Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
File:                     z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json)
Hash identifier:          gPGRxkWL3d3xm/lP5eB77WF5BtNxQAcr3Wl+tw9abE4=
Subject key identifier:   24:1F:A6:90:41:9C:12:1D:E3:2E:A0:1D:4F:7B:A6:2A:CD:80:3D:A2
Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45
Certificate issuer:       /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45
Certificate serial:       1B06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
Manifest number:          1AE4
Signing time:             Fri 12 Jun 2026 16:16:31 +0000
Manifest this update:     Fri 12 Jun 2026 16:16:31 +0000
Manifest next update:     Fri 19 Jun 2026 16:16:31 +0000
Files and hashes:         1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: ONX2pU7OzIW468WJJGnpv1yPlDsdJ0Sc7DxXyFT9qRw=)
                          2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=)
                          3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl
                          rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6918 (0x1b06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45
        Validity
            Not Before: Jun 12 16:16:31 2026 GMT
            Not After : Jun 19 16:16:31 2026 GMT
        Subject: CN=6a2c30df-9e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:ef:8d:af:d4:93:76:50:54:f7:a7:06:b8:
                    b6:b7:e6:0f:85:a8:8b:cc:a2:7c:96:73:94:27:b0:
                    66:86:3c:82:4c:d2:5b:34:d7:42:25:60:f9:c5:1a:
                    0d:a9:4e:ed:65:4e:67:e7:50:f8:8c:63:4f:a2:9a:
                    e0:9e:a4:60:da:a4:1c:c3:b5:39:d9:b0:97:e9:65:
                    15:09:f9:ac:c9:46:c3:05:be:cd:b7:32:5c:fc:18:
                    cc:bb:5a:03:19:d4:da:6e:aa:66:31:f1:bf:9d:8d:
                    f8:e2:46:37:2c:75:dd:4f:76:1f:13:93:f4:e8:4d:
                    d6:7f:54:5f:4c:85:06:b7:2a:fd:55:b3:41:a6:9d:
                    55:96:27:ca:c2:c6:51:db:8e:90:43:58:36:a3:61:
                    58:c4:ea:36:87:f8:f3:21:77:f3:21:0b:56:26:db:
                    20:b0:c9:e9:bb:cb:5e:45:d2:4a:0e:30:0e:25:5a:
                    aa:1a:f8:ae:2a:2a:6b:0e:cb:42:2d:0c:8c:77:b2:
                    38:1c:7c:6d:8f:89:4a:b6:7b:55:28:e4:a2:77:d6:
                    b3:8e:43:4a:52:32:8c:e8:42:cd:1b:3e:f3:2d:d4:
                    3f:a7:3c:25:47:cb:a4:38:3d:69:d5:2d:e7:ee:29:
                    95:66:db:b0:cb:b2:37:7b:89:ed:fa:94:57:c6:ce:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1F:A6:90:41:9C:12:1D:E3:2E:A0:1D:4F:7B:A6:2A:CD:80:3D:A2
            X509v3 Authority Key Identifier:
                keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:42:04:70:a6:f6:db:a4:68:ad:27:65:a5:8c:2c:d7:ac:
         4f:49:47:8a:79:19:d4:e5:2c:90:b4:f1:6a:0e:9e:a2:42:df:
         71:15:5e:c6:d3:cd:ca:5c:81:9a:9d:66:eb:8a:2a:5c:10:99:
         46:11:18:d3:24:bc:14:04:20:7a:2c:e0:fc:28:90:ba:49:89:
         eb:5c:99:c1:ba:37:69:9e:39:bb:07:2a:a8:3e:38:ab:bf:d3:
         b3:3c:6c:62:4d:6d:d2:00:e9:14:a2:2c:48:91:58:56:f2:4b:
         af:30:44:6c:15:5a:90:21:75:e4:ee:b0:1f:e6:04:9d:06:84:
         12:91:90:8b:8a:70:47:f9:21:7d:6c:bb:9b:3e:f0:54:ea:17:
         27:44:98:5d:b1:b7:4b:59:a4:30:18:de:7b:86:be:23:c7:2e:
         0e:af:b8:92:f5:f0:6c:82:ea:31:53:db:c0:a8:bc:b1:99:47:
         ca:a5:a2:75:6d:87:91:08:4b:5a:b9:69:3a:39:21:38:b8:84:
         f4:10:b8:27:54:94:93:51:ed:9c:64:72:af:6c:67:25:17:b7:
         ab:03:c6:aa:1e:d7:58:68:fa:cb:c5:83:b1:c3:16:47:e8:21:
         31:fd:9d:8a:a1:bd:00:89:e2:c3:85:65:57:a3:15:16:5b:2c:
         f4:ec:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:20 2026 by rpki-client