Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.mft
File:                     fd3mOzFeUumsIXzulOtTqsMd3m8.mft (raw, json)
Hash identifier:          REDwQ4tbMebCe2d+kkCDIDfzVnNaMQSm5OkvBDFbNjE=
Subject key identifier:   29:D7:06:0A:D6:E3:39:BD:FB:15:EC:B8:F4:06:C3:86:E2:32:D5:F0
Authority key identifier: 7D:DD:E6:3B:31:5E:52:E9:AC:21:7C:EE:94:EB:53:AA:C3:1D:DE:6F
Certificate issuer:       /CN=A91C8787/serialNumber=7DDDE63B315E52E9AC217CEE94EB53AAC31DDE6F
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd3mOzFeUumsIXzulOtTqsMd3m8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.mft
Manifest number:          2D
Signing time:             Mon 27 Jul 2026 11:07:15 +0000
Manifest this update:     Mon 27 Jul 2026 11:07:15 +0000
Manifest next update:     Mon 03 Aug 2026 11:07:15 +0000
Files and hashes:         1: fd3mOzFeUumsIXzulOtTqsMd3m8.crl (hash: Tjf4BbD3DETz/oxFldQNJRBo6OFYTRpoI3QnMTwkjMM=)
                          2: 5864B13A490C11F1BE52F10198833773.roa (hash: KVVWRwrymxGfC59Z8mZ9WOij5kHRNtQC8+3Ox0JonZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.crl
                          rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd3mOzFeUumsIXzulOtTqsMd3m8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8787, serialNumber=7DDDE63B315E52E9AC217CEE94EB53AAC31DDE6F
        Validity
            Not Before: Jul 27 11:07:15 2026 GMT
            Not After : Aug  3 11:07:15 2026 GMT
        Subject: CN=6a673be3-f4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:3d:03:b0:25:1d:fa:e9:89:2a:d8:b1:48:
                    82:c5:9d:4b:91:2e:96:66:6d:da:f7:02:ff:5a:53:
                    c9:49:19:05:17:a0:ac:9b:b2:57:c2:8a:40:ad:d0:
                    cc:96:49:bf:e3:77:c2:22:7f:05:c4:3f:27:8f:4d:
                    a1:6d:40:44:d6:96:a5:f9:f4:71:ca:94:a3:d1:4e:
                    fd:f6:d7:de:44:2b:78:f7:38:1f:75:7d:90:fc:64:
                    f4:c5:38:85:07:b2:2c:43:79:82:87:ba:41:a3:bf:
                    3c:90:9d:49:fc:9f:91:19:bd:43:03:28:62:1a:26:
                    c5:c6:6e:bc:46:ec:6e:b1:35:59:2e:15:d7:71:5e:
                    31:b5:f6:d1:b2:b0:14:2b:85:30:71:c3:38:12:85:
                    68:b5:e4:9d:19:80:df:59:ee:66:10:b6:c2:64:5d:
                    48:7c:03:0e:bd:6c:3c:42:c7:2c:3b:a7:dc:9d:17:
                    2e:d0:a6:97:5a:de:17:b6:10:7d:7d:a7:02:94:9c:
                    73:04:71:49:9e:09:d5:36:3b:d5:95:04:f0:3e:7d:
                    74:34:53:09:0b:23:49:1b:86:b4:bc:64:4e:26:61:
                    a2:c6:ea:3d:2e:c1:46:06:7a:d2:52:1b:29:d5:6a:
                    d2:4b:42:68:89:dc:14:f7:86:89:79:b3:47:2e:8d:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D7:06:0A:D6:E3:39:BD:FB:15:EC:B8:F4:06:C3:86:E2:32:D5:F0
            X509v3 Authority Key Identifier:
                keyid:7D:DD:E6:3B:31:5E:52:E9:AC:21:7C:EE:94:EB:53:AA:C3:1D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd3mOzFeUumsIXzulOtTqsMd3m8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:e2:a4:5a:b1:d5:dd:dc:c3:17:e3:fb:d0:85:04:10:42:
         61:80:f8:a8:21:13:a2:22:3f:2b:41:2f:d7:d7:79:ec:0d:a7:
         ee:2d:e6:92:5b:c5:f1:57:ba:4b:de:01:38:af:bd:48:16:9a:
         8b:fe:f4:37:65:3f:98:96:b3:7a:94:43:6f:f2:c4:ae:d0:08:
         fd:5a:a5:bd:0f:03:bc:3c:f4:1b:14:86:98:4a:f3:c3:d6:89:
         2f:06:fe:e5:69:a1:24:b4:a2:d1:76:ff:2c:b7:a0:c4:53:d7:
         c4:56:de:bd:b2:56:92:18:e3:4a:15:e5:e9:03:6f:e5:1a:c2:
         1e:c4:18:ec:a4:f7:da:04:9b:7e:e4:e7:cb:ae:21:e5:a8:ba:
         c3:c4:a8:1f:4e:46:61:21:3f:ac:84:2b:d5:33:95:6a:fc:7c:
         42:72:09:e1:d3:6d:c2:43:d0:c3:0b:21:a6:12:72:d8:c1:cd:
         1f:99:de:6d:05:51:f1:5c:55:e8:b2:b1:59:0a:87:9d:4f:fc:
         9e:c6:8e:b1:29:e0:36:ec:b0:86:05:63:fe:6a:90:00:db:22:
         ae:4e:b9:16:17:e5:58:f4:0b:06:33:69:75:c4:8d:8f:32:5c:
         24:1e:f9:54:70:a2:1c:79:ba:7d:68:e7:f0:de:22:57:ab:e1:
         21:dd:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:21 2026 by rpki-client