Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
File:                     3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json)
Hash identifier:          8iMbHLT0M8ZGNy71FHeBGhfT4ghyNWSukueATwgsmYo=
Subject key identifier:   D1:11:13:48:49:6B:BC:5B:4C:6D:88:38:C4:40:36:D1:33:0C:0F:CD
Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
Certificate issuer:       /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
Manifest number:          0BDE
Signing time:             Tue 28 Jul 2026 19:47:58 +0000
Manifest this update:     Tue 28 Jul 2026 19:47:58 +0000
Manifest next update:     Tue 04 Aug 2026 19:47:58 +0000
Files and hashes:         1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: yp4N6ALWKPuNdsvMFhesSuU+MmXRHiONPuXLI7s6SsM=)
                          2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
                          rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
        Validity
            Not Before: Jul 28 19:47:58 2026 GMT
            Not After : Aug  4 19:47:58 2026 GMT
        Subject: CN=6a69076e-25e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e0:89:c0:3f:2a:a0:55:2e:1a:5a:fe:42:42:
                    1d:79:f4:f2:a3:a6:52:10:4a:d3:86:bc:8a:58:b1:
                    58:e7:96:e1:86:73:10:d9:ed:c8:57:6d:f9:89:a2:
                    4b:61:45:c8:b4:69:b6:1e:a5:4b:0e:4b:80:22:3a:
                    fc:04:12:27:5b:28:03:26:55:64:a8:5e:2d:88:e0:
                    f6:9e:86:39:58:5f:b8:d3:64:fb:04:c1:40:1d:a8:
                    51:b1:a8:cb:cc:4a:fd:cc:16:0e:af:ad:3e:fc:fb:
                    ea:37:db:04:67:c4:55:c0:93:5d:ab:03:87:ca:bb:
                    36:88:6f:09:1c:12:c4:5b:1a:4f:74:e7:81:7d:aa:
                    5f:b2:72:3c:26:29:ec:3b:6a:6a:2b:4b:ea:d8:c0:
                    e0:22:4f:7e:b7:a2:d2:ee:72:db:02:04:47:8d:88:
                    39:82:18:b5:48:fe:60:17:ae:0e:bf:75:1f:70:57:
                    a6:d5:c7:15:b5:14:60:bd:de:5a:f3:4f:74:be:46:
                    49:cd:1b:1a:c4:d3:b0:13:e0:f3:7a:e7:b2:18:fb:
                    85:b7:27:b2:ad:70:42:0e:5a:4e:6e:69:50:5b:b1:
                    76:23:90:8d:ad:10:7e:ba:44:46:c6:d9:ff:e2:be:
                    f4:8a:94:37:d6:9f:a5:91:54:4a:06:b7:b7:30:e1:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:11:13:48:49:6B:BC:5B:4C:6D:88:38:C4:40:36:D1:33:0C:0F:CD
            X509v3 Authority Key Identifier:
                keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:74:37:e3:90:17:17:85:e4:61:5b:d4:60:70:0b:a0:2e:
         ee:35:e7:33:0c:64:71:63:f3:3d:99:43:aa:15:b3:91:51:1c:
         e1:b9:ea:af:a1:c2:a0:d3:27:7b:b7:95:8e:21:5f:6b:02:57:
         e8:f9:fa:d5:9a:f4:fb:95:8f:2d:56:30:99:fa:71:cd:e8:3a:
         3c:c9:93:63:1f:ab:98:76:01:9d:a1:b7:ce:da:77:0c:35:b1:
         1e:7c:eb:3c:27:84:77:7f:63:c2:e7:88:8a:78:5d:32:b3:8b:
         9f:fe:3a:b2:43:fa:9e:c5:a1:fb:31:4f:a5:44:cc:c4:7d:d9:
         e6:6c:82:0e:09:f4:86:98:70:3c:f6:60:41:12:7a:4f:fc:a7:
         99:17:84:9a:ab:ce:29:b4:d9:1c:1e:6e:16:b9:26:e6:15:88:
         2b:8a:ce:84:6b:21:1f:e6:de:2c:35:b5:69:8a:6b:f1:d9:61:
         65:98:8a:d3:c4:40:7d:83:ab:12:0f:47:75:fd:db:47:dd:bf:
         76:80:38:15:f4:60:2c:5c:3d:26:24:67:4a:21:1e:e6:d9:75:
         3d:48:a5:dc:3b:f7:b9:7e:e0:b6:06:26:a2:79:6c:17:5b:c2:
         c6:e3:1b:5d:9d:9b:1d:3e:a2:3c:a9:fb:33:9a:5a:92:91:c7:
         49:b7:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:33 2026 by rpki-client