Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File:                     E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier:          Wk511F85SjtysbQ69UJKlcwsvNp6XLuQ28t3l4+VLq8=
Subject key identifier:   BB:4A:2D:E4:92:1C:95:B5:0F:58:06:A2:31:99:EC:99:8E:BB:FD:34
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer:       /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial:       05A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number:          0599
Signing time:             Mon 27 Jul 2026 00:08:35 +0000
Manifest this update:     Mon 27 Jul 2026 00:08:35 +0000
Manifest next update:     Mon 03 Aug 2026 00:08:35 +0000
Files and hashes:         1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: ps0ElZMmo3mdlL5qtPNU4eQ7vKgf0Vbok884F++qN3c=)
                          2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
        Validity
            Not Before: Jul 27 00:08:35 2026 GMT
            Not After : Aug  3 00:08:35 2026 GMT
        Subject: CN=6a66a183-a85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:b2:3f:6a:cf:76:e1:a6:2a:e7:e9:c0:9a:
                    05:78:19:fa:4e:41:5e:35:0d:17:2e:06:72:67:09:
                    1d:0c:05:65:78:c1:41:e1:9f:93:b3:aa:5a:d2:5b:
                    96:38:7d:6a:69:8e:99:f5:0e:6d:8c:51:0e:0d:16:
                    3d:8d:83:55:6a:bf:c0:52:96:e9:d5:e9:7a:b8:4b:
                    32:d0:f2:f9:38:dd:bb:2d:b6:05:03:0e:98:35:aa:
                    bd:25:7b:ad:e4:63:cf:97:33:e9:ea:90:51:e2:21:
                    b5:af:a4:7a:08:3e:6b:f6:9d:97:be:86:38:39:a7:
                    73:f9:fa:76:7d:87:63:5f:b8:a7:e9:e0:26:05:b1:
                    d5:a0:b7:f1:42:5a:c6:04:97:c2:86:31:04:83:7b:
                    3d:42:9e:a5:5b:4a:04:af:75:8f:6c:a4:40:65:bc:
                    93:9e:a7:63:53:32:c3:b9:16:6e:03:f9:56:65:37:
                    d5:66:ed:c5:3c:d7:ce:2c:07:fe:23:e8:3a:89:dd:
                    d3:4f:47:01:3c:88:72:fc:1f:04:e1:c3:f0:07:0f:
                    da:30:f4:10:62:45:1c:2f:dd:74:3a:e8:cc:49:1a:
                    19:14:92:dc:5f:b2:6f:89:c0:58:dc:7a:84:30:d0:
                    21:6a:c5:53:f4:b9:68:f8:7d:c1:86:9f:b8:19:3d:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4A:2D:E4:92:1C:95:B5:0F:58:06:A2:31:99:EC:99:8E:BB:FD:34
            X509v3 Authority Key Identifier:
                keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:98:bf:11:22:1e:6a:29:90:ba:16:76:fb:71:8f:e5:77:
         7a:b0:f5:db:5f:22:f9:5f:d8:83:52:79:4a:43:5f:c3:01:f9:
         7a:92:8f:ae:8b:dd:cc:b4:f4:0e:86:20:14:81:82:21:c5:cf:
         3b:7a:86:4f:51:6c:fb:a9:e7:96:74:62:25:b4:bc:01:11:8f:
         6a:f7:e2:08:5f:bc:a8:d5:68:1b:1d:a7:bb:98:34:4f:99:54:
         da:34:55:84:82:05:ba:ed:03:07:b3:eb:98:8e:69:e3:72:a7:
         04:8d:04:89:c4:6b:fe:1b:78:18:a6:0a:b9:48:2b:50:dd:67:
         46:3b:f6:d0:01:9f:26:59:29:65:32:63:99:62:05:45:da:8c:
         34:0f:ab:26:69:56:3c:95:15:2b:3f:9e:cb:43:ce:2a:5f:9c:
         1f:19:cd:11:cb:d2:d6:fd:29:e9:e1:07:05:e6:e7:1e:a1:14:
         79:ad:d2:94:f7:4f:75:86:ec:7d:76:9d:7e:8b:7a:ea:21:68:
         2b:b7:ff:dd:0e:83:4f:45:75:5e:7c:5a:0c:92:a8:1e:4d:d9:
         fa:f8:08:b7:7d:c0:c0:4f:a8:b6:b8:85:35:6c:ae:12:85:d7:
         4c:f4:a5:3c:19:ca:7a:62:89:a1:af:50:2f:0a:a7:6c:be:b8:
         44:38:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:22:40 2026 by rpki-client