Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
File:                     3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json)
Hash identifier:          drWG1UsGmtiyJViVCHfaPBuUzbVZjCv444i3U3VE8iY=
Subject key identifier:   90:B3:4F:7B:2F:B7:01:F7:A3:62:38:E5:DC:E7:AC:A3:4B:89:69:1B
Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
Certificate issuer:       /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
Manifest number:          0BB0
Signing time:             Fri 12 Jun 2026 19:33:46 +0000
Manifest this update:     Fri 12 Jun 2026 19:33:46 +0000
Manifest next update:     Fri 19 Jun 2026 19:33:46 +0000
Files and hashes:         1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: YLq4dfFBgBJ37Lp4Yt2X8LbYZLX1+bBy0NK+71cYXNE=)
                          2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
                          rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
        Validity
            Not Before: Jun 12 19:33:46 2026 GMT
            Not After : Jun 19 19:33:46 2026 GMT
        Subject: CN=6a2c5f1a-39b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:db:c3:70:16:24:d7:3f:7f:b6:15:67:1f:
                    e8:5d:e8:a9:8f:ce:87:11:64:3e:ff:11:a3:e7:b1:
                    a9:28:78:31:42:5c:39:d8:2b:5c:67:3f:a4:81:d2:
                    fa:26:a6:1c:f1:94:8b:e9:17:d9:69:d6:cf:c3:50:
                    75:51:1e:25:db:2c:11:8a:8f:4c:d0:70:2b:ea:da:
                    9e:88:2a:6e:af:97:f6:83:22:00:4b:9e:66:cd:f6:
                    40:9a:39:b8:93:e3:8e:9a:4e:df:a6:58:9c:f9:c7:
                    c9:77:09:cd:79:51:f2:ce:ed:87:b5:c8:00:81:56:
                    da:e5:67:da:8d:dc:7b:3e:ea:17:0a:99:fd:3e:21:
                    24:68:f7:aa:fa:e8:b8:70:8b:94:f6:26:5e:78:1c:
                    93:3e:73:43:60:65:b5:26:dd:a0:ff:a3:93:45:7c:
                    07:76:a5:dd:28:cd:e4:44:ae:d0:91:40:26:2f:21:
                    78:8b:3c:4a:b8:69:d3:22:04:17:ed:81:15:6c:4c:
                    60:cc:54:6a:5e:e4:df:51:3f:3f:e6:d3:e0:89:25:
                    93:60:02:8f:14:36:48:bd:9e:89:f3:5e:53:54:1e:
                    e0:ce:b2:96:bb:26:05:bd:6e:e1:44:90:6f:00:97:
                    51:51:a4:72:00:fb:a2:0c:86:d3:a0:fd:9a:88:70:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B3:4F:7B:2F:B7:01:F7:A3:62:38:E5:DC:E7:AC:A3:4B:89:69:1B
            X509v3 Authority Key Identifier:
                keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:28:81:89:64:58:f2:9c:8b:6a:24:95:33:fb:7b:f9:ae:77:
         cc:a1:d1:a3:4e:2f:56:bb:01:9a:b8:4c:60:13:0b:4f:ba:8b:
         8b:9a:14:dd:c6:cc:b3:58:b6:7c:16:b5:eb:7b:ea:2c:03:c3:
         bc:1c:36:70:66:d8:38:6a:45:5f:e1:ed:f9:a4:ae:bc:ca:47:
         7c:7d:08:5c:6b:ea:05:ed:6c:fb:3d:7f:ee:43:e2:ad:99:9a:
         5f:77:0c:83:12:61:61:da:a5:c7:82:1b:dc:37:05:da:7a:23:
         23:2d:66:93:ff:9c:52:cb:22:1a:46:53:b1:b0:cd:01:57:20:
         9d:cf:db:6c:78:25:97:31:c3:6e:af:e5:87:fa:8a:b6:41:fd:
         37:5c:0f:95:86:bb:a3:31:91:09:eb:98:b3:57:53:6f:08:10:
         95:fd:f1:31:b6:74:21:dd:92:5b:31:03:52:a1:bb:75:fc:1e:
         13:7e:5e:a6:7f:9f:b5:05:7d:2f:dc:de:7a:e5:b2:b2:96:3d:
         3e:b3:bc:5a:71:72:db:c6:86:16:84:28:76:9b:1e:38:d4:07:
         0b:54:5a:f9:06:b5:3f:ca:34:05:76:2a:35:70:14:2b:02:39:
         3e:6b:26:d5:95:e4:f6:7e:b2:92:45:dd:14:af:2e:1b:c2:ea:
         fc:ca:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:15 2026 by rpki-client