Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
File:                     hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft (raw, json)
Hash identifier:          5f0j0mUkDm/TLEpkgLkgL6K8xILZ0Ean4Lqxj/00nOE=
Subject key identifier:   23:1C:EF:0A:8E:7C:B1:72:81:A5:13:D9:73:FF:B9:05:57:E2:3D:8E
Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8
Certificate issuer:       /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
Manifest number:          3D
Signing time:             Sat 13 Jun 2026 08:38:00 +0000
Manifest this update:     Sat 13 Jun 2026 08:38:00 +0000
Manifest next update:     Sat 20 Jun 2026 08:38:00 +0000
Files and hashes:         1: hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl (hash: ZBfav/7YNO5HIvNMLfdfSCgevZU/0jTADJhlmknsrOU=)
                          2: B735FEEA118411F1951E019C333D8C67.roa (hash: qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
        Validity
            Not Before: Jun 13 08:38:00 2026 GMT
            Not After : Jun 20 08:38:00 2026 GMT
        Subject: CN=6a2d16e8-3563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:7a:7f:1c:f3:9a:25:e8:7f:5f:3c:ae:98:
                    0c:db:96:3c:24:7a:59:8e:a2:83:90:65:1a:8a:a5:
                    5e:ac:0e:5c:3d:59:a8:b2:82:55:69:1a:a8:4c:ca:
                    5b:b9:6f:dc:70:ed:1a:6f:a0:b2:8e:3f:0b:a8:6d:
                    f6:aa:40:96:08:80:4e:88:9c:53:c0:c2:d2:16:66:
                    90:0b:82:4c:85:6c:64:fe:8d:05:33:9f:29:96:b0:
                    9b:2c:1c:50:71:82:27:d0:d9:4c:6f:7b:4f:24:3a:
                    d1:09:d8:e4:3f:40:1a:46:8f:08:90:75:62:36:c5:
                    34:6a:fb:de:63:50:a1:37:07:9f:cb:e4:91:77:1b:
                    20:0f:db:a1:9d:74:00:6c:9e:ae:8c:2d:56:c6:e0:
                    7d:f0:96:d6:5c:9a:8f:7c:84:51:69:32:bc:4c:75:
                    e5:81:c2:0c:74:73:73:50:08:11:0e:4c:b9:a0:a5:
                    78:5b:a6:5d:d7:da:c3:2a:28:ad:b4:51:f9:fa:e9:
                    14:55:af:9c:f5:ca:47:a7:45:d0:d7:fe:cc:7d:bd:
                    1e:ad:d0:6e:db:1d:f3:74:63:98:22:ee:39:ab:5a:
                    44:75:0a:4a:06:67:83:2f:42:ba:3b:65:1c:c8:6c:
                    a6:44:ae:2f:a5:42:e4:21:57:c0:f6:cb:d6:02:8e:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1C:EF:0A:8E:7C:B1:72:81:A5:13:D9:73:FF:B9:05:57:E2:3D:8E
            X509v3 Authority Key Identifier:
                keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:50:4b:4c:46:2e:51:82:e6:99:de:15:15:52:54:df:d7:eb:
         bf:cb:c0:a0:8d:b1:d6:82:2a:b1:42:4a:03:7e:78:2e:50:4a:
         28:4d:34:78:51:82:c6:71:c8:b0:ce:19:12:d1:34:07:b5:64:
         e7:83:fc:00:c6:21:fc:3c:84:ec:3d:62:57:11:ed:bc:1d:d8:
         e7:da:23:d4:9f:f0:24:8d:88:7c:64:b7:38:ce:33:59:e5:cf:
         27:31:49:fc:b6:95:2e:2a:64:40:00:a9:a1:3a:74:69:aa:0f:
         65:e2:31:cd:a4:db:d7:8f:09:6a:d5:1b:53:32:16:e4:59:58:
         5f:97:ce:7b:55:25:1a:8f:8c:39:29:e3:e0:aa:c5:a1:23:f0:
         10:65:83:9e:3a:de:8a:85:1a:38:e6:a4:cd:b8:08:6e:cb:86:
         5d:6d:6a:d7:10:c6:f6:64:85:d1:4f:cb:32:f1:13:94:23:11:
         36:93:48:1e:3b:f0:3a:41:7a:8f:b5:b4:2b:53:e7:b5:13:a9:
         54:a9:01:67:05:67:cf:9b:54:ea:aa:75:43:75:8f:50:ee:31:
         f7:8f:ef:b6:70:e2:8a:86:43:fa:09:fe:a7:cb:0d:6b:47:50:
         95:2c:a4:f7:ae:46:5e:5e:38:d7:6f:4c:cb:43:b6:db:84:ea:
         33:9f:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:44 2026 by rpki-client