Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
File:                     3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json)
Hash identifier:          kv1LLWPURODuj22UWF1V6zNSuMRxKY9eq56cVKmtoJI=
Subject key identifier:   54:D9:04:B4:63:94:54:44:C9:64:FD:0F:AB:D5:12:EC:9C:1B:3D:24
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Certificate issuer:       /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
Manifest number:          0154
Signing time:             Sat 13 Jun 2026 05:04:30 +0000
Manifest this update:     Sat 13 Jun 2026 05:04:29 +0000
Manifest next update:     Sat 20 Jun 2026 05:04:29 +0000
Files and hashes:         1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: msXCLp5X50plRY7/8cizdCvSDN4eNdBqIYZDbSSIJs0=)
                          2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qCZfH+xJ2p/8mTPa4y8ptTvD/J5HFYkwYWe+Fplo+JE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
        Validity
            Not Before: Jun 13 05:04:29 2026 GMT
            Not After : Jun 20 05:04:29 2026 GMT
        Subject: CN=6a2ce4de-d04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:38:cb:6f:4b:b7:7c:e9:c8:56:16:fb:67:
                    d7:35:6d:9a:f9:15:79:9b:81:6d:de:72:a3:8b:64:
                    23:fe:42:c5:fa:e5:69:75:5e:56:f3:c3:4a:0f:bb:
                    51:70:f0:28:e8:98:29:46:81:de:3f:4f:1a:f4:14:
                    56:2f:25:33:fd:63:81:a0:0b:1a:62:cd:e8:54:01:
                    34:06:67:cd:02:f1:08:eb:57:9f:78:ed:50:9d:8b:
                    f9:dd:fd:93:70:1a:e9:fa:0f:b7:0b:62:ed:c9:25:
                    93:14:be:52:6b:c0:19:e7:fe:c5:f7:fb:88:e9:e7:
                    16:3e:83:d0:7e:b2:e1:1f:b6:94:bf:c3:a9:cc:d0:
                    cd:8a:10:e7:44:70:0b:e9:fb:3d:80:52:1d:bc:e9:
                    28:62:7b:7d:d5:66:90:e0:c9:5f:94:c8:1a:e6:9a:
                    5d:4e:28:88:88:4d:20:4d:0e:41:bc:f3:f7:6f:d0:
                    81:d5:49:c6:84:16:5f:97:95:d2:ba:03:ca:30:ed:
                    1a:75:d4:f2:f9:c5:b8:f5:0a:89:10:d4:c4:d1:34:
                    f5:14:f9:03:50:56:fe:0a:2d:cb:01:c2:e3:7d:81:
                    40:9f:90:f1:49:2c:95:89:d7:0a:c7:33:41:9e:ab:
                    b4:13:36:8c:80:ef:84:f4:12:73:20:c9:d9:10:c5:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D9:04:B4:63:94:54:44:C9:64:FD:0F:AB:D5:12:EC:9C:1B:3D:24
            X509v3 Authority Key Identifier:
                keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:b7:42:ad:f3:32:21:01:42:e5:cf:ee:1a:64:42:fe:fd:
         23:46:a8:71:9f:60:bd:cb:58:7f:02:34:9d:d0:1d:2c:1a:7e:
         af:b5:0a:5e:5e:08:f3:91:c7:2a:13:fc:5d:1d:92:b4:6e:c8:
         0b:ad:23:4c:e8:59:3f:27:5b:ff:64:65:1c:c9:bf:ea:66:9a:
         76:bc:45:e9:0a:e9:f3:9d:f3:9e:fd:77:dd:d8:33:a1:94:e1:
         91:f9:8d:e1:b6:f4:c0:e3:64:6d:26:26:47:62:72:a3:77:52:
         6d:57:ea:37:2b:17:7d:d1:1b:52:35:7b:27:c8:22:6b:21:d1:
         0c:ad:b7:f6:74:94:87:ef:0a:3e:cb:5c:88:0e:01:aa:31:19:
         e2:92:f7:59:97:73:28:d5:d3:c2:e7:8d:ae:7c:c3:d5:72:aa:
         0a:cb:52:07:ea:4c:cb:ea:3d:17:f2:14:1d:86:0f:e0:aa:1b:
         a0:08:dd:73:d2:6a:71:6e:4a:b8:55:d3:5a:fe:22:30:91:45:
         93:21:d3:56:6a:e7:b1:f0:e1:22:3d:b7:3c:48:9f:bf:87:89:
         5d:1d:14:10:a7:97:c7:a4:57:13:ff:95:42:8a:e4:a2:74:b4:
         3c:0f:a6:1f:8e:ae:30:d3:a8:08:50:09:9d:36:e7:7f:0f:58:
         b5:b8:d4:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF
OTg4Nzg2NjcwHhcNMjYwNjEzMDUwNDI5WhcNMjYwNjIwMDUwNDI5WjAYMRYwFAYD
VQQDEw02YTJjZTRkZS1kMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBE4y29Lt3zpyFYW+2fXNW2a+RV5m4Ft3nKji2Qj/kLF+uVpdV5W88NKD7tR
cPAo6JgpRoHeP08a9BRWLyUz/WOBoAsaYs3oVAE0BmfNAvEI61efeO1QnYv53f2T
cBrp+g+3C2LtySWTFL5Sa8AZ5/7F9/uI6ecWPoPQfrLhH7aUv8OpzNDNihDnRHAL
6fs9gFIdvOkoYnt91WaQ4MlflMga5ppdTiiIiE0gTQ5BvPP3b9CB1UnGhBZfl5XS
ugPKMO0addTy+cW49QqJENTE0TT1FPkDUFb+Ci3LAcLjfYFAn5DxSSyVidcKxzNB
nqu0EzaMgO+E9BJzIMnZEMVC0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFTZBLRj
lFREyWT9D6vVEuycGz0kMB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG
MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho
bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhC
M1dBTjBxWVhocnpwaUhobWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc6C3Qq3zMiEBQuXP7hpkQv79I0aocZ9gvctYfwI0ndAdLBp+r7UKXl4I85HH
KhP8XR2StG7IC60jTOhZPydb/2RlHMm/6maadrxF6Qrp853znv133dgzoZThkfmN
4bb0wONkbSYmR2Jyo3dSbVfqNysXfdEbUjV7J8giayHRDK239nSUh+8KPstciA4B
qjEZ4pL3WZdzKNXTwueNrnzD1XKqCstSB+pMy+o9F/IUHYYP4KoboAjdc9JqcW5K
uFXTWv4iMJFFkyHTVmrnsfDhIj23PEifv4eJXR0UEKeXx6RXE/+VQorkonS0PA+m
H46uMNOoCFAJnTbnfw9YtbjU9A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:29 2026 by rpki-client