Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File:                     31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier:          sJTEv0o02Mox47OmlIJTNcCy1TG/hKoIIJzVTh9foS8=
Subject key identifier:   57:31:C5:D0:46:A2:6E:46:95:5F:CD:3D:F8:B3:1B:F6:32:10:70:B6
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number:          0148
Signing time:             Mon 27 Jul 2026 07:21:08 +0000
Manifest this update:     Mon 27 Jul 2026 07:21:07 +0000
Manifest next update:     Mon 03 Aug 2026 07:21:07 +0000
Files and hashes:         1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: KP8bhg1SE3ZLYYbnXR/FhnbxhQ15P5LoCqR5FHPdr+Q=)
                          2: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
                          3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Jul 27 07:21:07 2026 GMT
            Not After : Aug  3 07:21:07 2026 GMT
        Subject: CN=6a6706e4-07b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:22:de:95:2c:31:1c:13:12:38:ed:8a:75:
                    0f:cb:ff:53:80:96:9b:6f:e7:95:e8:9e:9b:d9:16:
                    fd:07:f4:ae:dc:5f:f8:33:ae:cc:3c:93:7b:3c:16:
                    ca:f5:8d:3e:8d:49:70:53:0a:dc:61:83:dc:01:d3:
                    32:14:4d:d6:7a:e4:e5:91:0f:59:74:b8:1c:65:b3:
                    73:f1:72:9b:5f:92:4f:c5:21:ac:c1:aa:c5:ef:70:
                    3a:3d:91:3b:00:4a:7f:e6:b8:a9:ad:11:0c:85:e3:
                    f7:2a:a9:6f:03:80:55:d5:da:64:e6:8d:ca:26:75:
                    7b:05:40:a7:77:46:01:7a:4b:85:46:f6:c8:1e:88:
                    0e:9a:98:7a:fe:24:41:e4:97:44:30:ad:9f:e4:bd:
                    39:f0:3b:d1:11:0e:02:2a:fe:db:46:34:43:8d:fd:
                    c6:0e:37:ff:10:6c:31:7a:23:55:9f:96:bd:3a:a5:
                    67:e6:8a:64:1f:44:c4:13:f1:fb:d8:a0:b6:7c:03:
                    73:5d:3d:60:03:8e:9f:13:23:34:70:01:0c:d2:70:
                    20:ac:ac:0b:3e:d7:00:54:55:bd:73:0e:61:8b:51:
                    39:11:06:01:33:6f:0c:0e:f2:d2:b5:67:9e:06:23:
                    73:92:38:ac:1a:73:ae:c4:b4:f2:42:c2:bd:b6:16:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:C5:D0:46:A2:6E:46:95:5F:CD:3D:F8:B3:1B:F6:32:10:70:B6
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:b6:5f:fd:9a:77:08:d0:d8:f7:c2:ff:dc:b5:f3:0a:48:
         65:db:10:37:d8:d4:44:03:85:af:1a:18:73:9d:0c:18:86:12:
         18:0e:56:f2:d2:db:a5:bb:4d:06:41:59:c9:51:91:4c:76:7e:
         d0:f4:a6:04:67:63:fe:b3:cd:e9:07:93:4e:61:c1:80:b1:8f:
         11:99:d8:ea:a0:d4:4f:10:60:9c:90:a0:4e:d6:37:f5:90:49:
         30:6d:5a:41:65:dd:02:15:e4:a3:03:38:3d:c6:02:e5:91:25:
         bf:e9:61:ab:85:71:e9:51:32:83:ae:50:bd:36:ef:be:a6:f1:
         42:f6:2e:89:40:e5:0f:47:c5:9d:1a:5b:22:bd:eb:42:7f:e3:
         25:ac:41:76:6f:a1:28:dc:51:d2:de:1a:d7:ee:24:e6:10:bc:
         4b:32:1c:1f:04:cb:1d:fb:6b:4d:39:5b:5e:e7:cc:63:b4:24:
         e5:e3:7c:9b:50:f5:7b:50:d3:45:4d:91:fd:fb:3b:14:17:91:
         81:0a:d8:e3:bf:db:67:77:d7:d7:10:59:b6:24:6f:64:bd:1e:
         b0:c9:31:e7:ae:4e:3a:e7:e8:52:bc:42:60:d9:14:bc:54:2f:
         fb:87:dc:32:59:1b:ae:b9:13:da:0d:78:ff:74:36:ce:f2:a1:
         ee:8b:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:20 2026 by rpki-client