Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File:                     A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier:          YE+i/7/hmsQTaHOB5k6TwnKqR78dw+1nJ2fdbisrIYY=
Subject key identifier:   5B:62:65:95:77:B9:AE:38:07:30:8B:88:A0:2E:D8:5C:19:54:6F:16
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer:       /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial:       0424
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number:          040E
Signing time:             Wed 29 Jul 2026 01:09:00 +0000
Manifest this update:     Wed 29 Jul 2026 01:09:00 +0000
Manifest next update:     Wed 05 Aug 2026 01:09:00 +0000
Files and hashes:         1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: xUOb1v2nRiiKQQeWpz87k3jSVrDdeRLhY+uQv8XTh8k=)
                          2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6gyuElfq0PIA/FM7aREUsNAU/exyPDZQFt/Bj2F34gs=)
                          3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: 2w8tzihYxteSAWlYehFedS9pPwNpZwA6Ufz/Jy6ET4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
                          rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
        Validity
            Not Before: Jul 29 01:09:00 2026 GMT
            Not After : Aug  5 01:09:00 2026 GMT
        Subject: CN=6a6952ac-5fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:88:52:75:51:15:08:55:71:1d:33:ff:76:
                    b1:7a:74:f8:c1:2f:df:92:88:f7:fa:a8:7f:72:14:
                    12:d9:0d:53:83:f9:ea:68:50:d1:43:9b:6b:b8:1a:
                    56:59:de:cd:de:83:be:9f:81:3e:a0:de:5e:a5:63:
                    1f:aa:69:d7:75:2e:42:50:f7:9a:5c:a2:23:04:5e:
                    5a:d9:3f:d0:ac:44:75:d2:25:f9:1d:47:7e:98:e5:
                    71:90:7c:d9:65:d6:e5:b1:72:e1:aa:84:34:bd:7d:
                    6b:f0:6c:43:70:58:0f:94:4f:ff:b6:fb:f4:18:f8:
                    89:24:95:9a:7e:12:7c:52:b7:a6:02:6e:8b:4b:dd:
                    7d:a1:54:bf:d3:ca:a1:36:75:bf:7b:cc:44:f5:6f:
                    e6:0f:32:a9:ab:29:84:01:69:5e:63:66:a5:08:3d:
                    a1:f0:50:38:74:6d:09:45:7a:ec:bf:7f:61:8d:63:
                    cf:f1:1a:e4:3e:d5:89:f3:15:03:a4:ec:21:ed:81:
                    6e:18:02:20:56:49:80:8f:f9:d6:44:98:15:9a:5a:
                    b2:e0:86:9e:99:02:20:6e:d7:7a:8d:01:59:0a:23:
                    60:0f:e0:58:0b:a5:70:a6:85:da:c8:c3:d3:b8:11:
                    b7:d9:4a:5c:42:1c:04:19:26:09:90:b8:1c:c5:5a:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:62:65:95:77:B9:AE:38:07:30:8B:88:A0:2E:D8:5C:19:54:6F:16
            X509v3 Authority Key Identifier:
                keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c6:f7:78:c7:fd:16:ab:cf:cf:22:58:45:85:ea:70:03:c3:
         1c:59:81:e7:c1:43:b0:9f:7c:3b:ef:00:40:4a:f2:aa:1d:2f:
         f3:ee:58:15:76:aa:4e:14:8b:f6:b5:70:a3:58:8a:63:a4:e4:
         d9:af:f4:b6:4f:d0:13:2d:70:4c:e0:53:59:8c:ae:3b:f8:9d:
         eb:29:1c:45:ff:d5:1f:48:04:a8:b2:fc:f6:c4:dc:82:ff:72:
         68:5a:3f:12:a5:dd:ef:b4:7e:6c:48:73:da:b3:cb:c1:2e:30:
         c6:6b:1f:5c:54:80:65:28:df:af:a3:a5:90:81:e4:4b:4d:64:
         5e:c9:d1:ff:a9:c6:70:18:0a:f7:de:cf:e4:08:13:2f:d9:b4:
         11:50:eb:92:f2:0c:41:47:75:fa:6f:7d:68:05:5b:13:50:1d:
         ed:f4:f2:5e:88:2e:1d:a3:85:78:1f:19:eb:e0:64:a2:33:e5:
         50:fc:14:a2:be:c2:ce:20:22:a0:6f:07:24:71:4d:0a:f8:3f:
         70:ba:ce:41:ed:2e:c7:b1:ac:95:00:a0:a7:78:08:7e:31:8d:
         43:cf:68:3e:a9:53:92:21:e8:ac:e7:1b:ff:df:c6:8a:db:f9:
         d4:02:89:ba:b1:a8:c3:92:35:8c:40:cf:93:12:ea:61:9e:93:
         c4:0b:fc:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0
NTlEQkZDRTUwHhcNMjYwNzI5MDEwOTAwWhcNMjYwODA1MDEwOTAwWjAYMRYwFAYD
VQQDEw02YTY5NTJhYy01ZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuy6IUnVRFQhVcR0z/3axenT4wS/fkoj3+qh/chQS2Q1Tg/nqaFDRQ5truBpW
Wd7N3oO+n4E+oN5epWMfqmnXdS5CUPeaXKIjBF5a2T/QrER10iX5HUd+mOVxkHzZ
ZdblsXLhqoQ0vX1r8GxDcFgPlE//tvv0GPiJJJWafhJ8UremAm6LS919oVS/08qh
NnW/e8xE9W/mDzKpqymEAWleY2alCD2h8FA4dG0JRXrsv39hjWPP8RrkPtWJ8xUD
pOwh7YFuGAIgVkmAj/nWRJgVmlqy4IaemQIgbtd6jQFZCiNgD+BYC6VwpoXayMPT
uBG32UpcQhwEGSYJkLgcxVoKBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtiZZV3
ua44BzCLiKAu2FwZVG8WMB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2
MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw
RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAssb3eMf9FqvPzyJYRYXqcAPDHFmB58FDsJ98O+8AQEryqh0v8+5YFXaqThSL
9rVwo1iKY6Tk2a/0tk/QEy1wTOBTWYyuO/id6ykcRf/VH0gEqLL89sTcgv9yaFo/
EqXd77R+bEhz2rPLwS4wxmsfXFSAZSjfr6OlkIHkS01kXsnR/6nGcBgK997P5AgT
L9m0EVDrkvIMQUd1+m99aAVbE1Ad7fTyXoguHaOFeB8Z6+BkojPlUPwUor7CziAi
oG8HJHFNCvg/cLrOQe0ux7GslQCgp3gIfjGNQ89oPqlTkiHorOcb/9/Gitv51AKJ
urGow5I1jEDPkxLqYZ6TxAv8og==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:59 2026 by rpki-client