Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File:                     I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier:          ywLU9trgrDb0GhGwbXmPUdIPxTt2x+iwFdB2zAR90dE=
Subject key identifier:   3C:7C:2B:EC:E9:14:D8:55:C9:41:55:F8:F6:7A:E5:3F:C9:10:AD:9E
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer:       /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial:       02F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number:          02F1
Signing time:             Mon 27 Jul 2026 02:23:44 +0000
Manifest this update:     Mon 27 Jul 2026 02:23:43 +0000
Manifest next update:     Mon 03 Aug 2026 02:23:43 +0000
Files and hashes:         1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: IuWEhK9e1vUPJ3f88jqCCkmjpQcx7c3vHTIdIxl90EY=)
                          2: 623705DA339111ED9249064BC4F9AE02.roa (hash: roernNB+OJNNt1UVzBh6SQSSqUE+e0U1ZxC3K0oXdnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
        Validity
            Not Before: Jul 27 02:23:43 2026 GMT
            Not After : Aug  3 02:23:43 2026 GMT
        Subject: CN=6a66c12f-a807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:4d:95:63:f6:33:f6:68:bd:4e:04:ef:c2:
                    b0:80:be:06:5b:85:ba:02:fd:ba:e0:96:e1:d7:c6:
                    5c:d6:a8:24:2b:3f:22:14:ed:80:a4:5e:27:19:c5:
                    ff:9b:5b:3e:62:57:77:a9:ec:bc:b7:cf:29:7d:04:
                    36:7c:cb:86:0e:34:63:1b:41:56:0d:89:bb:26:d0:
                    1a:4d:75:80:09:af:d3:1f:f9:46:15:e4:b2:e9:09:
                    7d:90:b5:e4:0b:74:26:09:39:8d:8b:d5:1b:08:7c:
                    93:f3:35:c4:34:e1:ce:39:5d:5c:1a:9f:a0:99:c3:
                    ec:f8:b4:25:1f:13:33:3c:3f:2c:c4:4a:5e:85:f6:
                    4b:52:cd:a6:ed:23:bd:59:31:64:75:d3:1a:bf:57:
                    09:17:d4:81:15:88:b0:1d:97:00:9e:00:54:62:73:
                    5e:d4:0d:87:21:57:cb:0d:99:b8:d8:31:30:c3:60:
                    51:f9:05:1a:34:9f:76:c7:83:d3:61:16:62:3a:48:
                    03:e7:08:06:bc:7e:be:0d:6f:63:bf:12:ab:ee:bd:
                    4b:e9:34:6e:0f:c0:ac:d9:3a:1b:1e:c1:3c:40:5b:
                    5a:be:2a:09:9d:d2:f6:7c:ff:26:0c:72:c5:f5:00:
                    83:27:57:60:bd:26:11:36:6b:eb:3a:5b:8f:2d:46:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:2B:EC:E9:14:D8:55:C9:41:55:F8:F6:7A:E5:3F:C9:10:AD:9E
            X509v3 Authority Key Identifier:
                keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:aa:df:30:33:27:e0:f2:8e:5c:ec:c2:78:2f:c9:ef:8f:b2:
         66:ad:d2:61:5f:d6:ab:49:e2:ff:bc:49:9f:11:25:7d:b9:c3:
         27:e1:cb:62:c6:9e:f3:4b:43:49:c2:d7:84:45:d4:c7:ff:b7:
         c2:53:fa:da:c8:52:d9:2d:d5:22:1e:f6:a6:0a:b8:c9:2b:88:
         e8:7e:c9:1d:37:c7:fc:d2:06:3c:44:77:54:67:a6:6f:d5:a9:
         9b:a7:4b:9d:86:69:ea:42:98:0b:5d:18:11:49:4d:47:9a:29:
         5c:24:a5:72:3c:1e:a8:26:ab:f2:b7:d7:19:7c:5c:23:ac:fe:
         24:df:d7:f3:bb:99:cf:89:9a:cb:64:9c:1e:9b:38:ec:dc:0c:
         44:51:70:68:c9:1f:f2:46:ff:95:c7:64:b0:88:83:38:ed:15:
         e2:27:57:3f:9b:5d:aa:25:37:c6:74:02:78:d4:12:6f:41:9b:
         6a:51:71:c3:27:80:be:90:ee:a6:d3:13:33:cf:1c:3b:72:d1:
         3f:1a:ca:ee:84:eb:96:89:95:a7:1d:49:d0:b8:3f:1d:28:d3:
         3f:cb:3d:3c:4b:7b:f5:a9:bb:a8:6d:ee:67:e1:46:be:f7:c8:
         77:50:8b:31:cd:4e:b8:46:4c:c6:0c:8b:52:8f:dd:fa:34:18:
         8f:35:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:59 2026 by rpki-client