Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
File:                     aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json)
Hash identifier:          clOUn7onPewEoprtkzNDU8U9BEnI4r8PL4lyZZVm8bM=
Subject key identifier:   F6:7B:B0:F3:3F:F1:81:B9:33:48:E1:A9:D7:95:57:AC:6B:36:E5:E4
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       35FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
Manifest number:          35A3
Signing time:             Tue 28 Jul 2026 14:17:34 +0000
Manifest this update:     Tue 28 Jul 2026 14:17:34 +0000
Manifest next update:     Tue 04 Aug 2026 14:17:34 +0000
Files and hashes:         1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: KRQ1TCyKrOHoj/nvY/18MyOvRmd2GFYDqMQqEmSdIWg=)
                          2: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: S5MQHQKHGoySn52561lN0xrvmjrDRJUvv1CviMHuNKM=)
                          3: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: tHVxf9Q3vQhMutTNU0Up1wvh8aZLr2ux0lvTei/d9kc=)
                          4: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: BUp0zcWa4HIudpk64mEylcMBmmGpd1vuqwNaBAsC6O8=)
                          5: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: yReVTcL58773Jpuyzjun19aGFuK7z9XDGu28zTvah3k=)
                          6: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: GnJt59bMAjeqlYPa4lin7QYgA2KcGbUA51eIDiT69YA=)
                          7: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: aqVmmYIJQaHpLvDdH8MbBjTUJnEk1fL6///wI+ixCg4=)
                          8: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: VG82nm7UqU5w2sJlNK4SDxqINYJwoA6/oxLrBlm8JIE=)
                          9: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: 8krrPxGdC1AJXLst0L0sKBcp7J4vtNMSaCyCJqfKloU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
                          rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13821 (0x35fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Jul 28 14:17:34 2026 GMT
            Not After : Aug  4 14:17:34 2026 GMT
        Subject: CN=6a68b9fe-6b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:5a:ce:c4:6c:25:a8:31:f3:af:79:68:6b:
                    57:d0:f2:ef:1c:d6:b1:ca:93:a8:10:cf:37:4c:06:
                    ac:61:9f:77:47:85:09:f8:82:c6:18:ef:da:c7:17:
                    5f:70:81:15:88:a1:ff:03:13:fd:4b:65:ce:93:4e:
                    a8:f2:31:bb:34:9c:00:06:b2:5f:30:1d:99:1e:95:
                    cb:34:7a:9a:7a:83:ea:ec:af:af:13:9b:03:6b:89:
                    9b:01:ac:a4:61:4c:f5:dd:5e:4b:91:a8:2d:6c:e1:
                    4b:57:3f:6a:6f:f9:f6:0d:cc:79:eb:3d:36:82:b7:
                    a8:fe:1a:9d:d2:f5:73:ed:d5:a7:ba:3c:34:b7:94:
                    b5:4c:55:bd:49:61:a0:89:3a:ea:76:3d:84:a6:5d:
                    00:ef:94:49:5c:97:49:bb:12:53:48:4d:3b:93:63:
                    87:23:31:36:3d:e3:16:75:ba:71:5d:1f:5e:91:a4:
                    59:19:fe:14:3d:69:2d:c4:f9:a8:0e:b3:0d:70:ee:
                    0f:7d:c0:5f:18:b2:fa:d7:c3:12:d1:3c:cc:fd:b5:
                    ee:57:f6:23:e2:be:b9:a9:62:87:29:f8:62:3e:ed:
                    ec:24:96:87:cc:9b:48:a9:e1:c5:cc:f4:7b:a7:42:
                    54:cf:ee:99:d8:7b:bd:8d:13:44:af:6c:23:2f:15:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:B0:F3:3F:F1:81:B9:33:48:E1:A9:D7:95:57:AC:6B:36:E5:E4
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1a:07:60:f9:ef:2d:bc:50:d8:6c:ec:75:d0:f2:b3:4e:e8:
         f3:39:e1:4b:19:41:5d:9a:1d:d1:24:71:c8:4e:68:9f:0c:6c:
         c9:c2:ad:77:1f:b8:fe:a6:d5:0e:4d:7b:4e:f2:57:46:f8:99:
         c2:33:69:1b:a0:05:02:70:a2:b9:5e:2b:36:12:be:b2:25:a0:
         ed:99:42:27:bd:4c:53:27:ad:66:bc:ea:e7:9a:93:82:24:71:
         58:79:d3:ab:83:7a:7b:20:68:bc:d4:4c:a6:a2:b9:8e:55:9c:
         de:d4:65:f0:c3:9d:49:ce:65:cd:df:44:23:ba:1e:da:a3:dc:
         1f:5c:bf:38:4a:f9:1c:4c:cc:86:e7:f1:4e:c0:05:c5:8e:93:
         d7:77:e1:ce:5f:85:08:6d:80:fc:5a:c2:92:77:df:38:4c:7e:
         9c:b0:1c:00:cc:96:21:62:e4:ef:12:5d:d0:5a:59:cb:d3:cd:
         d8:72:03:df:20:a2:de:5f:ee:67:5c:ab:19:62:cd:eb:d7:83:
         25:d1:04:50:16:df:69:3c:1c:fc:95:16:e4:44:9f:be:ab:ff:
         fa:29:88:f3:ef:ed:bf:a7:f3:3c:cc:c7:ec:15:01:58:4f:b2:
         ac:62:c6:18:78:db:ae:5f:be:83:3a:82:0b:f5:e0:ce:d8:56:
         eb:ba:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:54 2026 by rpki-client