Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft
File:                     5dNtVjx7PUXNnF98WB6d59bsNDE.mft (raw, json)
Hash identifier:          O1/FNLxqxCiVWm3IHtuxz6/w/dY+jd4ij2GYg0vRXDA=
Subject key identifier:   B6:C4:CE:DF:48:4C:84:04:5E:9D:74:7C:BD:49:3A:BD:8E:D3:DD:25
Authority key identifier: E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31
Certificate issuer:       /CN=A91B681A/serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft
Manifest number:          3F
Signing time:             Sat 13 Jun 2026 08:35:22 +0000
Manifest this update:     Sat 13 Jun 2026 08:35:21 +0000
Manifest next update:     Sat 20 Jun 2026 08:35:21 +0000
Files and hashes:         1: 5dNtVjx7PUXNnF98WB6d59bsNDE.crl (hash: im/9bHeCHbXL7iQR0vX+ZflTAJwhatWOmumkKE/1PiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl
                          rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B681A, serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431
        Validity
            Not Before: Jun 13 08:35:21 2026 GMT
            Not After : Jun 20 08:35:21 2026 GMT
        Subject: CN=6a2d164a-cd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:a9:05:a0:58:e3:33:3e:8f:4f:02:71:ad:
                    ec:9e:89:f7:13:dc:5d:17:39:f8:20:1e:0e:75:c6:
                    09:e2:dc:80:22:21:cf:8e:83:e8:d6:23:87:d3:e8:
                    91:0f:9d:d3:bd:39:f2:55:5f:f5:83:a2:b8:fa:1f:
                    bb:8d:7c:49:1e:65:81:2d:e7:69:70:c9:bd:ba:69:
                    90:13:08:71:ee:4d:93:1f:4a:ac:eb:22:fd:ca:2f:
                    f9:19:a9:0a:89:f9:f7:8d:51:7b:73:b5:a3:23:83:
                    9d:d2:1a:b5:03:2f:3b:d1:b1:09:82:76:d9:0d:b6:
                    55:de:9b:c3:fb:49:5e:49:63:9d:a2:46:07:91:91:
                    ef:ce:cb:b3:d9:46:37:92:e5:a7:96:10:c9:59:44:
                    0f:ac:95:e3:08:e4:94:0e:68:7c:38:a3:38:23:51:
                    6f:c7:6f:42:e6:c0:80:82:46:5b:8c:76:c0:a5:ff:
                    37:f9:97:aa:90:6a:2c:8a:c4:6b:af:e7:e1:43:ec:
                    66:d6:54:45:da:da:28:dd:88:b0:6c:13:a9:90:47:
                    fb:ec:3d:69:89:47:cb:bf:78:bd:79:8c:2b:e3:b7:
                    f2:10:12:f2:32:e0:36:87:23:92:67:46:21:b8:06:
                    3b:ba:8b:35:1a:54:2d:6a:c3:6e:bd:5d:d5:2c:4d:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C4:CE:DF:48:4C:84:04:5E:9D:74:7C:BD:49:3A:BD:8E:D3:DD:25
            X509v3 Authority Key Identifier:
                keyid:E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cf:2b:9a:fe:1d:e6:e8:e4:13:6b:6f:79:d9:45:39:63:70:
         a5:4b:e8:5c:c0:c7:84:a8:5e:81:2f:f1:7c:cb:9d:24:35:7f:
         50:3d:3b:83:3d:c8:0c:23:02:17:f1:bb:38:76:82:66:50:74:
         c6:42:71:20:86:7b:54:82:be:c9:55:e0:ab:bd:f4:ad:b9:2a:
         c0:41:dd:3e:32:93:81:e8:40:a6:81:2f:e7:a7:2a:66:4b:8e:
         8e:d5:00:cf:8e:bb:50:fc:65:7e:5b:36:6e:8a:c6:82:0b:41:
         d2:cf:2f:bc:ef:cf:55:6b:2d:eb:b5:5f:8f:b2:95:5e:15:fb:
         46:e8:40:8a:3e:62:07:37:ed:f0:70:04:69:70:c6:7a:ec:99:
         25:e8:a3:32:4f:e4:df:b1:fb:1d:5e:f3:c2:97:aa:93:52:7b:
         20:d0:52:23:31:f5:18:2c:1c:93:a6:39:26:b2:99:09:40:a8:
         23:c2:60:9b:61:ff:15:fb:5c:0c:c8:c3:b7:39:08:20:8c:57:
         26:0b:82:35:3f:ce:b8:ae:d0:93:05:de:d2:c6:c3:57:67:ca:
         1f:aa:15:65:8c:c3:f8:0e:55:a3:a3:90:1d:e1:07:fb:4a:df:
         33:af:14:5a:0e:c9:d9:72:1c:fa:16:42:6e:ec:aa:e8:93:63:
         2f:26:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:39:55 2026 by rpki-client