Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File:                     b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier:          LyTgY6ea6gN/8bdKAoyGWg3e4I3NYrMcD2dfXW0Sed8=
Subject key identifier:   36:38:20:6B:A4:86:0C:AB:E8:55:5A:30:B0:7B:49:F6:B8:47:22:30
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer:       /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial:       11FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number:          1F3D
Signing time:             Tue 28 Jul 2026 17:14:45 +0000
Manifest this update:     Tue 28 Jul 2026 17:14:45 +0000
Manifest next update:     Tue 04 Aug 2026 17:14:45 +0000
Files and hashes:         1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: El+4sp+F/EdfNh1vCS27cqzs60wm+BZBqGgZIe15Ut4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4604 (0x11fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
        Validity
            Not Before: Jul 28 17:14:45 2026 GMT
            Not After : Aug  4 17:14:45 2026 GMT
        Subject: CN=6a68e385-34ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:86:ce:7c:46:91:9e:65:c3:5b:e7:89:4f:
                    f3:5d:82:fb:a4:9d:fb:dd:e0:67:02:c5:60:b4:4c:
                    b9:5e:9a:d7:c1:15:d8:16:00:5f:78:6e:5b:ba:85:
                    72:27:04:56:da:ae:37:a3:4e:b1:28:2b:54:fb:42:
                    c7:19:ae:b2:ef:57:b2:22:a1:7f:a9:8d:4f:ba:a4:
                    2c:c9:d7:8d:17:26:98:09:93:4d:7b:b9:76:b6:58:
                    74:81:a8:b4:86:cf:b4:a6:14:e9:0c:45:d4:8e:0c:
                    4f:e4:0e:0e:4b:d2:2c:20:a0:57:75:56:4f:d8:17:
                    eb:d6:04:3e:33:b0:9a:39:39:a6:1c:3e:55:fe:cd:
                    a9:1e:3c:be:4c:5b:de:5a:b8:8a:be:39:78:fb:38:
                    34:5d:16:d2:dd:72:49:29:98:8d:fe:1c:f0:0e:38:
                    cd:9b:f9:0a:24:a6:fd:01:64:50:49:92:f1:55:5d:
                    64:d2:aa:b0:cb:6e:4f:53:4f:e3:0e:09:0f:6b:d1:
                    ce:1f:a1:c0:00:a9:34:7b:ce:a4:27:6f:05:16:61:
                    b7:7a:92:64:d3:fa:e0:aa:bb:e3:6b:b2:5f:63:d8:
                    f5:06:64:08:86:6a:6b:7e:48:37:21:01:5a:98:61:
                    3f:0b:47:8b:0e:5e:e7:08:0f:f5:24:3d:94:41:a1:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:38:20:6B:A4:86:0C:AB:E8:55:5A:30:B0:7B:49:F6:B8:47:22:30
            X509v3 Authority Key Identifier:
                keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:3f:64:e6:e9:1c:e7:40:44:e4:d6:6e:d6:0b:96:f7:ad:
         14:a4:5c:e7:a5:af:56:b7:2d:99:3d:2e:d7:cf:2b:81:fa:07:
         15:be:a5:d6:ad:29:a8:d1:30:64:4d:f1:4e:c0:91:f3:ab:3e:
         66:21:fa:42:29:61:d8:09:fe:b6:fa:e9:84:57:00:34:0a:d3:
         32:a2:48:14:d3:19:77:7c:86:45:22:f8:92:79:87:92:72:90:
         37:78:05:a1:c8:5f:ad:b6:ff:ea:1b:95:e0:f0:c1:e0:f2:02:
         9a:d9:58:44:09:40:a6:fb:f7:54:11:bb:5d:e1:c4:a5:e5:2b:
         55:87:84:9e:0a:92:5b:fb:f9:45:ca:8a:99:d4:6c:f7:7e:99:
         65:54:a5:38:8c:cd:b2:f4:39:f0:bc:e4:db:5e:86:c1:39:47:
         f5:7b:20:5f:d5:6d:ed:23:b5:6d:ef:4f:66:ba:a3:a0:f0:c3:
         eb:75:74:97:47:4f:da:91:b5:83:22:93:34:80:27:87:b4:c6:
         0e:ba:3c:30:f2:22:6c:ec:60:59:51:37:7d:81:a3:1d:94:f8:
         4e:66:65:07:b1:da:af:94:28:87:88:56:b2:e6:80:c3:82:26:
         5f:62:8d:c3:ae:f3:5d:93:ec:34:84:dc:f7:ec:34:2d:05:f3:
         46:a7:f6:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBBRjAxMTAvBgNVBAUTKDZGN0I0NUUzREM3NjI2QzM3RjhBMDFFMEFCOEVBNEFG
MDU1RjQ5OEEwHhcNMjYwNzI4MTcxNDQ1WhcNMjYwODA0MTcxNDQ1WjAYMRYwFAYD
VQQDEw02YTY4ZTM4NS0zNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkGqGznxGkZ5lw1vniU/zXYL7pJ373eBnAsVgtEy5XprXwRXYFgBfeG5buoVy
JwRW2q43o06xKCtU+0LHGa6y71eyIqF/qY1PuqQsydeNFyaYCZNNe7l2tlh0gai0
hs+0phTpDEXUjgxP5A4OS9IsIKBXdVZP2Bfr1gQ+M7CaOTmmHD5V/s2pHjy+TFve
WriKvjl4+zg0XRbS3XJJKZiN/hzwDjjNm/kKJKb9AWRQSZLxVV1k0qqwy25PU0/j
DgkPa9HOH6HAAKk0e86kJ28FFmG3epJk0/rgqrvja7JfY9j1BmQIhmprfkg3IQFa
mGE/C0eLDl7nCA/1JD2UQaEfEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDY4IGuk
hgyr6FVaMLB7Sfa4RyIwMB8GA1UdIwQYMBaAFG97RePcdibDf4oB4KuOpK8FX0mK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG
RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi9iM3RGNDl4MkpzTl9pZ0hncTQ2a3J3VmZT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2IzdEY0OXgySnNOX2lnSGdxNDZrcndWZlNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi9iM3RGNDl4Mkpz
Tl9pZ0hncTQ2a3J3VmZTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgv8/ZObpHOdAROTWbtYLlvetFKRc56WvVrctmT0u188rgfoHFb6l1q0pqNEw
ZE3xTsCR86s+ZiH6Qilh2An+tvrphFcANArTMqJIFNMZd3yGRSL4knmHknKQN3gF
ochfrbb/6huV4PDB4PICmtlYRAlApvv3VBG7XeHEpeUrVYeEngqSW/v5RcqKmdRs
936ZZVSlOIzNsvQ58Lzk216GwTlH9XsgX9Vt7SO1be9PZrqjoPDD63V0l0dP2pG1
gyKTNIAnh7TGDro8MPIibOxgWVE3fYGjHZT4TmZlB7Har5Qoh4hWsuaAw4ImX2KN
w67zXZPsNITc9+w0LQXzRqf2vg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:31 2026 by rpki-client