:06:74:13:3f:11:ec:a4:51:f9:c7:19:
         d3:9f:89:00:dc:2d:17:3d:fd:1f:d7:5b:be:e2:6e:de:50:ea:
         6b:cd:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:38 2026 by rpki-client