Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File:                     _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier:          ClYXoEjhITowyTV8qu9xHzbu5rnJDUHRGRHh/BOnTJY=
Subject key identifier:   E6:09:6D:05:C5:C8:B7:C6:71:81:26:21:97:ED:76:E9:08:BC:71:4C
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer:       /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial:       05D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number:          05D0
Signing time:             Sun 26 Jul 2026 23:56:22 +0000
Manifest this update:     Sun 26 Jul 2026 23:56:22 +0000
Manifest next update:     Sun 02 Aug 2026 23:56:22 +0000
Files and hashes:         1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: 6gMT674vv7QdRWBzkk4MnKCTbNsArD6hNgodqb3hcjE=)
                          2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rpeucbwRthNChjV1mTa6b5UV/jF0VBkI5SXoALE4F0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
                          rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
        Validity
            Not Before: Jul 26 23:56:22 2026 GMT
            Not After : Aug  2 23:56:22 2026 GMT
        Subject: CN=6a669ea6-0a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:45:3b:36:3f:36:33:f3:ec:aa:a5:e9:c8:
                    82:0f:eb:de:85:8a:4e:49:6c:53:88:88:85:89:fe:
                    ad:56:39:91:9a:a2:32:ca:c2:0b:30:fc:c2:d7:c0:
                    d1:f9:02:ea:76:07:4a:ee:3d:32:4a:6d:0e:d8:ff:
                    d6:67:ae:fc:7f:58:37:20:56:dd:70:d3:3b:bd:8c:
                    0a:68:0c:ab:ae:79:bc:10:11:a3:50:e3:ff:1a:af:
                    4a:d7:03:84:d9:8b:a5:2d:3e:32:54:61:e0:ff:55:
                    0e:81:cc:29:1f:c8:38:6a:a6:83:86:e5:cf:7d:cb:
                    98:ff:b3:0a:95:42:54:60:8c:57:34:98:70:67:3c:
                    4c:8a:67:15:d8:15:20:80:05:69:53:c9:79:44:91:
                    c1:ef:fe:ad:ba:69:c9:96:84:2b:b1:64:6e:a4:b3:
                    bc:50:79:d1:af:c7:60:08:cd:46:6a:8d:2e:8a:e5:
                    e7:db:19:c1:40:79:e0:f5:8c:99:91:0f:34:09:0e:
                    08:77:fd:b0:23:2a:82:d1:e1:7f:ff:92:9e:13:89:
                    c1:d8:f8:00:bf:ad:57:d1:16:31:52:27:05:d1:a9:
                    f6:0d:6e:0e:b2:4a:b7:54:99:dc:b4:c4:0f:56:57:
                    be:1b:ae:40:7c:2f:33:5c:5d:41:7b:62:0f:3c:2a:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:09:6D:05:C5:C8:B7:C6:71:81:26:21:97:ED:76:E9:08:BC:71:4C
            X509v3 Authority Key Identifier:
                keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:48:67:ab:85:58:d1:83:de:6d:84:da:f1:a7:bd:95:7e:70:
         04:59:05:da:c1:35:0b:1a:32:62:0e:4a:e7:30:6b:c4:79:5a:
         61:bd:b2:96:71:76:75:e6:bc:ec:2d:42:49:b8:ab:c6:a0:0f:
         0b:38:48:d1:79:d3:91:de:71:65:ce:f3:8a:db:2d:57:c8:8e:
         d3:da:ea:d5:c8:c9:93:14:ee:40:38:f1:97:fc:a7:b5:93:e6:
         e6:06:2f:e9:c8:b5:54:9b:d6:74:e5:0c:31:e3:1d:7d:29:2b:
         f1:31:1a:69:68:7b:df:f4:15:95:e3:8a:e8:1b:35:af:3f:d7:
         bc:83:f2:ca:81:d7:c6:a0:f7:ce:59:b7:92:e6:91:d7:0f:ad:
         2c:8c:b2:42:33:01:d2:a7:ac:17:8a:99:ff:5e:73:ff:9b:94:
         5e:39:04:9c:9b:2f:67:73:50:e1:34:47:c2:f3:1d:0a:56:af:
         04:12:61:9b:71:1c:54:61:a1:e2:4b:92:ef:6c:1e:8d:c7:e8:
         dd:0b:c5:85:34:35:37:8e:85:7d:6b:18:84:ca:17:02:fd:f3:
         81:6a:d5:ec:30:44:d0:fc:b3:72:8f:fe:e8:e3:bb:60:f4:6c:
         79:e6:12:ac:3b:f1:d1:3c:16:0b:bb:f9:bb:34:b2:ee:e5:83:
         d2:14:bc:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2
M0QxNkVENUYwHhcNMjYwNzI2MjM1NjIyWhcNMjYwODAyMjM1NjIyWjAYMRYwFAYD
VQQDEw02YTY2OWVhNi0wYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp3JFOzY/NjPz7Kql6ciCD+vehYpOSWxTiIiFif6tVjmRmqIyysILMPzC18DR
+QLqdgdK7j0ySm0O2P/WZ678f1g3IFbdcNM7vYwKaAyrrnm8EBGjUOP/Gq9K1wOE
2YulLT4yVGHg/1UOgcwpH8g4aqaDhuXPfcuY/7MKlUJUYIxXNJhwZzxMimcV2BUg
gAVpU8l5RJHB7/6tumnJloQrsWRupLO8UHnRr8dgCM1Gao0uiuXn2xnBQHng9YyZ
kQ80CQ4Id/2wIyqC0eF//5KeE4nB2PgAv61X0RYxUicF0an2DW4Oskq3VJnctMQP
Vle+G65AfC8zXF1Be2IPPCoJIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOYJbQXF
yLfGcYEmIZftdukIvHFMMB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz
MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3
VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjExRS8wNkFGMUZCMjEzMTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xM
ZGpyVllaa3JBOUZqMFc3VjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATUhnq4VY0YPebYTa8ae9lX5wBFkF2sE1CxoyYg5K5zBrxHlaYb2ylnF2dea8
7C1CSbirxqAPCzhI0XnTkd5xZc7zitstV8iO09rq1cjJkxTuQDjxl/yntZPm5gYv
6ci1VJvWdOUMMeMdfSkr8TEaaWh73/QVleOK6Bs1rz/XvIPyyoHXxqD3zlm3kuaR
1w+tLIyyQjMB0qesF4qZ/15z/5uUXjkEnJsvZ3NQ4TRHwvMdClavBBJhm3EcVGGh
4kuS72wejcfo3QvFhTQ1N46FfWsYhMoXAv3zgWrV7DBE0Pyzco/+6OO7YPRseeYS
rDvx0TwWC7v5uzSy7uWD0hS8WA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:28 2026 by rpki-client