Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
File:                     mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json)
Hash identifier:          p+wRA10R6lkOEDgvU69lQl5txJHmmx/Dg1/0c2MaAww=
Subject key identifier:   FA:3B:F1:6F:AC:58:01:03:12:03:4B:0A:BC:0C:D0:E5:0E:81:E6:73
Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
Certificate issuer:       /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Certificate serial:       355F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
Manifest number:          355E
Signing time:             Tue 28 Jul 2026 15:14:20 +0000
Manifest this update:     Tue 28 Jul 2026 15:14:19 +0000
Manifest next update:     Tue 04 Aug 2026 15:14:19 +0000
Files and hashes:         1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: gMCbTqbl950wzsJS25y5FgHvVQEVZU6sjXLS/aG+UeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl
                          rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13663 (0x355f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
        Validity
            Not Before: Jul 28 15:14:19 2026 GMT
            Not After : Aug  4 15:14:19 2026 GMT
        Subject: CN=6a68c74c-8add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:3f:62:e4:dc:65:b6:c7:7d:fd:6e:3d:e5:
                    d0:43:9b:c6:0c:37:56:f4:27:b4:2a:86:12:88:77:
                    e5:fe:0f:75:53:43:58:32:34:aa:be:a6:5d:08:25:
                    30:c6:08:62:ef:b2:67:a8:69:93:0f:71:22:fe:b6:
                    6f:d9:d7:53:16:06:a0:99:f2:97:20:95:bc:81:a5:
                    a2:4c:54:a8:1a:cd:a8:66:a2:3a:6b:06:04:15:78:
                    79:c5:d5:9c:c5:65:b2:8f:47:d0:28:0d:d8:2b:09:
                    c2:98:85:00:0c:ab:1d:b8:c5:84:cd:7d:6d:1a:d4:
                    0e:5a:78:f5:4a:12:2e:a6:e0:bf:75:81:f9:76:25:
                    7d:57:e5:ac:6b:d1:88:ec:22:36:48:54:73:15:bc:
                    a5:3a:18:b4:2c:20:e4:5a:73:7d:48:22:88:4c:08:
                    fa:7c:fb:b8:1c:c2:22:d5:03:40:7f:0f:6c:a7:c5:
                    73:b5:8d:c5:48:76:8d:5f:d0:f2:11:43:62:10:74:
                    6c:33:c3:c2:36:26:5d:0d:52:a6:5c:c3:0e:25:ac:
                    fa:66:a2:0b:e7:07:6c:2f:33:08:83:4a:66:34:99:
                    21:16:63:9f:2e:65:d3:41:e7:8b:bb:01:78:be:04:
                    8d:41:ec:fe:62:6b:6f:65:ea:55:f1:29:45:b5:6a:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3B:F1:6F:AC:58:01:03:12:03:4B:0A:BC:0C:D0:E5:0E:81:E6:73
            X509v3 Authority Key Identifier:
                keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:de:a6:b8:f0:23:3b:df:a8:4a:db:c9:8e:ee:99:46:a0:66:
         93:48:76:7c:39:bb:9a:bb:70:ab:7d:85:9a:3f:f3:f8:de:5e:
         d3:8c:48:9d:05:88:49:71:ee:14:2b:21:48:63:9f:12:40:89:
         f2:e1:fa:4a:10:c6:93:a1:2c:52:ab:c0:65:35:b3:02:c9:55:
         1e:98:f0:99:dd:b5:ec:e7:04:d7:00:c7:de:d6:27:9a:13:fc:
         07:f4:79:9d:76:5f:04:d1:55:08:35:ae:84:e5:49:a8:8b:0c:
         07:b3:de:b9:6f:00:82:f6:9e:b3:cf:6f:25:00:5c:4e:0c:30:
         82:39:10:c2:a5:77:a7:41:6d:1a:0a:d4:0b:43:56:ad:9f:dc:
         72:7d:2e:93:74:75:cc:5c:5d:42:14:3a:01:33:8d:55:fe:8c:
         f6:f8:c3:f6:67:7e:e9:47:39:3b:7b:2a:c9:67:b6:c7:66:c6:
         d5:e2:ac:6d:cd:3d:51:9d:4b:ea:83:bc:4b:7e:d9:2d:79:13:
         e0:4d:81:34:14:c0:7d:fa:16:7a:fc:c9:d6:30:2d:71:d3:e6:
         81:2e:7b:1a:d0:49:ba:69:50:01:09:ac:f6:de:fe:39:dd:b2:
         19:eb:75:d6:a9:63:9f:d2:2a:7c:35:36:85:a7:9d:50:fe:34:
         cf:36:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:35 2026 by rpki-client