Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File:                     D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier:          m6DLK4hY3a6MeghuXmGs1SQ+rQWqHL6xETaSoThIrmI=
Subject key identifier:   FD:88:8C:85:1D:71:C0:08:39:D5:8D:12:C8:81:54:E4:E6:FB:4D:E7
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer:       /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial:       0352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number:          0349
Signing time:             Mon 27 Jul 2026 02:09:23 +0000
Manifest this update:     Mon 27 Jul 2026 02:09:23 +0000
Manifest next update:     Mon 03 Aug 2026 02:09:23 +0000
Files and hashes:         1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: ABeonOftXotws1N216V0ldeiZIrdHrIxO3P0M2oDhcs=)
                          2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: 9Ep6t3AG8CiRPlIf3Yv4Y03998NV9+HGAvq1KC0HiaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
                          rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
        Validity
            Not Before: Jul 27 02:09:23 2026 GMT
            Not After : Aug  3 02:09:23 2026 GMT
        Subject: CN=6a66bdd3-819b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:2b:7e:6b:5c:09:fa:09:9b:39:0e:b9:05:
                    07:75:be:8e:21:24:5c:94:37:2b:b1:7b:76:93:17:
                    d8:2c:b1:0c:c7:85:d9:a6:e3:34:f2:d9:35:ff:31:
                    f4:90:fb:c8:f4:ac:68:2d:5f:3e:26:9f:c8:c7:0d:
                    ef:3c:c5:7b:80:52:94:3d:28:ea:88:4a:3a:71:8f:
                    17:b1:bd:85:ff:0c:79:21:50:e9:78:2f:38:2c:84:
                    8f:08:18:07:5c:a2:05:4e:ee:7d:9d:c5:9d:ae:eb:
                    b8:5a:b8:6d:a2:36:1d:c2:0e:42:56:39:00:d4:95:
                    cc:c5:97:86:eb:5c:26:ef:5b:fd:1d:db:73:1f:72:
                    3d:3c:48:b9:e6:f4:f3:62:8a:79:ff:1d:ac:bf:41:
                    69:33:a5:15:0e:5b:b7:76:aa:70:58:13:9d:b2:41:
                    e2:27:c6:71:de:62:e6:42:17:87:2a:25:bc:dd:9e:
                    e5:e3:66:2d:12:21:ac:8f:65:4c:55:d9:aa:9f:6b:
                    28:0f:51:d4:a9:e4:ec:74:5c:68:e3:2a:0a:7b:38:
                    b6:4a:10:ea:eb:09:22:73:9b:0e:b8:bb:d7:90:a0:
                    9a:91:ca:68:0e:70:cd:2e:10:e2:e9:ce:8e:49:ff:
                    b5:47:3f:ef:63:96:2c:7c:0e:55:2c:07:08:3a:da:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:8C:85:1D:71:C0:08:39:D5:8D:12:C8:81:54:E4:E6:FB:4D:E7
            X509v3 Authority Key Identifier:
                keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:72:35:81:8b:09:d8:b9:4b:63:ca:24:5b:c3:9d:62:8d:
         9d:3d:a5:c2:48:18:26:6d:ac:59:e2:48:16:be:d5:7f:2b:76:
         62:da:8e:77:bf:75:76:c0:91:d3:52:25:62:6e:71:48:b7:da:
         5d:c8:7c:ff:b6:fc:67:9f:a9:af:26:6c:26:12:a3:86:2d:81:
         3d:18:15:ef:b1:7b:40:9e:97:55:f2:3f:6a:f5:4c:2b:9d:ea:
         b7:d9:03:13:e6:48:4c:fe:0c:00:5a:cf:0f:48:c7:90:68:2c:
         cc:6b:98:3e:08:eb:71:2a:54:e3:47:6c:13:85:2c:5e:95:32:
         f3:59:ca:fc:4d:ce:0e:d5:3c:22:40:d4:16:5e:2e:97:82:d2:
         00:9d:1c:d0:e9:6b:33:b4:f1:75:5f:0d:00:40:14:11:05:10:
         d3:3e:02:fb:87:3c:b2:07:b0:22:f0:83:35:3a:04:1a:fd:7b:
         c2:2d:7b:32:72:22:86:85:9c:33:b6:c1:3f:00:04:29:c1:a5:
         9a:11:c1:a4:af:5d:9c:48:e0:f9:ac:d0:7e:6b:7e:21:14:d8:
         07:3f:73:9d:a7:75:3c:91:2f:72:57:02:7e:85:16:ff:75:2d:
         c3:8b:0b:05:88:6e:7f:de:6b:12:3a:f7:8f:8c:be:3a:0b:a5:
         70:24:9d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:26 2026 by rpki-client