Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File:                     AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier:          yL4Ml60e0Mfkalc43R5dJJ3uwyExX8xzxG906+n4rqc=
Subject key identifier:   8B:E3:BF:76:BA:A2:85:04:E5:73:84:CF:07:CD:7F:9E:0F:A8:B4:87
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       03F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number:          03DE
Signing time:             Sat 13 Jun 2026 00:35:17 +0000
Manifest this update:     Sat 13 Jun 2026 00:35:16 +0000
Manifest next update:     Sat 20 Jun 2026 00:35:16 +0000
Files and hashes:         1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: /xG/qKqivV3ujFwrd8NK3Nhbu3XZ0H4fzKUHWVlwkLw=)
                          2: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: /R3alqOLxHvu/YtPDpFBv0dJvKc+l2o4yXgcxx8ZzWg=)
                          3: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: +XjVaX7qV0alN5uRheMg5Jumb5rdA1JKO3CHhFnXtv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Jun 13 00:35:16 2026 GMT
            Not After : Jun 20 00:35:16 2026 GMT
        Subject: CN=6a2ca5c5-d89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:12:c6:22:a4:dd:90:e5:0f:a2:14:0c:be:
                    4d:68:da:8b:de:bd:37:05:83:68:06:c3:59:a8:69:
                    63:77:4c:be:b7:b0:24:ea:e5:cd:3a:94:56:46:8a:
                    41:3c:9d:cf:2b:47:e8:6c:4d:26:b7:32:51:07:02:
                    a4:4a:4c:d1:62:01:18:b9:0a:da:24:b9:a0:ff:64:
                    7b:4b:4b:d4:e3:2c:11:d7:ef:22:7c:c1:96:32:c8:
                    96:6b:eb:ba:91:00:b9:4a:86:0e:a7:f3:b8:85:a7:
                    55:de:05:2a:e5:2a:8d:cb:38:ed:47:ec:eb:8e:4f:
                    a8:d2:99:b6:72:6e:8c:b4:41:a9:7c:00:18:22:36:
                    d0:5f:0c:27:7a:e8:4a:60:7e:d6:6b:ca:54:61:f5:
                    f5:05:cb:bb:30:64:67:cc:9a:dd:f5:d8:8c:90:fc:
                    95:d2:81:87:bd:31:ae:94:31:67:91:32:7a:3b:b8:
                    a5:33:6c:1c:13:c4:25:26:f3:40:e7:bf:d8:7b:d2:
                    75:5b:eb:64:55:00:48:6c:50:96:a1:26:ea:eb:de:
                    e5:06:2a:9a:1a:3b:b5:b4:db:49:f6:ac:e9:e7:d9:
                    d3:07:7b:18:b4:09:5a:5c:32:3e:79:da:7c:4f:3a:
                    93:7f:49:79:c9:75:ba:24:b1:a5:99:c7:86:b3:81:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:BF:76:BA:A2:85:04:E5:73:84:CF:07:CD:7F:9E:0F:A8:B4:87
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:b3:2b:eb:a1:2c:8e:a0:e2:e3:86:f3:4b:e2:46:bc:b1:
         66:f1:2a:13:f8:36:86:39:10:da:fa:2b:75:1c:e5:ca:2b:a5:
         31:d7:61:eb:87:9a:7f:01:34:29:af:66:82:00:cc:ec:eb:72:
         8d:a9:2d:2c:56:66:51:88:3b:8a:6c:fd:bf:e0:d4:ab:e9:6c:
         11:0e:5e:cd:62:31:21:89:92:69:70:65:77:ab:30:c8:78:7c:
         7d:fb:c8:57:5b:e1:40:7d:b6:8d:cc:93:7b:69:bd:d9:1f:e0:
         aa:4c:83:c0:5d:c1:7e:e1:e4:6d:83:69:62:7e:9a:3d:fa:b4:
         a3:81:09:91:e1:ac:7c:43:11:da:c6:bd:19:dd:78:32:52:1d:
         f6:13:00:ab:27:ec:b1:32:77:6a:59:9f:3e:52:72:ba:dd:ab:
         d5:79:e4:d4:1b:02:52:1d:e0:10:3e:4c:07:7e:94:85:9d:7e:
         c4:81:dc:89:ac:68:10:ad:72:db:99:f9:63:52:7f:1d:09:64:
         1e:ea:73:0f:23:63:e1:b4:e6:13:ef:4e:2c:0b:84:d4:4c:9f:
         ff:c7:fe:b8:10:15:5c:93:8b:f2:e5:b6:35:67:bd:f5:c1:5d:
         4e:f5:e6:57:84:c8:f4:7a:8b:8c:db:52:bc:96:7a:b0:11:62:
         95:11:ae:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:26 2026 by rpki-client