Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File:                     A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier:          OH9k0HE2KxMhQzJPWbAsC+NHRlHjObHgi5yjYeZf99Y=
Subject key identifier:   A7:B8:6E:12:91:4D:6A:CA:39:E2:EF:56:A3:38:24:64:65:8C:C2:1D
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer:       /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial:       0CB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number:          0CAD
Signing time:             Tue 28 Jul 2026 18:42:40 +0000
Manifest this update:     Tue 28 Jul 2026 18:42:39 +0000
Manifest next update:     Tue 04 Aug 2026 18:42:39 +0000
Files and hashes:         1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: IDwfO6QSavdSNBzQNy7zp1rzS3vgIDbm+ONJbSttUpc=)
                          2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: veYCT0YVn2lsSh/a1SemHmCMUXzXqFx3N+q0M958UTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3255 (0xcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
        Validity
            Not Before: Jul 28 18:42:39 2026 GMT
            Not After : Aug  4 18:42:39 2026 GMT
        Subject: CN=6a68f81f-d619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:34:40:5f:ad:1d:48:76:ba:3a:8e:26:22:
                    46:13:3b:42:d9:53:e0:fb:3c:04:8c:8a:f1:71:7a:
                    74:f7:5a:92:7b:2b:4a:12:75:5b:40:22:e0:d7:9b:
                    d9:50:d6:5a:58:d7:9a:b4:7d:04:e0:7a:46:9b:7e:
                    a0:45:f3:5d:dd:98:7e:17:6d:a2:4f:c1:46:07:03:
                    29:01:31:2b:ad:08:fb:ac:1e:d4:e9:8f:8f:3e:17:
                    44:91:df:a9:51:76:91:ab:bd:b4:8c:53:6e:ce:94:
                    0a:32:40:b3:30:19:aa:f9:9f:a4:c2:1b:d6:55:08:
                    9d:2b:01:92:d5:1a:4b:8d:8c:2f:e4:9e:96:cf:61:
                    ce:2a:a1:d3:75:c2:74:58:9b:22:3a:94:9a:55:d8:
                    22:e2:ca:b0:5f:a9:1a:1d:b5:04:ba:ba:18:13:37:
                    b2:22:9d:cb:c4:45:ca:02:8b:64:5c:8e:6e:d4:cd:
                    2f:93:e2:be:2f:3d:6b:42:a4:ea:91:e7:61:62:e6:
                    07:61:7a:da:0c:80:3f:60:2e:32:c3:51:b4:8f:97:
                    93:52:9f:cd:d6:27:8a:3c:3f:0e:09:2a:01:43:c8:
                    4d:a5:cc:a7:71:f2:5b:f8:8c:de:b3:84:66:28:e2:
                    b3:91:74:11:b6:23:38:a1:ac:00:0b:8f:fc:79:be:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B8:6E:12:91:4D:6A:CA:39:E2:EF:56:A3:38:24:64:65:8C:C2:1D
            X509v3 Authority Key Identifier:
                keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:79:35:9b:a3:f6:b7:29:f5:13:c2:7f:9b:1f:7a:e5:cc:03:
         8c:44:ad:1c:17:77:64:3b:18:75:e8:4f:1f:e6:43:c3:7c:d3:
         3e:6d:4b:da:fd:6e:ee:b2:45:0c:6b:8d:1b:b0:ba:fa:7a:9c:
         c8:10:78:fd:4c:fb:d3:3e:87:7b:b4:38:ae:fa:c2:0d:a0:89:
         15:59:8e:ca:36:66:c8:d4:9a:ca:c6:03:31:f0:55:01:38:e6:
         4d:28:e2:e9:4d:7f:57:ed:7e:04:fa:de:a7:bb:bc:0d:8a:f8:
         a2:8f:99:d1:ab:c2:72:c8:ac:bc:b9:20:9c:5d:d9:5b:d3:1d:
         ed:f9:ab:98:b4:a8:73:ce:68:2f:81:14:3f:9c:b9:d2:3c:6d:
         41:69:c1:64:07:4b:21:0e:bc:a7:bd:d5:b4:b3:86:53:76:91:
         f3:0b:6f:0e:a1:9c:f9:b3:3a:95:76:a1:08:33:3f:f2:7c:7c:
         88:8b:77:01:a4:40:31:c5:59:bb:4b:17:85:9f:f8:ed:d8:ad:
         16:b6:fb:c4:58:00:e7:c2:af:f0:41:2a:6d:59:5f:c9:4d:fc:
         67:b5:1e:41:84:53:f9:a6:ba:33:6d:bd:47:28:b8:f2:53:05:
         75:5a:97:23:76:5c:b6:04:16:a7:ed:2c:7b:7e:0c:62:b6:30:
         b7:82:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:22:52 2026 by rpki-client