Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft
File:                     nID3XsZz_EiUE3dEZP47gW1LrsU.mft (raw, json)
Hash identifier:          4/iYZPdhK3RdWLWe1J+Prd0qAkE6lmJlCjBM/rlE9uw=
Subject key identifier:   1B:C5:26:D7:BF:0F:33:5D:63:4E:42:5C:6D:D5:9F:B7:DE:85:AD:60
Authority key identifier: 9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5
Certificate issuer:       /CN=A91FB5C6/serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft
Manifest number:          39
Signing time:             Mon 27 Jul 2026 10:54:22 +0000
Manifest this update:     Mon 27 Jul 2026 10:54:22 +0000
Manifest next update:     Mon 03 Aug 2026 10:54:22 +0000
Files and hashes:         1: nID3XsZz_EiUE3dEZP47gW1LrsU.crl (hash: ZtFzRCpaq5FO/zC5fR3lO4YQ13hJxbgpV+kCJ/xJqfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl
                          rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB5C6, serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5
        Validity
            Not Before: Jul 27 10:54:22 2026 GMT
            Not After : Aug  3 10:54:22 2026 GMT
        Subject: CN=6a6738de-5962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:6d:41:0b:c1:0e:ba:e6:d9:71:19:76:79:
                    0c:a5:9d:8f:19:24:c2:3b:ee:1f:63:96:b2:d8:e7:
                    56:62:b7:6c:3a:70:20:59:64:40:4d:ee:4b:1f:19:
                    d3:75:af:49:08:bb:30:73:c5:f8:bd:2c:f8:9a:50:
                    e6:00:56:f6:f0:7b:3a:41:09:4b:e3:84:34:75:60:
                    88:14:75:ff:b7:a4:ff:73:cd:db:c1:1c:4e:e3:94:
                    80:46:a1:7c:65:3e:c1:41:35:b5:e3:d2:a0:b7:92:
                    f3:f6:e6:3c:0a:3e:8f:e6:56:83:08:0f:2a:74:11:
                    d8:e8:b3:31:b3:43:e3:7b:de:0d:cf:9b:ba:e4:5b:
                    6b:40:b5:ae:c2:b2:90:85:18:84:58:cb:c3:9b:67:
                    2a:e5:5e:80:d7:fd:80:bd:b2:ad:8d:b5:4b:37:52:
                    d1:f3:b4:4e:e3:e0:fa:54:ec:42:6d:28:8b:0c:59:
                    e0:f1:2e:ff:7d:77:c9:94:8a:76:26:f1:60:c5:ef:
                    68:a2:f1:01:75:ba:3c:ff:ba:0f:59:49:be:ea:88:
                    2e:de:ba:8b:11:6c:e0:5d:0c:77:9f:0a:dd:dd:19:
                    c8:92:db:9c:b9:d2:b0:d3:76:b5:6e:f9:d2:5c:6c:
                    d6:04:c1:f0:17:54:03:14:3b:b0:13:a2:82:55:a0:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C5:26:D7:BF:0F:33:5D:63:4E:42:5C:6D:D5:9F:B7:DE:85:AD:60
            X509v3 Authority Key Identifier:
                keyid:9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:22:de:57:e3:fe:d5:93:82:62:fb:4b:1d:b3:84:62:9c:ab:
         ef:51:f8:ce:5f:72:dc:76:3a:0b:31:8c:8a:22:69:49:68:93:
         00:04:90:79:a7:3e:f7:cd:6c:fb:76:7e:9b:d1:5f:a9:91:b7:
         8e:d3:37:99:cb:25:dd:3e:c1:15:f1:56:ce:72:c6:22:35:f7:
         c1:78:e9:74:91:45:45:ab:46:0c:a5:a5:b9:bc:0e:74:49:f3:
         30:22:b9:4f:fd:13:a0:c7:fa:9b:be:92:b0:85:c8:f0:44:a3:
         5e:cc:f9:9d:04:0f:61:c2:52:d5:42:2a:d7:30:b8:df:5b:cf:
         65:83:0a:b8:2d:36:27:f2:a2:6c:dc:d2:62:63:b1:28:91:4b:
         37:6f:92:83:a9:39:e1:44:e7:fd:ad:7b:6a:66:5b:06:5f:7f:
         8f:59:da:6b:88:71:e5:3b:df:57:02:2b:06:aa:bf:aa:cb:58:
         a5:2c:c1:b8:c1:6b:2d:8d:1a:19:f3:8f:35:15:8e:61:8c:46:
         4d:76:be:c0:f9:6f:72:a2:b0:60:88:3f:33:a5:c2:14:89:c4:
         38:c4:3a:ce:04:4e:f2:7c:b1:a5:15:c2:31:68:8f:d3:3b:27:
         19:ab:b3:e4:9a:43:14:05:51:54:77:4f:29:40:dd:5f:d5:aa:
         d6:5f:7f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:41 2026 by rpki-client