Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
File:                     38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json)
Hash identifier:          f9rpnkg+hsJL9xnNMjvw+xSC6j0N75DLmU4913qqTw8=
Subject key identifier:   97:5E:DF:EB:44:AE:4F:C0:B7:49:7C:9E:C3:D5:F4:A6:6B:28:CE:46
Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
Certificate issuer:       /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
Manifest number:          0135
Signing time:             Sat 13 Jun 2026 05:29:19 +0000
Manifest this update:     Sat 13 Jun 2026 05:29:19 +0000
Manifest next update:     Sat 20 Jun 2026 05:29:19 +0000
Files and hashes:         1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: wR3HfPhHhTzfFL9RJpVr7+4J2BsM4bITZQKdBMAVUiI=)
                          2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: hvfFWUPLyFvJCXfs1g4giSnFKRGrDpasDj01CVoVhxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
        Validity
            Not Before: Jun 13 05:29:19 2026 GMT
            Not After : Jun 20 05:29:19 2026 GMT
        Subject: CN=6a2ceaaf-623e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:43:6b:57:ac:c3:4f:a3:f6:0f:97:45:f8:
                    19:1a:4b:6f:bb:fc:ea:05:b1:35:4e:5d:d3:fa:46:
                    aa:34:5f:3d:27:67:07:5b:a2:d8:f2:55:a5:ec:c9:
                    9c:6f:4c:0c:85:5d:3c:f2:b8:a3:f9:1c:60:e9:80:
                    36:af:22:40:5d:b0:a1:ca:0f:c5:e0:45:ee:c6:c9:
                    2f:4b:a2:0c:d9:92:53:5b:1d:60:07:b3:9c:fd:7f:
                    f1:68:a3:39:83:b5:f3:de:95:c8:93:3b:6a:a4:51:
                    71:14:df:99:fb:9e:dd:fa:96:e3:3d:3c:32:a6:77:
                    92:f1:2b:be:bf:8b:3d:07:ed:85:f7:dd:1b:9f:74:
                    63:9e:70:18:4b:59:9b:eb:77:c3:f3:72:22:50:46:
                    71:0d:da:1b:23:f0:22:f0:56:7e:b0:09:58:5c:1b:
                    d8:88:62:6a:15:5a:ca:0f:e3:8a:ce:c7:74:14:d8:
                    ac:d5:e4:1d:0a:22:a7:78:c1:a9:69:aa:82:eb:63:
                    ef:40:b5:48:49:12:55:93:80:01:c3:47:86:60:d2:
                    a3:6d:0f:ae:70:78:c5:ed:83:cd:77:72:84:99:7e:
                    85:86:6f:f4:ce:35:b7:40:b0:75:47:cc:99:d9:91:
                    f2:27:71:2c:47:15:98:e5:53:e5:77:a3:3a:76:6b:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5E:DF:EB:44:AE:4F:C0:B7:49:7C:9E:C3:D5:F4:A6:6B:28:CE:46
            X509v3 Authority Key Identifier:
                keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:92:75:a0:f6:52:25:b5:1d:96:61:0c:4a:20:e1:54:5b:44:
         73:54:b2:ad:b2:bd:49:57:6e:60:97:af:f1:df:0a:04:d6:b4:
         a9:88:16:a9:fa:53:e0:f1:d4:d7:ee:8a:d0:b8:af:9f:77:a9:
         32:e5:6b:8a:5d:c4:f3:c1:2f:8b:9c:51:38:f3:b4:18:d8:c2:
         c9:e8:c0:80:64:72:97:6e:04:a6:68:cd:f5:cb:99:83:77:8b:
         f0:81:d7:db:c6:8d:61:ba:b7:c5:d3:92:fd:49:86:23:04:e7:
         40:9f:e2:1f:33:2f:45:bd:eb:94:dd:58:0e:f1:cf:da:8d:b9:
         f5:51:a2:03:9e:a4:4f:cc:63:ea:2e:2a:97:35:8e:8b:be:f9:
         5d:f1:01:b0:00:df:e4:21:40:36:bf:e0:c0:c1:f0:49:9b:f0:
         b8:40:6d:0d:a9:53:31:e1:05:d8:30:23:50:66:71:9b:60:e1:
         fb:60:a1:da:f5:44:cd:c2:22:fe:98:97:b4:58:4f:ad:77:5c:
         00:dc:e4:96:6a:ea:48:0e:86:f6:f6:32:4f:1c:97:23:c8:79:
         70:60:4f:00:e0:a6:61:f9:0f:60:17:83:26:ba:90:12:f6:73:
         a1:45:ac:63:34:34:17:84:da:e1:7f:5d:5b:89:95:8c:73:28:
         a0:e5:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:56 2026 by rpki-client