Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File:                     _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier:          fcn8k4m1S8tzFAzw/EcQm6T7g/2xb7j1tm+rc13EWIE=
Subject key identifier:   7E:1C:61:95:A9:01:6E:29:5E:B9:3F:E0:DC:13:3D:EC:E0:3F:E7:06
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       35CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number:          3591
Signing time:             Fri 12 Jun 2026 14:58:19 +0000
Manifest this update:     Fri 12 Jun 2026 14:58:18 +0000
Manifest next update:     Fri 19 Jun 2026 14:58:18 +0000
Files and hashes:         1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: bOFd2Kg4Yx5p1nRh37Mf8FGksd/ZjVwHTs/wJP9Kh6M=)
                          2: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: CRBjNrDay0fKPUZhB/X7qmKie82SAt30Rk3lcvLRM5s=)
                          3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: 5byMek5etqwTehUajH8Mj1zzTDL9e01ueYvXYYpN/aA=)
                          4: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: CtU0kY5KWSLSlfwZkRorGoa4e7JgtnQg/6zuGIRKoKM=)
                          5: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: HFHk/hNjIZnEhj8GBFjikKlxt61+w/Nh1n84ChzN2oY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13770 (0x35ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: Jun 12 14:58:18 2026 GMT
            Not After : Jun 19 14:58:18 2026 GMT
        Subject: CN=6a2c1e8b-5e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:6f:90:9d:9d:07:91:f4:2f:45:ef:da:6f:
                    71:a1:cf:d1:85:df:8a:8c:0a:f4:07:f6:3d:76:ab:
                    92:9e:98:47:f3:c4:ce:5a:80:60:cb:2d:31:8b:96:
                    bc:64:9d:8a:9d:c3:8a:33:ed:ee:39:3b:d2:c0:52:
                    52:5a:9b:11:25:50:d8:91:ea:c8:99:95:29:2b:c6:
                    05:cb:da:0d:24:06:5b:82:91:fd:b2:10:6b:35:5a:
                    c5:b5:86:49:97:55:b2:0e:da:b4:83:31:9d:b2:c0:
                    31:8e:7f:fe:5a:b8:19:4c:ed:77:86:e4:11:ad:30:
                    fa:44:ab:61:cf:27:8b:28:0f:34:ef:04:cd:8f:0f:
                    44:7e:4b:a2:6c:4c:46:55:b9:bc:13:02:c8:10:64:
                    bb:6b:01:fe:f6:02:e9:57:ee:88:be:39:63:fc:72:
                    2f:b8:cd:30:99:a3:ab:96:e2:93:ce:45:87:2c:4f:
                    21:ea:fb:62:4b:da:f3:b6:c6:dc:45:6f:ac:76:dc:
                    2b:ce:70:e5:d6:0b:44:ed:a4:1a:e1:1b:1c:fb:01:
                    04:e8:1f:03:fb:af:de:0d:6c:a2:6a:15:a8:92:8b:
                    f9:94:f0:4e:6f:b4:4c:3d:ac:aa:4e:b1:d4:11:1b:
                    b8:80:77:f3:29:5c:46:d1:96:cb:f8:b3:d9:ae:96:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1C:61:95:A9:01:6E:29:5E:B9:3F:E0:DC:13:3D:EC:E0:3F:E7:06
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:b6:2a:2e:f2:bf:a2:f4:0f:67:02:3a:0f:99:0d:c4:0d:
         36:cd:14:00:fc:d1:e2:9c:50:3f:68:dd:93:9b:ff:4a:c7:ce:
         b2:cd:f5:31:12:c5:e3:c4:ca:82:17:7f:9b:3d:e8:fc:22:c3:
         c4:64:4a:f0:11:51:93:5f:8a:f2:5f:89:97:12:1d:2e:74:da:
         f0:3d:d9:3f:fd:40:b6:01:28:19:d3:b5:d4:dc:8f:53:9a:8f:
         0d:ff:2a:fe:f9:bd:a8:ab:ab:e9:7c:95:7e:5e:41:5c:cf:ec:
         cf:b6:9f:a5:e4:b3:12:4b:a5:b1:6a:ac:c8:83:d4:36:30:e3:
         fb:9c:59:39:2b:85:57:65:36:10:a7:61:1b:e7:88:e4:2e:29:
         4d:0e:05:09:a6:1d:c8:f5:ae:c7:70:73:30:6a:80:0c:df:4b:
         97:f9:9e:7c:44:97:3e:93:30:e7:c6:85:73:8f:fc:fd:cc:50:
         3e:bb:eb:ef:58:54:09:82:41:5d:70:fe:29:d8:71:ab:5d:1f:
         d1:68:2b:72:2d:44:73:d8:5d:1a:d4:25:c8:74:e7:43:e9:b9:
         0f:41:6f:0b:81:2e:d5:08:e2:04:d8:e4:ca:72:5f:40:f7:a4:
         ff:4a:eb:90:52:68:9a:39:dd:a4:10:bb:2a:3b:a6:46:eb:8a:
         cf:9a:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:29 2026 by rpki-client