Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
File:                     7DaNWC4Rd-CZFeM_RO253k7zLFI.mft (raw, json)
Hash identifier:          2vpr5niox9tjB1WCa7KWOsy2UFr8X56V8jupPkqTPHE=
Subject key identifier:   B1:81:8D:83:B6:8F:DA:52:61:92:66:05:5D:BA:3D:63:58:20:30:4D
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
Manifest number:          3D
Signing time:             Sat 13 Jun 2026 03:05:07 +0000
Manifest this update:     Sat 13 Jun 2026 03:05:06 +0000
Manifest next update:     Sat 20 Jun 2026 03:05:06 +0000
Files and hashes:         1: 7DaNWC4Rd-CZFeM_RO253k7zLFI.crl (hash: /Skfxv+pZu8oNSOqBRtw8399tiAH4DfsfVD4twwHSxw=)
                          2: 4CF8B176528E11F1AB5B86DACA833773.roa (hash: 5Dfgn5Y42hhAo8Up25iSIsPD9Xr5QJ7AKacRdPVKnQc=)
                          3: 8C7FA326559B11F1BB94402596833773.roa (hash: UHeezSpQhHmxK+67bmBYp+KNMx7AVMycuEx+Oao2v7I=)
                          4: 1C009EA655BF11F181F38166A4833773.roa (hash: iR+TVjhbzPwL9A21bMttwQ7suv4TyjEqWp81sgd6dHY=)
                          5: 831A7614558A11F1A9CAF9D090833773.roa (hash: HrAXYL/EoM+1aGecaDVbhUOoMmx4irrkMOtZ/56kmDg=)
                          6: 2A8233E263E611F189F5BA418947A888.roa (hash: azSrx6uMgRU5WHByqSOBhufThnSRIw5W/2jqteEi26M=)
                          7: FFF1E08E502E11F198DE5D87C9833773.roa (hash: epsRKPeN2DsUj5PvFuEX3GKPxB2TNVkVQCWsUlIKFIE=)
                          8: A24C1132558A11F1ABEF45E790833773.roa (hash: IzCa8R7iHMbzQ81n4oqAVNgWkbvl4evaWF1MBbUcdzU=)
                          9: A44195AC558A11F1ABEF45E790833773.roa (hash: 10iITYE7o1tL5GsiufULjXzGG9OKl2raaeNm6xIuyVc=)
                          10: 2187C56A5A7A11F1B6CAB384BF833773.roa (hash: COEPfzwvooDKFUGxePYYeQuUy0B1h4MXBdmkdQT6f4o=)
                          11: 8D8F62BA559B11F1BB94402596833773.roa (hash: cGxGjwlRe8Y8DeMHQmxV3ybyFGrhyLnLA22TJdhF13s=)
                          12: 8AB9CB6855B211F1AB301B6C9D833773.roa (hash: 1hc62kqQRiRgNKivYeEO8hfNnHIGGNiAazIjGWCGXYQ=)
                          13: 8E14428C559B11F1BB94402596833773.roa (hash: sue9bEEZauXbCQpuKeuDDGonHzRO+q+G2sCv1tgPxvE=)
                          14: 87CCADF855B211F1AB301B6C9D833773.roa (hash: /iV1OD9cc0/0dzoE/hS1R0VUZTmWWfVpUvRMwsFG8XY=)
                          15: 8BF5617A559B11F1BB94402596833773.roa (hash: MyPcy7ojg7HHahr824aFQLKjqPDUTvdu7+AmrtOwsV8=)
                          16: E4B8817A55BE11F19755025CA4833773.roa (hash: 6qxaPCix48qyqg0/5u3M0m2iVBmPJvxphnY/EZSIUdw=)
                          17: 89C7E3A255B211F1AB301B6C9D833773.roa (hash: gnIwJV2KSI9KOx1ikjUes8JKBZKMVHtKAOl3MGHlIBY=)
                          18: 8D0D3948559B11F1BB94402596833773.roa (hash: 5Sk01y+FNKNqXXGbCIox7P2JuyJ+akX6I+2QatggVJo=)
