Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
File:                     3Y89lj-o0fItV_Tfspq9cNJVjjc.mft (raw, json)
Hash identifier:          0XKnPr+6GVNvujPA3PeYphoLxHot86IQ3DIb7X7oFTw=
Subject key identifier:   9D:F0:54:FB:65:50:CC:11:8D:29:9D:1D:42:F5:18:3C:19:E5:8C:DF
Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37
Certificate issuer:       /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
Certificate serial:       0381
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
Manifest number:          037B
Signing time:             Sat 13 Jun 2026 00:49:40 +0000
Manifest this update:     Sat 13 Jun 2026 00:49:39 +0000
Manifest next update:     Sat 20 Jun 2026 00:49:39 +0000
Files and hashes:         1: 3Y89lj-o0fItV_Tfspq9cNJVjjc.crl (hash: 1mML0lQYNaMxMiQT6KPgaKG7ZeVVbgbvwHwG97gBgIc=)
                          2: 76C5241CF47311EC8721C33DC4F9AE02.roa (hash: /az6S07hruj2MI8zT0Jdx+G9dMfedswkpkDUNrwlWX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl
                          rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D506C, serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
        Validity
            Not Before: Jun 13 00:49:39 2026 GMT
            Not After : Jun 20 00:49:39 2026 GMT
        Subject: CN=6a2ca924-4da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:8a:11:cf:46:50:16:ad:ba:6c:25:22:e6:
                    dd:e7:be:fc:11:77:98:20:d8:ca:e6:38:4c:83:dd:
                    94:aa:41:ca:dd:0f:00:ab:20:dd:3e:a6:16:43:fe:
                    20:f7:cd:dc:20:db:82:5f:14:ad:61:52:66:80:0b:
                    9f:41:15:47:f2:06:69:98:fb:5f:a9:16:0d:be:91:
                    57:83:0c:13:00:ab:37:26:5f:89:63:33:68:85:5d:
                    b2:03:39:f8:9f:28:52:a4:5c:b3:61:dd:c7:be:3a:
                    46:ee:3a:84:61:29:a7:2f:b8:41:0c:ba:b1:b2:4c:
                    72:3a:6a:85:c7:f3:68:96:3c:46:b7:98:25:f2:03:
                    30:e7:af:48:c1:ab:22:5e:3a:78:71:fb:54:bb:c4:
                    c7:6e:94:7d:fb:67:f8:ff:81:bb:23:b2:6c:98:92:
                    b6:d2:e9:12:60:5a:39:c6:68:0d:b7:bb:10:d7:c9:
                    6c:fc:a8:cd:41:85:0a:a9:6b:d9:ca:50:15:4d:f5:
                    10:f7:f2:a8:c5:6d:eb:bf:5e:ab:5a:c3:6d:db:76:
                    72:36:4c:c9:0b:06:71:28:e3:c4:48:c6:98:d5:06:
                    2d:f9:8a:ff:dc:c6:01:ab:95:1d:59:53:91:2a:a3:
                    e1:91:13:87:f3:d8:e3:af:f5:f6:c8:72:26:8c:67:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F0:54:FB:65:50:CC:11:8D:29:9D:1D:42:F5:18:3C:19:E5:8C:DF
            X509v3 Authority Key Identifier:
                keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:40:06:e2:75:96:65:b1:2b:8d:5c:29:7e:16:8b:0f:85:
         e4:f3:2c:00:07:bd:21:72:f9:f6:4c:86:de:f2:4e:41:96:f7:
         da:ae:4d:d7:f1:f3:55:45:d0:e4:b4:47:f3:34:10:72:30:5f:
         ca:cb:e7:50:fd:73:c4:60:5d:7b:03:6a:e0:d5:cd:07:25:00:
         f3:43:a2:27:76:9c:51:e3:ca:f8:03:82:33:df:ed:e9:a3:e3:
         4c:1b:cf:3a:72:90:49:4a:4a:8b:f1:26:e5:b9:85:1f:78:2c:
         cd:8e:28:99:23:5f:8a:25:be:e0:6c:84:17:72:b8:ed:af:51:
         ec:fb:b1:bf:22:c7:7b:e1:ab:fa:36:7b:86:3b:75:c4:d2:1c:
         e1:14:59:de:4b:63:23:b4:fb:14:b7:b6:d5:34:7c:b9:d0:52:
         d1:f9:b8:7b:ad:e1:a7:ec:43:f1:b8:33:57:f2:3f:82:ec:e3:
         e4:0b:fb:03:e7:2c:a9:fd:26:7f:c4:3f:22:1d:d3:ef:ed:92:
         24:90:e0:f9:a9:56:07:c1:00:b4:10:83:c8:b7:a0:c8:b3:d2:
         94:2d:ae:c3:48:bc:4c:6a:96:89:82:7f:fd:f7:36:0e:62:e5:
         bb:53:8f:68:96:7e:72:e7:3f:ec:1e:be:16:d2:2c:f9:05:e4:
         09:0f:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:32:52 2026 by rpki-client