Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
File:                     mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json)
Hash identifier:          OVzbtTk7o+eW1t/ZHaSorNtptomJwBoauC1lHrBtlA0=
Subject key identifier:   9D:A4:B6:C3:2B:30:35:9D:01:C1:6F:8D:FC:83:14:2F:28:C3:B2:51
Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Certificate issuer:       /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
Certificate serial:       0868
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
Manifest number:          085D
Signing time:             Tue 28 Jul 2026 21:21:03 +0000
Manifest this update:     Tue 28 Jul 2026 21:21:03 +0000
Manifest next update:     Tue 04 Aug 2026 21:21:03 +0000
Files and hashes:         1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: 7c8G+foSHs9hyyI9JgWaQsr439qQDKz5NK/NFcJ/c3s=)
                          2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: xktL8xnt8d8VvVMvmkgTHPe7LUSoKc1zKJuGX9n3RSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl
                          rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
        Validity
            Not Before: Jul 28 21:21:03 2026 GMT
            Not After : Aug  4 21:21:03 2026 GMT
        Subject: CN=6a691d3f-5fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:99:c5:3b:1d:a8:5f:6d:75:2b:0b:ac:b2:
                    5e:23:f6:66:7d:7e:fc:39:91:c8:8b:96:3b:d2:e3:
                    2b:f5:8a:1b:34:7e:86:fd:ac:6f:60:3b:7c:37:16:
                    f1:7e:c0:02:39:49:9c:bc:84:7a:18:03:80:0a:3c:
                    64:6b:7b:0f:56:9c:10:1a:94:15:4c:e5:bb:f5:69:
                    1c:35:1b:22:e6:be:bf:10:3d:e8:3e:50:bd:f0:f8:
                    7b:c0:15:8c:cf:b2:80:4e:f2:00:ab:a3:a7:5e:50:
                    c1:67:50:ae:2d:be:16:cc:c4:07:2b:1d:89:a2:5f:
                    7e:3b:80:2a:7e:38:87:3e:9d:45:1c:42:43:86:2e:
                    3d:83:cd:8f:9e:12:1a:18:5c:60:56:08:42:ad:0d:
                    e0:6c:10:a7:7d:c5:19:ab:27:35:23:0a:ed:a3:9a:
                    f0:1c:17:fd:31:2c:7c:d9:86:92:f6:0e:a0:cd:08:
                    04:48:b4:e4:58:f5:e9:00:2c:54:3c:14:8e:f8:89:
                    63:d8:c1:9e:28:16:dd:11:5f:92:30:bb:ca:07:b7:
                    43:6c:8f:95:50:73:cf:f6:22:c6:94:11:36:91:c7:
                    95:a2:ee:0f:f5:40:8a:a8:53:a8:86:5c:4d:db:69:
                    45:25:15:fc:ef:74:e6:de:44:84:e2:cd:66:7a:2a:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A4:B6:C3:2B:30:35:9D:01:C1:6F:8D:FC:83:14:2F:28:C3:B2:51
            X509v3 Authority Key Identifier:
                keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:82:26:6d:42:aa:90:5a:91:f9:d2:43:d4:e2:8f:6b:6e:
         9a:07:fe:01:49:d6:cd:b6:19:b5:05:87:71:f1:56:68:02:5c:
         ad:28:03:0a:03:6a:95:85:57:12:d5:e2:d9:7a:2b:b4:4d:28:
         4e:c4:d1:43:f3:88:1c:d2:57:ad:3e:91:08:8c:19:a0:ae:15:
         0f:73:c5:e7:6a:b6:37:c5:57:dd:90:75:d0:87:ac:83:e5:03:
         d5:2d:10:99:43:f1:8f:b6:40:e8:5e:cf:7b:2c:12:99:25:cb:
         45:0a:4f:ad:1d:09:a3:2a:28:87:40:86:16:c4:7d:88:13:75:
         cc:68:f0:72:40:8a:39:ec:27:89:fa:5f:bc:e3:f5:c1:e3:a5:
         2e:3e:1a:bc:ac:cb:08:c7:97:dc:e6:14:d7:cb:1b:23:19:02:
         66:df:e4:13:03:73:83:8b:54:5a:a1:38:11:73:f8:c2:63:0d:
         d8:74:38:25:f1:09:74:ac:2b:b8:04:42:9d:eb:b3:b8:60:cf:
         b5:bd:f8:a3:dd:76:66:ae:f6:6b:39:a4:07:24:d3:45:2d:8f:
         54:05:e8:54:d2:17:8e:1f:f1:40:21:fb:a5:1a:32:06:e2:e5:
         ad:14:6c:d4:51:21:d1:1f:c6:24:45:c2:4e:9a:31:c4:a2:a0:
         40:6e:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:19 2026 by rpki-client