Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
File:                     _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json)
Hash identifier:          61SoU/IFQRd/+sA6R7crbDHWcEOiyigLQrjydzR0TZA=
Subject key identifier:   A3:0F:66:98:D9:47:2C:99:0C:19:F5:84:5B:46:19:2F:D0:B2:12:27
Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
Certificate issuer:       /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Certificate serial:       1DE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
Manifest number:          1DD1
Signing time:             Fri 12 Jun 2026 16:04:35 +0000
Manifest this update:     Fri 12 Jun 2026 16:04:35 +0000
Manifest next update:     Fri 19 Jun 2026 16:04:35 +0000
Files and hashes:         1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: IHlbSgwfNqXEDCrdp3nlWGeDBMA+iN4H+Kp71cYFjo4=)
                          2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: CiMRetgqfOHyT+t0oT0VnFidFPg4QE9lc+5bTN+xNPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
                          rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7656 (0x1de8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
        Validity
            Not Before: Jun 12 16:04:35 2026 GMT
            Not After : Jun 19 16:04:35 2026 GMT
        Subject: CN=6a2c2e13-fa64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:ff:d6:31:b6:62:7d:c2:8e:ea:37:43:fd:
                    64:c1:52:32:bf:fe:92:a4:84:b3:ff:0b:9f:10:01:
                    8d:b3:6c:5b:a8:55:34:21:be:52:91:2b:d2:c6:e6:
                    e8:e0:44:6d:52:3e:47:3d:ae:1e:e2:41:0a:f3:5a:
                    90:02:42:50:b6:67:d5:47:d5:28:a6:86:73:32:8b:
                    58:35:ae:9e:df:06:3f:5b:7e:c6:85:b5:11:a9:3b:
                    93:20:93:a1:3a:b3:df:4b:c4:3a:6a:dc:38:d2:78:
                    e8:5c:a9:d8:e5:d3:b1:5e:f1:dc:c7:8f:13:23:9c:
                    6a:3c:f7:cc:f8:0e:24:42:33:b0:85:06:0e:ae:74:
                    6a:3b:a2:69:ca:8f:87:f7:09:db:ac:d2:eb:bf:d5:
                    d5:09:96:04:b1:eb:fd:aa:7b:00:33:18:9b:61:f0:
                    7f:65:b6:fe:5d:aa:d0:03:9b:51:e6:3b:c2:55:4e:
                    df:1e:bf:bd:69:d1:ca:49:14:4b:c5:43:ba:59:70:
                    19:d4:30:8d:9c:bd:55:a0:e4:6f:18:64:23:5d:d5:
                    0d:af:40:a9:59:95:c8:d4:53:9a:5c:65:cf:21:5b:
                    e5:7b:98:cf:30:8b:d4:71:f6:97:6e:2b:09:c2:e1:
                    a0:74:af:b3:3c:04:60:33:33:16:ed:73:77:ae:46:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0F:66:98:D9:47:2C:99:0C:19:F5:84:5B:46:19:2F:D0:B2:12:27
            X509v3 Authority Key Identifier:
                keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:74:a1:36:72:be:54:80:d0:4e:19:bc:18:c3:b9:b4:55:97:
         38:90:d6:20:46:08:a2:c2:fd:24:57:d6:b8:1b:30:0c:48:08:
         cc:1c:4d:41:07:fe:35:8e:11:48:4b:fa:25:35:90:54:0c:8e:
         89:35:6e:66:98:06:08:fe:82:44:96:44:c8:a4:21:26:7c:7d:
         4a:4e:ad:d8:e9:5a:f4:10:4b:a5:9c:06:8c:c5:55:36:30:87:
         ac:2a:b0:79:83:c0:13:47:2a:f3:e4:a5:4d:3d:02:0b:74:1b:
         e0:79:cb:9b:f7:dc:e4:5b:2d:2b:10:49:9c:7e:60:5a:14:09:
         11:a7:49:a4:88:43:1f:54:bd:f6:ad:2d:06:25:ab:87:b2:4d:
         77:9e:66:1d:54:96:19:97:9f:52:17:0d:74:e3:9f:69:9a:74:
         a7:93:5c:e4:75:ae:ae:c2:de:35:21:2e:f5:c5:ae:de:ea:51:
         71:96:72:b7:88:8a:30:24:0a:d3:0b:7f:a0:e7:e8:fb:83:13:
         f8:af:b3:44:8e:9e:e8:cf:14:10:dc:5f:73:c2:9a:38:78:4a:
         7a:fc:03:a9:d9:77:09:df:54:16:0d:45:b2:10:95:e0:4c:3a:
         fc:63:68:74:bf:c2:cb:39:dd:60:a3:11:e6:43:54:0f:50:26:
         b5:0a:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:23 2026 by rpki-client