Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File:                     N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier:          FryYnMCq4bSYrDIkdE4U+7l7GmaBfuPw23WrB7FCz+s=
Subject key identifier:   75:FB:E1:EE:68:12:B5:0F:65:C7:FC:42:68:4B:F2:4C:B2:34:B6:46
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer:       /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial:       1A5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number:          1A38
Signing time:             Tue 28 Jul 2026 16:25:36 +0000
Manifest this update:     Tue 28 Jul 2026 16:25:35 +0000
Manifest next update:     Tue 04 Aug 2026 16:25:35 +0000
Files and hashes:         1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: Z1extl45HFGM5dROasfqiXM23XyhaD6mRELblFkvKRU=)
                          2: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=)
                          3: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=)
                          4: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
                          rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6747 (0x1a5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
        Validity
            Not Before: Jul 28 16:25:35 2026 GMT
            Not After : Aug  4 16:25:35 2026 GMT
        Subject: CN=6a68d800-068c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:2e:d6:42:fe:1c:a8:07:1b:af:3c:29:ed:
                    29:5a:2e:ee:78:4a:a4:6e:66:9d:46:81:c0:65:ff:
                    34:91:45:c7:8f:30:c9:55:75:65:1c:81:49:ee:3f:
                    76:a1:4e:27:60:43:0f:42:1c:c0:52:73:8b:37:33:
                    3f:34:5c:eb:2f:63:e8:43:73:f9:7e:a0:d9:36:f6:
                    82:b8:11:f6:a9:ff:5f:65:60:7f:7d:8e:a3:79:98:
                    31:c3:8b:44:ed:52:2e:26:d2:50:eb:76:63:30:ba:
                    e1:eb:a4:f8:1c:52:e7:84:ae:0a:42:f3:1e:58:82:
                    10:b1:62:88:aa:e2:b8:74:5d:f2:06:69:cc:0d:76:
                    8f:e2:d2:bb:b4:5b:af:a2:14:79:7a:68:2c:9d:68:
                    93:e6:a8:23:ee:ff:64:18:cf:4c:a8:fc:a4:6c:1d:
                    56:46:65:f4:e1:2e:d1:06:0a:d7:18:5a:fb:00:cc:
                    d2:84:49:7a:dd:db:af:c7:aa:4f:ef:49:36:4d:d4:
                    14:11:2a:48:50:7e:2c:77:67:53:59:29:c6:b5:96:
                    63:0f:c1:ba:92:84:bc:28:2c:1f:d0:96:27:6e:6d:
                    1b:95:77:29:9e:06:3c:42:57:0f:4e:ca:21:f5:d9:
                    7b:d0:b9:81:76:63:2d:68:1a:51:84:6e:3c:0d:da:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FB:E1:EE:68:12:B5:0F:65:C7:FC:42:68:4B:F2:4C:B2:34:B6:46
            X509v3 Authority Key Identifier:
                keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:4c:20:2d:c2:cf:0f:10:ec:51:14:9f:e4:05:8f:6c:2f:
         79:fe:5b:16:61:3f:22:65:95:35:c9:08:fc:be:9f:5f:07:21:
         8a:94:7e:8e:df:7f:f5:68:97:c0:56:bf:f2:3b:ee:4c:30:e4:
         0b:ae:d9:7b:d5:e0:e5:89:96:2a:f1:95:a7:fe:24:92:2b:72:
         1d:1b:00:b9:41:c3:e0:c2:ba:a3:ee:71:7a:f1:8a:32:1e:21:
         de:16:03:0f:4f:50:c1:6e:66:11:b1:92:b5:9d:c3:b8:34:4a:
         de:86:36:ba:0b:a1:9e:45:2b:36:4c:9d:6c:25:a5:99:e5:32:
         55:3f:0f:d6:c3:bd:6a:38:a0:76:61:3a:20:9d:b6:d6:b0:a9:
         b4:f6:0d:1d:bb:51:48:f2:49:9e:c9:b8:f0:ca:ee:ee:da:96:
         ff:c6:f0:c3:a8:3e:d7:2e:43:62:51:50:96:c4:d5:be:e6:dd:
         ae:44:a6:04:b4:63:64:bd:3c:34:29:ac:1a:a0:a2:ad:ca:e3:
         35:01:0e:f7:69:b3:ec:f3:31:55:91:3b:95:92:14:7f:46:68:
         e5:c6:3c:a6:c6:36:69:fe:cc:f3:6f:24:68:e0:a9:6a:2b:db:
         92:27:52:5d:2e:38:03:8a:13:1a:e6:3d:89:1a:e4:15:c4:5d:
         34:09:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:01 2026 by rpki-client