Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
File:                     3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json)
Hash identifier:          ENWDBD5QpiVA3BHh9lhvSGkXtEW299CX7yGXlON6fRI=
Subject key identifier:   E4:AC:21:B8:DC:43:AD:9F:01:C1:47:72:2B:77:A0:45:86:3A:31:1B
Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
Certificate issuer:       /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Certificate serial:       0794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
Manifest number:          078B
Signing time:             Fri 12 Jun 2026 21:35:31 +0000
Manifest this update:     Fri 12 Jun 2026 21:35:31 +0000
Manifest next update:     Fri 19 Jun 2026 21:35:31 +0000
Files and hashes:         1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: 9wxG0BcrZHPb86Lm2/kx2fDredNSKy3DzqREZPN/svw=)
                          2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: EqmRIjquU+tSmDMjC7w1ByfOqPCzO7OzMl+YIXKJh6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl
                          rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C11A, serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
        Validity
            Not Before: Jun 12 21:35:31 2026 GMT
            Not After : Jun 19 21:35:31 2026 GMT
        Subject: CN=6a2c7ba3-3341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:ec:d5:51:06:8b:28:94:a0:89:2c:98:d9:
                    85:c1:cb:d7:c0:5c:3e:18:e4:2d:8c:df:81:6c:49:
                    f2:60:d8:d6:0c:f6:61:67:6c:24:b4:fb:d8:0b:d8:
                    d1:07:f7:b7:c7:38:e2:4b:f9:9c:02:c7:4d:ec:9f:
                    aa:62:e4:eb:65:d2:40:c5:4e:0b:48:49:64:9d:b0:
                    1c:c9:67:4e:f1:f1:c6:50:1d:18:97:c0:27:2a:1c:
                    14:c9:cf:9a:fc:02:97:d1:2f:b2:ca:70:2f:b9:ad:
                    d4:b9:56:13:e2:c2:05:48:28:85:c1:fe:be:8a:66:
                    c2:46:08:ca:cf:a2:1d:d6:99:be:b3:54:6f:f3:e1:
                    07:d2:59:75:6b:2f:6b:cf:2c:18:26:d8:cc:af:99:
                    17:10:0a:10:7a:81:29:ab:e6:b2:6c:34:cf:c9:90:
                    db:5a:b0:db:77:01:32:5f:6f:7f:cf:f7:95:38:f4:
                    62:75:99:1b:27:8f:7d:64:bd:ea:81:d5:50:3a:de:
                    ca:c8:d4:fc:76:51:66:ab:d8:12:6f:b7:de:55:80:
                    bb:78:7e:c6:d8:e3:22:f1:ab:1f:4c:78:cc:a6:a9:
                    a0:2a:53:b0:97:7b:4f:9b:60:f0:af:1f:a5:a5:db:
                    25:75:5b:31:ed:ef:6e:79:14:46:64:d5:27:4c:a0:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AC:21:B8:DC:43:AD:9F:01:C1:47:72:2B:77:A0:45:86:3A:31:1B
            X509v3 Authority Key Identifier:
                keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:7a:48:b4:27:0a:cf:b1:60:39:a7:de:d2:e5:6a:53:81:
         6f:cd:c4:6e:62:3f:e4:be:18:d2:1a:42:f9:41:cb:6b:2b:a9:
         82:4e:21:ae:ae:00:38:3a:bd:ea:72:46:13:bd:aa:54:4c:c4:
         c4:b7:86:ee:ea:d7:10:42:a0:9b:29:b8:ae:fb:94:c7:e1:ee:
         bd:0f:77:12:62:e7:0c:e6:fb:d5:fc:0d:a3:84:d9:94:d6:95:
         4b:19:c5:0a:6f:98:97:54:7c:84:9e:c8:7d:f0:07:bb:1a:78:
         da:65:3e:33:c1:c5:dd:00:38:fb:28:d5:70:9e:84:2e:24:98:
         99:90:e0:84:ee:4b:c5:68:7b:8b:77:cb:e1:7a:ff:45:36:7d:
         4d:fb:3c:0f:e1:95:f3:de:c3:7c:62:fa:70:7b:e8:4d:b9:d6:
         9c:8f:dd:9f:5c:23:cc:ab:80:bd:0c:e7:a1:9d:69:d7:08:7e:
         7f:1d:e0:ae:ef:c8:54:1f:7e:4a:55:80:a5:61:e2:c3:0c:f8:
         28:96:0a:bc:b4:91:d9:f6:6b:9c:f7:9b:d6:2b:e0:b4:2a:26:
         e7:bd:5d:7f:84:f9:94:15:58:b1:21:c7:10:75:67:61:6f:23:
         20:4f:e0:34:26:e0:0b:59:2c:f0:50:92:0c:e0:55:36:74:9a:
         f2:ef:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:17 2026 by rpki-client