Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
File:                     3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json)
Hash identifier:          axGjU3Q9cDhhbbeDHxi0Y7RrKbesF9bLFvZOU0WXv1w=
Subject key identifier:   4B:EF:6C:DE:73:EE:6C:39:71:7A:3E:44:A3:BE:C9:ED:AE:AD:91:63
Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8
Certificate issuer:       /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
Certificate serial:       08A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
Manifest number:          087D
Signing time:             Fri 12 Jun 2026 20:50:13 +0000
Manifest this update:     Fri 12 Jun 2026 20:50:13 +0000
Manifest next update:     Fri 19 Jun 2026 20:50:13 +0000
Files and hashes:         1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: GeLI638Uw2QUOI/SBib6kveg1Nc77gtxYnVuL0Bk+qI=)
                          2: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: mEYTlHG5kpWGqAptPr16SuSTKtrgl88+S1qWS3rlZ1c=)
                          3: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: F6LSRzHnrTo7J01sXjb7AoMVO+sTd3XP3ZGtjca+Bu8=)
                          4: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: ySJ9f4a7cg7BoSELqx9I/0KDLVkwX9/nfnRYeM6OTmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl
                          rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212 (0x8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
        Validity
            Not Before: Jun 12 20:50:13 2026 GMT
            Not After : Jun 19 20:50:13 2026 GMT
        Subject: CN=6a2c7105-c043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:ec:d4:c6:95:d1:a2:be:ba:b3:15:73:38:
                    4f:f2:c7:e5:7e:4f:cf:81:ff:f9:af:d8:d0:29:f7:
                    ef:9b:21:38:84:2c:57:c5:9a:9c:4e:9d:e6:70:39:
                    84:6e:ec:3a:b5:fb:20:0a:8c:31:1c:d5:9f:1d:5f:
                    f5:c7:e0:d2:be:56:a8:7c:65:57:de:ce:fb:6c:79:
                    1b:45:de:37:6e:b7:99:00:fd:33:09:27:22:8c:86:
                    6f:3b:5e:64:f4:00:ec:30:89:67:75:6d:d3:2c:32:
                    e8:52:21:bd:25:18:dc:65:10:16:25:6d:5f:01:d0:
                    3d:fe:1b:b3:66:97:08:8d:e4:4f:1f:d2:02:cb:97:
                    a5:dc:52:3b:29:7d:63:eb:e1:39:aa:82:af:ed:54:
                    98:55:ff:e8:01:75:4d:ed:23:9c:1f:06:82:e6:89:
                    16:64:42:68:a8:72:35:50:c9:5a:cf:6f:91:3d:86:
                    f4:54:e1:9f:74:ea:8e:90:1a:50:2c:3d:0b:90:89:
                    5d:12:56:2f:91:30:31:c1:23:95:e6:64:aa:41:5b:
                    78:13:05:ba:e9:f1:fd:0d:92:17:73:4f:81:e5:22:
                    6a:62:8c:1d:0f:1e:f8:3b:1b:84:3a:75:94:e5:39:
                    2b:9c:c8:b2:3f:cf:39:64:38:13:8f:df:7a:5b:99:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:6C:DE:73:EE:6C:39:71:7A:3E:44:A3:BE:C9:ED:AE:AD:91:63
            X509v3 Authority Key Identifier:
                keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ba:96:04:43:9c:3b:0d:b4:63:17:b2:35:38:a3:e7:72:63:
         61:a9:9b:18:31:6f:1d:cc:38:b5:9e:d4:ff:cc:a5:2a:49:cb:
         78:17:ba:a6:40:d1:9a:0d:aa:3e:df:3c:09:d3:4c:d4:15:16:
         f3:e3:3c:c7:b4:1b:d9:6c:85:5f:ba:73:98:9d:6f:f2:31:b8:
         3c:3c:c1:30:a4:57:91:c1:9f:ad:f5:c6:22:0d:af:dc:ea:5f:
         ed:00:46:8b:06:c0:d9:71:62:f7:76:5c:2a:70:df:cf:03:d6:
         15:09:f0:66:44:24:23:7c:5a:86:f4:0e:f1:ab:03:d7:6d:82:
         b3:03:eb:2e:23:56:dc:df:9c:d3:df:5c:ab:81:d3:c0:5a:ba:
         a9:38:f7:5c:f0:28:f3:ee:12:a7:ce:07:57:4c:47:61:63:f0:
         cc:53:05:a7:30:86:17:0b:ad:3e:30:0e:30:f7:d4:0d:b5:a6:
         31:14:06:57:84:34:82:91:1c:ef:dc:44:68:6d:7a:26:e5:36:
         b1:50:e8:34:bb:a9:a6:5d:8b:19:25:97:ae:34:c7:4e:37:ff:
         c2:59:24:36:0f:07:c2:c0:e0:84:79:05:d4:1f:2f:04:15:64:
         d8:3f:cf:7f:b5:3b:51:d6:3c:af:bd:97:5e:ad:b2:e0:1d:b2:
         40:8c:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:03 2026 by rpki-client