Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File:                     T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier:          iHPVaczB11N3Kjxc8pdowmRq6anJ3SfvPzegkwvqT7c=
Subject key identifier:   40:45:3C:50:2B:F0:77:32:92:F0:C2:12:04:D0:5B:55:77:51:24:E7
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer:       /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number:          2D
Signing time:             Sat 13 Jun 2026 08:50:23 +0000
Manifest this update:     Sat 13 Jun 2026 08:50:23 +0000
Manifest next update:     Sat 20 Jun 2026 08:50:23 +0000
Files and hashes:         1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: 0XYNI3vgFF/E01GRfIQZUwC/tWxe/JfXMwukqzm0o78=)
                          2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
                          rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
        Validity
            Not Before: Jun 13 08:50:23 2026 GMT
            Not After : Jun 20 08:50:23 2026 GMT
        Subject: CN=6a2d19cf-37be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:98:4e:1d:a5:3f:47:98:9d:17:a4:ca:b0:
                    96:25:48:88:87:84:ad:b1:8a:a3:1e:e6:40:b4:83:
                    9c:b6:12:36:18:6e:cf:c6:f9:f7:60:a9:34:16:be:
                    90:73:c8:e5:20:81:3c:af:50:d8:39:e0:db:00:98:
                    67:2d:38:29:9e:e9:2d:72:d1:2a:c3:14:bb:a9:89:
                    d8:92:dc:bc:57:1a:1b:a0:27:70:66:8d:df:4c:b9:
                    53:53:ce:af:95:92:95:af:37:f7:9f:83:2f:df:86:
                    86:35:02:b7:d6:57:54:51:98:18:fa:ef:6b:fb:c5:
                    9f:b7:18:e6:ab:0b:87:cb:02:de:a4:e9:b0:7b:b3:
                    68:f5:3f:f6:12:64:3e:c7:ef:9f:c4:78:c9:cd:dd:
                    42:d9:54:ef:f6:13:30:5d:7a:85:17:3d:11:e5:2d:
                    31:ac:a9:9d:30:8b:01:03:54:c3:19:3b:c0:b7:8d:
                    f7:44:f8:6d:6e:14:5a:b2:e2:ed:c7:38:2d:dc:ac:
                    c3:fd:54:df:cf:67:1c:29:67:72:1f:1b:9f:c9:18:
                    25:1e:cc:bd:b1:7a:e0:3b:ee:9a:4f:cb:eb:b5:d5:
                    e5:71:cd:de:83:6f:72:f5:4f:1a:e4:19:0c:82:38:
                    c1:ee:96:04:ad:05:9c:69:f2:7e:ed:96:c9:f3:c4:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:45:3C:50:2B:F0:77:32:92:F0:C2:12:04:D0:5B:55:77:51:24:E7
            X509v3 Authority Key Identifier:
                keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4c:48:05:35:10:6e:30:50:c7:b0:07:07:d0:81:89:f0:3f:
         23:3e:bf:48:70:d1:b3:6e:1e:73:80:2b:2e:31:d6:5c:5f:ea:
         3e:77:fe:7f:f4:53:15:b6:24:b5:a5:53:5a:56:c0:45:11:59:
         8d:aa:84:b5:3f:52:06:d6:1f:95:72:20:10:f7:a6:7f:aa:a5:
         5f:48:23:51:a3:95:85:9f:c4:d6:c6:b1:b4:72:8c:e2:67:c8:
         6c:55:49:c9:e9:03:31:e6:f0:86:bc:f7:5f:c2:6b:19:26:0b:
         ff:2c:57:24:61:c4:55:ae:d8:cd:7d:28:f5:dc:81:be:5f:19:
         e9:aa:a6:a8:3f:7c:c4:d2:9e:99:6d:82:94:c7:4f:24:8a:d9:
         11:9d:d5:07:ac:86:51:27:ba:ad:7f:b2:84:be:c1:1e:e2:19:
         fb:fb:28:38:42:05:b3:e3:46:eb:e5:01:ec:f4:53:63:36:48:
         00:cf:c2:a3:2d:dc:64:8a:e4:1b:f3:e1:5f:42:95:1a:e6:85:
         18:d6:77:51:ed:c6:d2:9a:fd:cc:7b:68:50:17:56:cb:6c:1d:
         ff:a3:2e:b2:da:0c:16:6d:ce:66:a7:a7:c0:e2:b4:e3:33:3a:
         3e:8a:73:64:a4:6f:90:2f:55:76:99:90:c6:6d:5c:9a:bc:29:
         18:48:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:35:27 2026 by rpki-client