Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
File:                     kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json)
Hash identifier:          6lndMB1GaiLBXspsWRgS+y3cIsqokQCgT6SLXtZTnKw=
Subject key identifier:   7C:D8:6F:0E:62:85:A3:92:D3:B3:5F:C5:95:D1:5F:E4:79:E4:2D:2D
Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62
Certificate issuer:       /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
Manifest number:          03FB
Signing time:             Mon 27 Jul 2026 03:41:54 +0000
Manifest this update:     Mon 27 Jul 2026 03:41:53 +0000
Manifest next update:     Mon 03 Aug 2026 03:41:53 +0000
Files and hashes:         1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: YnjB8gsaj0BiLz2jgD0SVdMAlQalZra68kpCILjE2J0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl
                          rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
        Validity
            Not Before: Jul 27 03:41:53 2026 GMT
            Not After : Aug  3 03:41:53 2026 GMT
        Subject: CN=6a66d382-b280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bc:aa:f5:92:dc:eb:7a:b9:8f:7a:53:06:e5:
                    e6:fe:41:ec:22:24:6f:e7:0a:f7:5b:d6:48:c9:8a:
                    75:f4:fc:04:18:2c:5f:ca:11:fe:f5:86:fd:a9:a7:
                    64:36:3b:d9:b2:b8:a0:47:9b:15:df:c4:f3:88:b3:
                    26:7a:6b:43:00:76:e9:2d:ce:a8:73:da:ab:29:25:
                    3e:3d:e7:39:86:b3:4a:8d:f4:6c:e2:5d:36:0b:73:
                    5f:80:9c:31:7b:ac:aa:9a:6e:98:9f:52:44:45:ae:
                    52:cf:ee:1c:85:8f:93:4a:79:4c:57:32:d1:54:df:
                    00:74:1b:70:2c:9a:bc:e0:21:18:60:3b:c4:c1:2e:
                    f0:3c:a1:6b:b5:9e:2e:f5:20:4b:33:db:37:44:d7:
                    56:72:1c:52:ad:1e:c4:17:27:9b:40:11:aa:b2:1f:
                    a8:c8:74:fb:c1:2a:a5:1d:2f:44:7d:d3:8e:64:62:
                    ce:11:68:46:d7:16:32:a7:93:22:b1:7f:f1:67:0e:
                    b4:06:32:20:21:9e:cf:18:6b:19:e9:91:fa:58:5d:
                    f8:13:0a:85:28:9d:e1:f9:b9:e0:a4:3c:88:41:dc:
                    91:a6:15:1c:e8:47:5a:83:28:94:3e:0d:28:e6:c2:
                    64:7c:8c:e0:76:58:c5:04:5c:2a:e4:69:05:37:63:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D8:6F:0E:62:85:A3:92:D3:B3:5F:C5:95:D1:5F:E4:79:E4:2D:2D
            X509v3 Authority Key Identifier:
                keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e2:3c:d4:e3:7b:c8:8c:73:d0:bc:c6:96:24:1e:e5:d7:48:
         7c:ff:d3:d8:dc:26:76:a3:c6:11:1e:97:b8:3e:c2:dc:a3:73:
         ce:72:a8:85:40:4d:0a:27:b8:1d:89:be:73:2d:61:1a:9e:d7:
         0e:ff:3b:51:11:73:8e:21:32:99:25:c7:19:7e:0b:4d:16:37:
         9f:c9:fc:b6:6d:53:f8:7e:61:81:08:d0:29:cc:d3:8f:9e:19:
         90:9f:90:d6:b0:4d:73:39:32:29:37:40:4b:4e:66:2a:fe:df:
         bf:2b:cd:bd:2b:f6:34:71:cf:24:d2:f5:76:9c:f2:06:cc:4d:
         b6:f5:a6:98:78:f9:11:66:7b:5e:11:ea:26:75:fa:21:e4:2f:
         dc:47:64:88:52:2f:02:03:2c:4c:c7:6e:b8:4a:03:00:57:4c:
         e7:bf:d6:7f:62:cc:ba:1d:33:ac:c2:a2:63:a7:3c:ba:27:de:
         94:d2:b7:a1:b9:50:1c:dc:17:20:5a:6f:23:2c:6f:7a:f2:d2:
         b1:6c:aa:18:08:a2:85:c3:61:f7:d1:7f:c2:14:22:a0:f5:57:
         b4:72:d8:b6:f9:42:27:1d:bc:86:ab:fe:ee:5e:1f:eb:ef:63:
         fd:d5:b0:2e:57:fc:50:14:07:79:fb:b9:00:8a:9b:68:d5:c2:
         5e:c7:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:45 2026 by rpki-client