Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File:                     fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier:          ZvGUGnk1LX7TzAsQ6Hf+jGPIv0EBp09MTeEBWtABMFI=
Subject key identifier:   34:0E:4B:A9:90:04:0F:D1:F1:B0:43:05:F1:8B:EE:40:A5:FD:4C:22
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer:       /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial:       0DAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number:          0D9E
Signing time:             Fri 12 Jun 2026 17:54:47 +0000
Manifest this update:     Fri 12 Jun 2026 17:54:47 +0000
Manifest next update:     Fri 19 Jun 2026 17:54:47 +0000
Files and hashes:         1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: UwCvjkKRiVYuvzvxB0dTe63TTLh8dPprqVDMNUhuJTA=)
                          2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: oix3uz2iO7DhsNaPKdZjSYeOooosW/vMEsfqrJxUpws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
                          rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3498 (0xdaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
        Validity
            Not Before: Jun 12 17:54:47 2026 GMT
            Not After : Jun 19 17:54:47 2026 GMT
        Subject: CN=6a2c47e7-3e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:d4:ee:cb:29:76:75:3d:20:ce:fe:9f:ef:
                    97:5f:7c:15:5e:9d:5f:63:f2:5d:89:c7:4f:0c:96:
                    6d:e5:57:6b:f2:f2:46:6f:91:c1:6d:4c:e8:bf:a8:
                    04:0d:f4:ef:91:7a:5c:67:8c:14:cc:02:bc:ca:90:
                    7d:79:c2:cc:6d:47:8f:58:6d:66:f4:2d:43:ad:aa:
                    f3:02:00:e0:b7:28:35:99:0d:7e:a3:4f:bd:f2:43:
                    05:03:b2:35:77:f9:95:ed:74:c2:91:1d:c2:f7:5c:
                    2e:87:d2:9c:cb:92:0b:69:a9:9c:4f:b7:aa:bb:4d:
                    dc:c7:c3:4d:47:43:6f:29:64:09:4c:29:bc:06:61:
                    12:16:f7:b5:85:78:4e:bd:3f:19:d7:7a:04:6e:da:
                    21:65:98:db:b7:5a:44:b5:59:14:00:79:00:9f:92:
                    d1:3a:e5:e2:f1:16:85:86:fe:d6:99:80:9c:e1:65:
                    3e:97:ef:f3:fa:94:cc:af:07:18:f0:8f:a5:a1:6f:
                    fb:bb:84:10:a0:8a:27:c9:8a:63:98:73:0a:4d:a3:
                    c2:78:15:bd:dc:90:19:b1:2f:1a:d7:88:df:68:a5:
                    b7:54:46:21:67:f8:31:4b:05:08:67:bc:4f:30:d4:
                    a3:80:b6:ea:e5:a5:88:c1:37:14:e4:cd:ec:89:dc:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0E:4B:A9:90:04:0F:D1:F1:B0:43:05:F1:8B:EE:40:A5:FD:4C:22
            X509v3 Authority Key Identifier:
                keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:18:ae:ce:40:ee:5f:18:21:36:fd:8c:6c:f3:35:5e:86:ec:
         03:d8:11:80:c4:63:11:1e:62:6d:14:27:0c:c8:cf:c0:d0:75:
         e1:b8:a0:a1:e7:58:db:c5:74:04:ec:70:e2:bf:ec:28:45:74:
         75:4f:12:f6:5b:9b:38:fb:3d:dc:00:eb:e7:c3:47:e5:c2:2a:
         12:c6:90:ff:bb:46:7d:03:d0:32:f2:7b:e1:5b:1d:b0:2e:13:
         7f:b0:53:73:53:80:b2:88:d1:e6:87:63:4e:bf:30:1c:2d:91:
         d5:f7:1c:53:ce:d5:56:d6:e9:f5:1d:44:af:63:62:18:2d:b9:
         d8:c9:1f:74:42:cf:21:74:81:aa:f3:4f:d0:84:8b:79:f6:63:
         88:b7:35:66:ba:25:8f:51:30:2e:eb:f2:65:9b:4a:fa:6b:da:
         f4:db:db:e6:4a:1f:e2:71:5c:a7:45:8c:ee:c2:cd:25:73:4e:
         12:1a:27:b6:f4:55:68:40:95:31:ac:5e:73:5d:a3:e5:b8:8a:
         48:7f:c3:d6:e7:23:ad:61:df:b0:c9:59:6a:43:b3:10:3e:34:
         c9:a6:b4:3c:0c:42:d5:f0:06:29:44:83:77:ab:2f:99:da:99:
         7b:c6:1d:28:80:15:c0:39:75:0d:d0:f4:42:09:74:56:b8:f5:
         44:35:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:19 2026 by rpki-client