Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File:                     3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier:          nQLxJYPRJd6yaDSsb/QrHg04EGAdgV9YrS4HPVh4hvM=
Subject key identifier:   11:BA:0F:5C:E5:C4:A4:8C:B1:C8:70:20:AC:B8:1D:30:FC:A5:4E:DF
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer:       /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial:       0B0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number:          0B02
Signing time:             Tue 28 Jul 2026 19:38:44 +0000
Manifest this update:     Tue 28 Jul 2026 19:38:43 +0000
Manifest next update:     Tue 04 Aug 2026 19:38:43 +0000
Files and hashes:         1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: XTMFPGgX6/zUD21sX1WrcGfGoNYlKcT+Xe0FXhhlPyA=)
                          2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: P/kcrXkZBOpELFUVRD4sym1i0y2tovzreFKC78AoiZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
                          rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2831 (0xb0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
        Validity
            Not Before: Jul 28 19:38:43 2026 GMT
            Not After : Aug  4 19:38:43 2026 GMT
        Subject: CN=6a690544-d52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:5a:cd:75:ff:1e:4b:ae:68:ba:69:4c:c7:
                    26:89:5f:c4:6e:c7:ad:49:a2:6c:16:a5:62:ba:96:
                    6e:46:37:5b:be:3c:cf:58:59:2b:ce:70:e0:f4:57:
                    f9:83:a7:ae:c8:0e:20:6d:2d:d0:3f:2f:5c:9a:b2:
                    76:2e:90:c5:6f:cb:a5:cd:a9:40:15:a6:6a:ac:a1:
                    f0:f5:9f:6a:5a:10:e2:f3:b9:ac:9e:59:34:e7:71:
                    2a:24:95:6e:2c:df:4e:bd:16:ea:e6:5c:89:fa:9d:
                    23:c9:bc:e8:25:3f:ec:de:f6:19:64:78:fd:9b:58:
                    6d:fa:e4:c0:f9:0a:bb:30:a4:b8:40:81:27:9c:72:
                    d5:62:09:07:7b:1e:b9:d6:d1:46:64:50:51:46:ce:
                    2d:07:4e:12:53:90:7f:d5:d4:29:b8:e4:c5:35:b9:
                    a3:15:d1:ac:b2:d3:c0:34:f9:c7:79:3c:fc:85:db:
                    5d:41:5c:31:6f:3a:a7:1e:06:59:71:f7:91:af:71:
                    f7:ed:d8:1b:ab:f2:34:44:d2:df:6e:e7:4c:fe:76:
                    f3:4f:64:7f:0b:a7:d2:2c:6b:55:b8:e6:97:65:34:
                    5f:9e:7a:b8:9a:97:22:bd:08:42:ca:ee:ff:d4:b2:
                    4c:65:d5:4c:c3:fb:1d:72:96:9b:26:3c:4a:a2:4d:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:0F:5C:E5:C4:A4:8C:B1:C8:70:20:AC:B8:1D:30:FC:A5:4E:DF
            X509v3 Authority Key Identifier:
                keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:a9:51:51:86:90:32:e4:4e:3f:29:88:c6:41:8d:01:cc:
         11:c2:be:07:24:7b:b4:a1:ae:7e:63:1e:fb:0e:06:b2:52:fb:
         e3:3f:36:4b:06:85:eb:d6:1a:02:4f:48:3d:16:0b:3a:29:9b:
         34:27:53:5f:96:3d:d8:b6:16:95:c2:01:6c:a5:96:bc:d0:03:
         d0:3d:2f:53:95:ed:db:37:4e:a7:19:f4:ea:3e:41:35:a4:c6:
         11:86:e0:9d:68:f2:ce:3a:70:9f:7c:35:ea:d6:48:88:2f:c0:
         27:35:23:c8:49:b7:a2:39:fe:09:0e:22:22:4c:60:a0:21:c3:
         bd:f0:7f:aa:de:46:58:26:22:bc:d5:ff:ca:9d:5e:2b:42:59:
         0d:50:1d:fd:e3:bb:a7:19:14:db:d6:80:10:42:8a:a0:6b:bd:
         65:b6:d1:02:46:05:7c:94:9b:2f:c3:88:f9:9d:ba:9f:7b:2a:
         1a:f9:11:c1:59:5b:98:38:00:4b:d9:ca:9f:a2:00:38:cb:22:
         c1:69:55:b6:02:db:b8:4d:9b:81:92:33:87:ab:f7:df:d9:18:
         02:9a:65:9e:92:5f:ff:21:14:2d:dd:14:d5:4f:c0:bc:c5:0e:
         b7:6f:b1:43:8d:6f:de:54:67:c4:75:22:d8:0e:d0:34:15:8a:
         70:2c:00:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ4MjkxMTAvBgNVBAUTKERDQ0Q1NTM1NTJCQUY4QTY1QzFBMDY2QjMzNDdGNzkz
MjQ0RjU3NUUwHhcNMjYwNzI4MTkzODQzWhcNMjYwODA0MTkzODQzWjAYMRYwFAYD
VQQDEw02YTY5MDU0NC1kNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHNazXX/HkuuaLppTMcmiV/EbsetSaJsFqViupZuRjdbvjzPWFkrznDg9Ff5
g6euyA4gbS3QPy9cmrJ2LpDFb8ulzalAFaZqrKHw9Z9qWhDi87msnlk053EqJJVu
LN9OvRbq5lyJ+p0jybzoJT/s3vYZZHj9m1ht+uTA+Qq7MKS4QIEnnHLVYgkHex65
1tFGZFBRRs4tB04SU5B/1dQpuOTFNbmjFdGsstPANPnHeTz8hdtdQVwxbzqnHgZZ
cfeRr3H37dgbq/I0RNLfbudM/nbzT2R/C6fSLGtVuOaXZTRfnnq4mpcivQhCyu7/
1LJMZdVMw/sdcpabJjxKok1BFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBG6D1zl
xKSMschwIKy4HTD8pU7fMB8GA1UdIwQYMBaAFNzNVTVSuvimXBoGazNH95MkT1de
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDgyOS85OUQ3QzZBNDZG
RUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1LWmNHZ1pyTTBmM2t5UlBW
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNNMVZOVks2LUtaY0dnWnJNMGYza3lSUFYxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDgyOS85OUQ3QzZBNDZGRUYxMUVBQUYyMjc0ODNDNEY5QUUwMi8zTTFWTlZLNi1L
WmNHZ1pyTTBmM2t5UlBWMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK/+pUVGGkDLkTj8piMZBjQHMEcK+ByR7tKGufmMe+w4GslL74z82SwaF69Ya
Ak9IPRYLOimbNCdTX5Y92LYWlcIBbKWWvNAD0D0vU5Xt2zdOpxn06j5BNaTGEYbg
nWjyzjpwn3w16tZIiC/AJzUjyEm3ojn+CQ4iIkxgoCHDvfB/qt5GWCYivNX/yp1e
K0JZDVAd/eO7pxkU29aAEEKKoGu9ZbbRAkYFfJSbL8OI+Z26n3sqGvkRwVlbmDgA
S9nKn6IAOMsiwWlVtgLbuE2bgZIzh6v339kYApplnpJf/yEULd0U1U/AvMUOt2+x
Q41v3lRnxHUi2A7QNBWKcCwAyg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:41:52 2026 by rpki-client