Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
File:                     3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json)
Hash identifier:          CmVS0gCqNofb25s7EjFgmeM3oVmH3pXANTCzTmub4JI=
Subject key identifier:   72:3A:A5:D2:4F:62:75:BB:08:29:B5:74:2A:72:DD:31:7C:A6:7B:80
Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24
Certificate issuer:       /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
Manifest number:          0150
Signing time:             Mon 27 Jul 2026 07:05:19 +0000
Manifest this update:     Mon 27 Jul 2026 07:05:19 +0000
Manifest next update:     Mon 03 Aug 2026 07:05:19 +0000
Files and hashes:         1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: D/XtTBEzbBbcxbObsVlVi8pbpAVONZE3C9GHaF78ifM=)
                          2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: d7xVs3t7CcfMe/ajdsTZTFxRrOglm1vaW7xirB1AT90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524
        Validity
            Not Before: Jul 27 07:05:19 2026 GMT
            Not After : Aug  3 07:05:19 2026 GMT
        Subject: CN=6a67032f-eec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7e:8e:b5:8e:d9:b9:37:ef:07:e1:3d:1d:b7:
                    81:7a:af:e9:67:54:2e:c6:16:e5:e7:29:36:5f:51:
                    d3:fd:03:87:e8:1a:29:2e:9c:73:71:7a:7d:0b:f0:
                    43:9b:19:9d:b7:fd:fa:92:a3:f7:b6:de:49:38:aa:
                    8b:64:5e:e8:3e:37:6a:52:59:29:54:91:d3:89:d9:
                    3d:24:72:55:ac:ed:58:2a:98:54:9f:4e:54:c2:4b:
                    74:a3:80:f4:f6:ad:9e:30:7d:55:9e:b7:87:82:2a:
                    c5:11:8e:0a:a6:e3:59:0e:d1:e3:9c:a6:0c:6b:59:
                    bb:a6:f1:04:7b:eb:d2:b4:48:f1:83:61:69:a0:da:
                    49:53:42:47:52:2d:b0:8f:51:0b:8f:29:ad:77:90:
                    ad:c0:59:06:f2:c0:83:96:2f:64:00:96:30:84:10:
                    93:57:2b:57:45:62:71:da:aa:26:5d:3b:22:22:f1:
                    59:21:70:96:72:ea:93:86:bf:b1:bb:91:8d:27:17:
                    3e:d6:ae:46:8c:35:93:75:6e:d8:17:cc:b8:7b:57:
                    30:10:a4:42:4d:f2:d8:78:bc:97:d8:17:7b:e9:90:
                    e6:48:d0:2b:c0:89:fd:e7:3c:f0:fb:55:35:28:e3:
                    2f:a5:db:35:f6:3d:02:06:e8:13:35:33:4c:d2:fd:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:A5:D2:4F:62:75:BB:08:29:B5:74:2A:72:DD:31:7C:A6:7B:80
            X509v3 Authority Key Identifier:
                keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:84:2e:bf:da:5e:1a:69:6e:0c:ba:2d:28:33:50:3c:81:e7:
         21:fa:a6:05:39:39:dd:41:f5:5c:92:a2:11:96:d2:ce:77:d5:
         ef:b0:31:b1:0d:f7:b4:8c:8e:d8:98:09:03:9e:83:3d:0b:3f:
         a6:e5:3f:9f:61:45:c1:95:fb:6c:89:a4:ae:d0:5b:6f:f7:02:
         b6:e7:e9:56:ef:3e:0b:30:15:9d:2d:0d:b5:d7:b9:d7:db:f4:
         2a:a4:41:26:62:9b:54:32:68:f7:b3:8c:dd:0b:a4:d6:c8:f0:
         be:c7:07:4e:dd:34:2f:f9:56:4c:1d:ab:0b:5d:31:0d:57:af:
         49:74:fa:67:4c:8d:73:e0:08:83:c5:df:b0:1b:8f:3a:09:11:
         fe:8c:15:77:d6:13:8d:a9:e1:12:d8:ee:cc:c5:ad:54:57:a4:
         8f:d4:dd:51:18:70:c0:3d:99:11:92:06:55:37:a0:90:1a:14:
         c1:39:c2:6b:16:42:58:49:39:25:b3:cc:76:ed:8f:ff:f2:c5:
         8e:f3:4e:64:b2:f4:55:60:f4:f0:40:ce:cf:9d:de:58:75:04:
         36:c3:77:09:8f:4d:5c:ed:a6:ad:07:c8:0c:67:38:d8:2f:49:
         ef:a1:1c:3b:2b:03:fe:c6:52:70:57:04:19:8e:92:07:db:73:
         b8:9f:ec:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4
RTkyRDI1MjQwHhcNMjYwNzI3MDcwNTE5WhcNMjYwODAzMDcwNTE5WjAYMRYwFAYD
VQQDEw02YTY3MDMyZi1lZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5H6OtY7ZuTfvB+E9HbeBeq/pZ1Quxhbl5yk2X1HT/QOH6BopLpxzcXp9C/BD
mxmdt/36kqP3tt5JOKqLZF7oPjdqUlkpVJHTidk9JHJVrO1YKphUn05Uwkt0o4D0
9q2eMH1VnreHgirFEY4KpuNZDtHjnKYMa1m7pvEEe+vStEjxg2FpoNpJU0JHUi2w
j1ELjymtd5CtwFkG8sCDli9kAJYwhBCTVytXRWJx2qomXTsiIvFZIXCWcuqThr+x
u5GNJxc+1q5GjDWTdW7YF8y4e1cwEKRCTfLYeLyX2Bd76ZDmSNArwIn95zzw+1U1
KOMvpds19j0CBugTNTNM0v0xEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHI6pdJP
YnW7CCm1dCpy3TF8pnuAMB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5
RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr
TmxTOUlKTm9JRmVPa3RKU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwoQuv9peGmluDLotKDNQPIHnIfqmBTk53UH1XJKiEZbSznfV77AxsQ33tIyO
2JgJA56DPQs/puU/n2FFwZX7bImkrtBbb/cCtufpVu8+CzAVnS0Ntde519v0KqRB
JmKbVDJo97OM3Quk1sjwvscHTt00L/lWTB2rC10xDVevSXT6Z0yNc+AIg8XfsBuP
OgkR/owVd9YTjanhEtjuzMWtVFekj9TdURhwwD2ZEZIGVTegkBoUwTnCaxZCWEk5
JbPMdu2P//LFjvNOZLL0VWD08EDOz53eWHUENsN3CY9NXO2mrQfIDGc42C9J76Ec
OysD/sZScFcEGY6SB9tzuJ/sow==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:11 2026 by rpki-client