                          19: 34705B9E59E211F1AE176CAE90833773.roa (hash: Y4FSjq6NpDU11XP5lRGViEc77fMM4dZ5RI+rwrWvqxw=)
                          20: B872988654D711F1992D5F9296833773.roa (hash: JmWCmjScL98jwceDIWgE8shLzdIK5PAxIEq2d4FVTwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Jun 13 03:05:06 2026 GMT
            Not After : Jun 20 03:05:06 2026 GMT
        Subject: CN=6a2cc8e3-6945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:b9:5e:6a:77:6c:b3:75:68:45:37:82:c6:
                    be:8d:a5:05:ae:00:50:f8:4c:1f:29:46:30:be:81:
                    40:51:53:1a:38:3e:be:ff:42:b2:ab:5b:f6:9c:e8:
                    1c:00:a0:c2:25:90:27:f8:d5:8a:07:bf:53:be:1c:
                    50:82:a5:64:c1:86:f8:f4:db:e0:58:ff:e7:82:27:
                    35:f1:70:65:5e:de:97:1d:3a:30:19:46:77:16:2a:
                    6d:0f:e0:97:21:56:1e:70:09:8a:36:f9:48:cf:90:
                    48:37:bc:3c:78:49:ed:9a:c7:b8:2e:3d:6e:6f:ed:
                    db:6b:a5:f1:76:cb:4a:a8:47:9e:58:3a:7a:5f:6c:
                    19:78:70:b3:f8:43:3b:04:ab:5c:8c:8e:53:bf:cc:
                    6b:ff:35:3f:3a:52:76:7d:42:63:ce:cb:c9:1b:6c:
                    76:23:d1:0a:25:0a:94:ab:0e:f8:4d:b9:d4:a2:89:
                    80:ad:2a:69:52:5e:ea:ab:f4:c8:82:50:a1:a4:de:
                    4a:19:af:ee:f1:1d:ef:fd:47:98:24:7c:a5:c8:9a:
                    f3:94:23:55:3f:91:3f:9f:51:b7:9f:13:d1:f2:a4:
                    11:14:63:ba:dc:bf:15:da:b6:e8:39:65:1f:cf:7c:
                    6e:2b:6b:1b:32:ea:c1:36:f2:10:fc:b7:f4:80:0a:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:81:8D:83:B6:8F:DA:52:61:92:66:05:5D:BA:3D:63:58:20:30:4D
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:26:59:b1:f5:55:e8:04:dd:8f:4f:16:0a:15:bb:4b:e9:
         b1:95:6b:06:e0:62:29:43:12:73:09:e6:38:b4:0e:29:f6:e5:
         1d:51:be:c2:2e:73:f0:42:5f:3b:83:1d:39:bc:68:6d:59:6d:
         65:bd:8b:a2:46:59:ea:d4:9c:6b:08:a9:40:62:56:69:4f:ea:
         5c:85:0a:99:cc:5c:35:32:67:e1:bb:67:7d:76:0a:04:75:73:
         f9:b2:78:dc:de:c4:82:b6:9c:2b:75:fb:1f:07:58:85:ba:ab:
         ab:2c:74:d5:39:ed:ef:58:34:ea:b1:28:0a:68:41:00:31:d9:
         81:f6:e2:aa:bf:b7:f9:23:af:10:c6:28:45:b1:d3:44:23:66:
         52:10:49:6e:b8:8d:e5:fa:db:7e:e7:20:c3:01:b1:8e:12:77:
         c2:a6:f4:de:3d:c8:b4:1b:61:02:73:44:6b:32:24:67:be:27:
         7e:90:9a:1a:2b:41:db:fc:16:27:a6:55:f5:4c:f8:d8:6d:11:
         05:8b:fc:98:47:96:73:ba:3c:f4:f9:32:07:ee:ee:9a:1f:af:
         7b:ae:d3:75:35:09:43:7f:c7:cc:86:a1:1a:70:79:b8:54:48:
         b0:1f:3a:55:4a:20:3b:d1:b1:b1:b9:3e:2a:bb:2c:9f:32:24:
         47:25:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:58 2026 by rpki-client