Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File:                     3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier:          Xa+wIFmOYzQ3POi3EOFQYJiYfUmryY+srRxr2wbTU5A=
Subject key identifier:   93:A6:75:A7:26:AA:4B:95:2F:94:53:D7:FF:A2:1F:E3:7B:4B:02:0E
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer:       /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number:          F3
Signing time:             Mon 27 Jul 2026 08:27:04 +0000
Manifest this update:     Mon 27 Jul 2026 08:27:03 +0000
Manifest next update:     Mon 03 Aug 2026 08:27:03 +0000
Files and hashes:         1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: Xl4ZQ0QsKcN8HK51t05p6UBcA8SdziwKBL3WOY14EWo=)
                          2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: T6VpKK0GSgbr7FyO43J42BuxmDs3Uod/nZfdKOm/b7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
        Validity
            Not Before: Jul 27 08:27:03 2026 GMT
            Not After : Aug  3 08:27:03 2026 GMT
        Subject: CN=6a671658-d3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:89:a7:d0:28:02:ff:93:c8:13:99:94:d8:
                    be:ed:73:d8:c5:74:13:e7:86:0a:bf:b4:13:40:3f:
                    c0:d4:c1:f2:61:7b:97:cb:ec:31:4b:95:4f:c8:58:
                    52:e3:b8:a5:5d:25:a5:e9:42:c5:d0:ca:92:36:c1:
                    3d:7d:91:b2:5a:23:8e:15:a7:9f:c7:20:3e:09:ab:
                    bb:04:3a:d1:7c:20:ff:29:f9:ae:81:1c:c7:5f:d6:
                    68:b3:d8:19:31:f2:97:95:dd:ae:eb:46:1f:3a:32:
                    40:fb:f3:d2:b5:cf:f8:04:60:7f:87:82:3c:48:56:
                    88:af:bc:27:29:16:37:ab:7f:02:65:31:a3:e2:65:
                    7d:ba:be:9b:b7:9c:01:35:f2:7f:c7:2f:be:bc:a7:
                    6c:c6:34:ee:fd:1a:41:75:77:af:c7:8e:7a:16:2c:
                    60:30:b0:e1:b3:bf:3b:40:c3:93:ff:24:7a:de:ff:
                    cf:d6:24:d3:e7:84:b0:20:5f:11:66:12:07:1b:b0:
                    43:cb:74:a1:85:bb:cf:f4:c7:28:d3:d2:b3:36:37:
                    5a:2a:87:f9:f8:b4:91:b3:86:67:6c:a9:63:c9:0c:
                    db:c1:ce:09:e6:dc:95:a0:4e:3b:c8:aa:0a:92:51:
                    45:eb:78:c4:94:42:62:13:19:9a:9f:ac:26:8f:b3:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A6:75:A7:26:AA:4B:95:2F:94:53:D7:FF:A2:1F:E3:7B:4B:02:0E
            X509v3 Authority Key Identifier:
                keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:9a:f8:0a:50:ca:98:86:9c:4a:0f:0b:e4:87:6a:2a:a1:
         9f:c5:89:32:f9:a1:d3:07:47:ac:b0:71:95:c5:d9:e0:cc:53:
         de:d5:5e:5b:34:38:e9:e4:5f:6a:28:4c:7d:29:08:a0:aa:f3:
         9c:95:20:ee:9f:6d:49:0a:b7:82:12:cf:40:05:4f:ee:26:01:
         8b:ce:83:06:84:0a:7e:4f:69:11:ef:d2:3f:84:96:db:1b:46:
         82:10:42:a7:10:ab:60:ae:f3:de:5a:57:ea:e4:c4:b7:0e:e5:
         0f:61:a3:ad:90:cf:50:27:92:ea:27:69:3f:66:af:a6:f1:df:
         e4:e7:15:9a:fb:be:25:79:ad:26:f2:11:46:1e:30:44:4e:0a:
         e1:a0:3b:28:46:b6:1a:08:46:04:ac:65:0b:2e:0b:f5:99:81:
         a7:3e:ec:22:94:ca:b1:1e:90:cc:e7:37:6b:e6:91:5c:3c:5a:
         28:47:3b:4b:0b:57:77:42:d0:5d:de:37:ea:8b:02:37:42:a8:
         26:60:70:31:86:61:84:85:83:63:5c:28:bd:22:8a:1e:12:83:
         a0:fe:58:95:4c:f5:8c:12:ed:0f:3e:4a:1d:d3:e5:59:ab:3f:
         d2:cb:d9:ac:cf:89:f4:bb:87:39:9c:b0:39:68:bf:e6:22:e3:
         ab:6a:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:31 2026 by rpki-client