Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
File:                     sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json)
Hash identifier:          yxW6dKsveRu8LLW1wif4wRefvlVsJCDxOirSiosbchE=
Subject key identifier:   0B:2A:7B:07:50:C8:17:87:06:9D:D1:4C:7C:40:34:8C:62:AC:E7:CF
Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB
Certificate issuer:       /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
Manifest number:          85
Signing time:             Wed 29 Jul 2026 09:03:48 +0000
Manifest this update:     Wed 29 Jul 2026 09:03:48 +0000
Manifest next update:     Wed 05 Aug 2026 09:03:48 +0000
Files and hashes:         1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: aJ0ik3QYxr+vIj+SeDlu4Zb+2iMRX8Xmy3aotswaVRw=)
                          2: 961A909E2D2811F181F3AA41B9833773.roa (hash: dYzmlzKtC22HQCzv3r68DO5+DJnISkpljTZWCe4Wn+k=)
                          3: F29881C82D2811F19656BE60B9833773.roa (hash: j49xZ/pNE+6bd9Li6teEM+llvM2db9Ji2DZmBv8OAyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl
                          rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
        Validity
            Not Before: Jul 29 09:03:48 2026 GMT
            Not After : Aug  5 09:03:48 2026 GMT
        Subject: CN=6a69c1f4-264a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:42:e6:de:78:cd:61:44:13:66:fe:96:c1:
                    56:de:de:f3:55:10:ea:fc:f1:d2:c1:b2:6b:c8:59:
                    4a:94:82:ab:99:bd:19:24:a7:54:a6:7b:68:d2:5d:
                    1d:bf:0a:1b:34:a7:e0:01:b9:9e:ec:b9:24:1e:24:
                    ba:c7:a5:58:7e:3f:0e:e6:09:ad:dd:a7:69:61:5d:
                    5b:c1:eb:be:19:d2:3d:a4:fe:cf:84:c4:e7:45:95:
                    10:52:18:d9:51:40:4b:f3:ec:3e:c3:b2:b0:6a:c7:
                    55:14:a3:33:ba:a4:1c:f1:01:a7:82:83:2a:31:54:
                    43:3f:46:e8:3d:b6:5d:74:a8:be:38:3b:39:20:65:
                    55:a5:34:c5:31:17:33:82:7e:b1:98:6d:4e:00:05:
                    3e:3e:4f:41:da:e0:97:76:96:0d:04:10:59:3a:61:
                    45:38:6f:ec:40:8a:41:ac:42:f3:c0:91:bf:f3:5d:
                    d2:42:0b:f8:d3:6b:0c:81:86:b8:99:21:2d:b6:69:
                    80:41:01:e0:e8:b4:7b:f6:6a:83:5b:ac:fe:f4:fe:
                    9b:8c:fe:b2:72:b5:e7:4d:d2:0e:d7:ee:48:97:15:
                    6d:12:3c:b3:07:97:65:47:13:23:2e:e9:57:ad:d1:
                    47:3f:db:78:34:6f:a3:69:88:c2:48:de:ba:9e:be:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:7B:07:50:C8:17:87:06:9D:D1:4C:7C:40:34:8C:62:AC:E7:CF
            X509v3 Authority Key Identifier:
                keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:fa:ec:30:ba:4b:12:4a:e9:48:41:a5:22:c8:46:4d:98:
         e7:35:93:cb:97:4a:29:7d:73:de:d7:ff:66:0d:cf:f0:0e:b2:
         56:2b:1a:fe:ab:43:2e:6f:59:ff:3c:f0:b8:0e:ba:fa:fa:09:
         ac:94:f5:be:9e:44:0b:d4:a7:13:38:81:f6:2f:95:f0:10:6e:
         f5:9a:fd:a8:3b:55:78:d0:f6:ed:cd:f4:4a:82:c3:16:32:b6:
         4a:16:7c:53:7d:2d:38:58:a6:04:20:bc:36:8d:51:9a:b4:1b:
         94:19:8f:b3:43:92:ed:99:73:fc:10:23:91:5e:13:27:27:c7:
         54:21:a6:4a:ef:dd:d1:f4:28:91:cc:ba:42:33:33:b6:11:83:
         8f:58:30:69:09:c1:4d:db:e5:11:c1:be:95:e0:c9:8d:e1:3a:
         31:b2:ad:f8:a0:c2:27:ab:25:b0:07:7f:0e:db:83:8c:bc:cc:
         93:ff:6a:33:97:65:0b:72:e7:b1:e3:cc:50:ec:27:41:7b:36:
         20:6b:e7:46:88:59:17:d3:92:ef:b2:e2:14:ed:df:59:c2:ea:
         42:64:3c:85:d4:52:59:5c:2e:22:22:2c:7c:1f:b4:57:2a:74:
         dc:fe:0b:b9:4c:97:d8:52:b1:be:c1:08:52:53:ce:16:8e:4e:
         40:cf:12:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:41 2026 by rpki-client