Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
File:                     J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json)
Hash identifier:          oipTSOKkmdz19Ljx14yr2hdF8g99rlC6efInHPCIHkc=
Subject key identifier:   F3:65:79:E4:33:FA:BE:4B:66:24:1C:62:19:78:FD:91:81:99:2B:4D
Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8
Certificate issuer:       /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
Certificate serial:       1083
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
Manifest number:          1079
Signing time:             Tue 28 Jul 2026 17:28:47 +0000
Manifest this update:     Tue 28 Jul 2026 17:28:47 +0000
Manifest next update:     Tue 04 Aug 2026 17:28:47 +0000
Files and hashes:         1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: Muis1a9hETHFO8HdDGYsJWFZH+qmD+wsfoHJVtMafwY=)
                          2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4227 (0x1083)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8
        Validity
            Not Before: Jul 28 17:28:47 2026 GMT
            Not After : Aug  4 17:28:47 2026 GMT
        Subject: CN=6a68e6cf-f7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:ad:5d:98:fe:20:a2:8d:0b:42:6e:b0:9e:
                    fe:e5:0b:3a:76:9e:44:7e:c0:59:9c:c4:e4:db:a9:
                    29:a1:13:10:cc:42:6a:4b:e9:27:1a:8e:9a:5f:0a:
                    a6:d7:68:4f:ed:17:f9:95:c7:cf:de:f3:c0:1c:96:
                    c4:c0:89:be:60:bd:34:6c:26:19:fb:99:65:d6:49:
                    9f:ed:96:7e:9c:0b:7b:d6:db:30:90:88:d8:50:d6:
                    5a:b9:52:9a:12:22:70:ac:b9:51:87:61:06:0b:f9:
                    19:ba:39:1f:01:62:f3:07:8a:18:b8:6d:5f:db:71:
                    4b:21:43:c0:6f:14:89:33:97:40:79:0d:5b:f4:69:
                    ee:96:00:8a:53:fb:60:ac:b4:d0:9d:e7:b6:87:8e:
                    25:63:30:70:fb:88:ef:9e:2d:56:29:f5:5b:49:b2:
                    66:e1:24:2d:1f:08:71:87:04:4a:d4:76:7c:db:72:
                    00:2f:c5:39:f0:13:52:01:d4:b2:1d:60:f7:8b:71:
                    65:45:22:96:c8:f5:a9:41:9c:e4:f2:26:8b:14:98:
                    18:1c:47:c1:a9:87:ed:b4:50:87:ba:6a:c1:03:b0:
                    80:83:10:e3:16:f9:7c:0a:13:8e:d2:f2:26:f4:7c:
                    53:46:d4:e5:ea:00:32:2e:d2:51:3e:e8:ef:a2:8c:
                    13:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:65:79:E4:33:FA:BE:4B:66:24:1C:62:19:78:FD:91:81:99:2B:4D
            X509v3 Authority Key Identifier:
                keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:20:8d:e2:91:b3:0a:ba:86:64:de:62:4f:7a:90:c3:e1:4a:
         b5:4a:af:99:5b:f2:1d:b7:5b:6b:33:56:a1:7a:e2:3b:32:13:
         8d:f7:ae:0f:a9:55:28:f1:9e:fe:41:04:bc:ae:60:14:8f:f1:
         4d:dd:a1:47:f9:cf:70:c3:76:cc:b4:1f:42:d1:b2:0b:1f:26:
         39:d5:e1:a3:df:11:d6:ab:db:61:ba:8b:54:46:f2:7a:e1:a0:
         63:82:79:31:57:aa:91:c5:45:61:35:68:8c:a3:a8:ca:f0:2e:
         92:b7:ab:0c:91:97:95:f2:22:67:cf:87:1d:12:29:41:c0:2b:
         90:2f:34:6b:57:1c:cd:50:44:4e:74:1f:38:22:dd:28:b5:f9:
         5f:e6:e3:f6:f0:e0:38:f1:f5:d8:16:60:2d:2c:dc:ec:2b:12:
         99:32:0d:b7:b8:37:bc:0b:17:f4:c3:21:75:a8:0a:4e:f9:84:
         b9:72:fb:68:79:98:6a:27:0e:d6:4d:b4:cf:01:5a:eb:e1:02:
         6b:31:8a:55:7f:be:61:ba:26:4d:2a:66:aa:5b:4c:e6:06:03:
         93:57:1e:03:d3:f9:67:02:09:ac:f5:df:2c:06:aa:c7:0c:ea:
         e1:fb:4f:28:41:9e:ca:a3:81:a3:ed:3b:7c:6f:21:83:22:64:
         1e:0d:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:08 2026 by rpki-client