Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
File:                     3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json)
Hash identifier:          Ws3NPOHgXvOo+aKz8qSubpFcFIZbAVRRl5zQ66edpgo=
Subject key identifier:   72:BB:DE:FD:1B:04:69:B6:2D:82:F3:75:EC:9A:C4:70:61:E5:73:BA
Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
Certificate issuer:       /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
Manifest number:          0222
Signing time:             Sat 13 Jun 2026 02:46:51 +0000
Manifest this update:     Sat 13 Jun 2026 02:46:50 +0000
Manifest next update:     Sat 20 Jun 2026 02:46:50 +0000
Files and hashes:         1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: rDXv+BTbA5qZZTvftgk7i0nAbPGtatXFxYROi+H6Q1E=)
                          2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: X00gSuzOOkYP4DLmpOt/0UBFhvldg0Co5j7FLcwODFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
        Validity
            Not Before: Jun 13 02:46:50 2026 GMT
            Not After : Jun 20 02:46:50 2026 GMT
        Subject: CN=6a2cc49b-79ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:85:6a:23:20:58:20:b0:32:86:5d:27:4c:
                    39:ac:4e:20:25:a9:20:cc:53:f8:6b:5c:29:a5:d0:
                    ba:5a:ea:3f:a9:5b:23:9c:d7:ee:c9:bd:5a:02:97:
                    40:ce:5d:7a:72:e6:4f:d4:4e:5b:6f:41:86:fc:2f:
                    4c:e8:1a:0e:ef:9e:50:21:9b:a1:93:88:5b:88:87:
                    25:18:3b:90:24:84:97:44:98:10:ad:97:e1:66:db:
                    fb:42:e1:f8:03:bd:77:6c:c3:0c:b6:de:f6:1b:06:
                    c3:fe:e7:02:d2:6f:42:99:39:c3:ca:57:d4:a9:89:
                    1e:56:f4:80:7c:f8:a1:56:9d:43:7e:99:4c:78:4c:
                    e7:3e:cc:0e:5c:dc:4c:c5:02:4d:b9:2a:25:40:7c:
                    ff:4b:75:bc:0f:54:0e:fe:24:37:9e:6d:0e:54:d9:
                    47:86:92:1f:73:e5:d0:f0:a2:9d:ef:6f:cd:43:bb:
                    d6:05:3c:80:22:52:64:c0:f7:9d:6b:49:27:36:f0:
                    af:0a:a6:a2:81:91:25:05:19:c0:4b:0a:a7:a9:9e:
                    21:34:f1:40:d5:f8:1d:d3:02:93:88:df:27:f6:37:
                    73:15:41:fb:1a:e2:31:37:09:66:ec:da:2a:09:3c:
                    7b:51:13:97:d9:75:62:23:72:81:80:63:d7:4c:e2:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BB:DE:FD:1B:04:69:B6:2D:82:F3:75:EC:9A:C4:70:61:E5:73:BA
            X509v3 Authority Key Identifier:
                keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:14:ae:2b:d2:09:56:fc:61:1a:74:3c:c2:09:d5:55:20:
         fd:a4:90:44:7b:96:66:7e:1b:41:39:dd:eb:c7:ea:06:ba:6b:
         71:2e:ea:57:95:a1:cc:a5:80:7a:6c:f4:2d:6d:b2:37:53:80:
         ff:80:61:35:59:f3:a0:95:9d:88:68:43:7b:fa:87:94:a7:8a:
         7e:91:dd:c1:0d:cf:56:82:26:6b:d7:71:ab:bc:61:a1:b3:d0:
         b4:d8:e2:af:61:55:16:09:8f:be:c9:44:be:c9:42:a8:9c:69:
         6e:9f:8f:42:ec:7f:14:39:e4:80:c6:0e:57:db:42:2e:b9:69:
         2d:ed:d7:4e:71:fa:d0:e9:30:fe:db:b6:cb:05:50:7e:e5:20:
         c6:cb:dd:29:9a:df:ce:1c:32:6c:ef:4e:6a:6e:0f:a8:9d:4b:
         cc:58:0a:ad:17:e4:23:fb:c3:e2:92:3e:94:81:64:30:f3:28:
         d2:29:f8:0e:66:82:19:45:fe:29:09:b2:13:e5:84:1a:11:73:
         28:a5:f2:d7:0e:77:3c:6c:1d:11:9b:4f:5a:2c:94:28:9a:72:
         58:fe:88:d4:09:70:8e:72:a6:fa:d0:61:55:d7:7c:3e:a9:13:
         dc:2a:f6:09:6e:05:6a:d3:ee:0d:e5:75:70:15:85:3b:4f:42:
         a1:da:5d:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC
M0FFREM5MEUwHhcNMjYwNjEzMDI0NjUwWhcNMjYwNjIwMDI0NjUwWjAYMRYwFAYD
VQQDEw02YTJjYzQ5Yi03OWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxqyFaiMgWCCwMoZdJ0w5rE4gJakgzFP4a1wppdC6Wuo/qVsjnNfuyb1aApdA
zl16cuZP1E5bb0GG/C9M6BoO755QIZuhk4hbiIclGDuQJISXRJgQrZfhZtv7QuH4
A713bMMMtt72GwbD/ucC0m9CmTnDylfUqYkeVvSAfPihVp1DfplMeEznPswOXNxM
xQJNuSolQHz/S3W8D1QO/iQ3nm0OVNlHhpIfc+XQ8KKd72/NQ7vWBTyAIlJkwPed
a0knNvCvCqaigZElBRnASwqnqZ4hNPFA1fgd0wKTiN8n9jdzFUH7GuIxNwlm7Noq
CTx7UROX2XViI3KBgGPXTOI9swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHK73v0b
BGm2LYLzdeyaxHBh5XO6MB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1
MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1
Q0hqNnlueW9FN1N6cnR5UTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnX8UrivSCVb8YRp0PMIJ1VUg/aSQRHuWZn4bQTnd68fqBrprcS7qV5WhzKWA
emz0LW2yN1OA/4BhNVnzoJWdiGhDe/qHlKeKfpHdwQ3PVoIma9dxq7xhobPQtNji
r2FVFgmPvslEvslCqJxpbp+PQux/FDnkgMYOV9tCLrlpLe3XTnH60Okw/tu2ywVQ
fuUgxsvdKZrfzhwybO9Oam4PqJ1LzFgKrRfkI/vD4pI+lIFkMPMo0in4DmaCGUX+
KQmyE+WEGhFzKKXy1w53PGwdEZtPWiyUKJpyWP6I1AlwjnKm+tBhVdd8PqkT3Cr2
CW4FatPuDeV1cBWFO09CodpdKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:30:28 2026 by rpki-client