Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
File:                     3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json)
Hash identifier:          1WoC/FHH4hADML3tgSw8vx6Djcd+//lYs2tZYOBrx5U=
Subject key identifier:   21:8E:66:B1:D2:4E:0B:BC:27:7A:3A:FB:47:BE:86:12:7E:1F:F4:EB
Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E
Certificate issuer:       /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
Manifest number:          012E
Signing time:             Mon 27 Jul 2026 07:47:26 +0000
Manifest this update:     Mon 27 Jul 2026 07:47:25 +0000
Manifest next update:     Mon 03 Aug 2026 07:47:25 +0000
Files and hashes:         1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: dGmldEpWxX6X7ydgmBolsKOrDcGKcJhTw4zVSmLqqc4=)
                          2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
        Validity
            Not Before: Jul 27 07:47:25 2026 GMT
            Not After : Aug  3 07:47:25 2026 GMT
        Subject: CN=6a670d0e-efd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:0c:0a:f9:a2:90:60:3f:9d:8e:fb:bd:20:
                    f9:30:42:62:36:d7:dc:4a:3b:a7:e4:47:5f:27:90:
                    50:47:f5:73:6d:fd:60:52:c0:dc:6f:f8:9b:dc:c2:
                    b9:41:0a:fb:1e:ef:55:5b:d3:f9:d6:26:48:b1:27:
                    bc:c2:d8:ef:b8:40:0d:55:58:b8:0b:76:e7:7b:d0:
                    ae:fa:b1:52:6c:34:6b:77:b4:3d:cd:20:86:9e:77:
                    56:7b:c5:f2:09:7b:10:a8:cb:d6:d6:65:c1:c7:51:
                    d8:c1:43:5d:18:ad:cb:00:56:ef:d6:b0:21:46:0d:
                    6f:60:9d:18:33:19:66:4b:28:34:38:84:32:37:ea:
                    8a:1e:c9:ef:fe:6f:25:12:77:a6:3a:76:43:8a:d4:
                    1f:cb:25:f4:40:0f:7a:e2:d9:fc:ef:13:a5:d4:ee:
                    06:9a:b9:a4:b9:4a:bf:50:6a:35:cc:33:d6:5d:d0:
                    6e:cc:74:6b:a4:58:c6:df:a9:1d:43:74:88:51:ef:
                    74:35:cc:bb:e6:95:cb:73:0f:7f:39:53:f9:12:65:
                    80:7e:90:91:01:e1:3d:40:15:28:5c:8f:62:98:38:
                    4f:c9:48:67:89:80:35:05:77:e1:b1:b7:72:c9:1f:
                    1d:12:fb:04:f2:e2:10:ac:22:81:c1:7f:79:c7:ae:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8E:66:B1:D2:4E:0B:BC:27:7A:3A:FB:47:BE:86:12:7E:1F:F4:EB
            X509v3 Authority Key Identifier:
                keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f7:f4:d3:94:f7:46:25:3f:63:2a:12:6f:28:e9:ff:3f:12:
         59:f1:ea:87:f3:98:8c:25:a0:42:75:1b:c9:ee:8b:9e:8b:d5:
         66:6b:12:30:1a:d0:ad:71:d6:c0:46:59:e3:d9:a9:f0:42:a2:
         98:05:3f:31:1f:1c:da:b1:d2:cc:f3:ef:a5:b1:3b:7f:d6:33:
         ae:5c:ea:03:6e:39:72:c1:a4:6c:61:df:24:be:ac:13:20:2a:
         57:0d:c6:7e:9b:6b:8c:0d:d4:90:f6:76:00:07:55:30:d9:ea:
         0a:ca:c1:ae:02:ff:3f:7e:a6:bf:f4:79:23:5d:13:98:21:50:
         d1:e4:0d:6f:cf:ce:c0:38:d9:fd:83:e2:37:61:10:8d:dd:38:
         d1:3e:94:7f:c5:80:c4:88:55:20:cc:39:1e:e8:cb:03:6a:f6:
         96:c2:33:aa:ff:d0:c1:06:4c:6e:58:d7:0f:85:99:a5:d9:fb:
         f8:4a:52:ea:eb:62:b6:d3:ac:cf:56:46:46:77:57:d4:d8:15:
         f4:fe:a9:6a:4c:78:6a:6e:71:37:b1:10:2b:fd:4c:a6:23:2d:
         4d:f2:f1:35:a1:e8:74:d1:77:65:7a:34:0c:cb:61:66:a4:ba:
         b1:9b:69:7f:59:49:6d:b7:46:31:66:d9:28:83:36:fe:c9:36:
         35:04:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:39 2026 by rpki-client