Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
File:                     74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json)
Hash identifier:          Zzxp2QzoqxoS7XXMyJac/NxGJtKymh72gaYGoGAtq0o=
Subject key identifier:   B1:92:49:8D:7A:C2:E8:C3:9C:0D:80:D4:59:4C:70:06:EE:CD:0A:B5
Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
Certificate issuer:       /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
Manifest number:          63
Signing time:             Sat 13 Jun 2026 08:06:25 +0000
Manifest this update:     Sat 13 Jun 2026 08:06:24 +0000
Manifest next update:     Sat 20 Jun 2026 08:06:24 +0000
Files and hashes:         1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: NtZYKZqvBmkVXwrsMYj63haJ1VnOHxw/NJs8ExQJ+kk=)
                          2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: KBecdMTFKnUpJ7QDfC5GLAYFAglDXZ+nTAZgDKN2WsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
                          rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
        Validity
            Not Before: Jun 13 08:06:24 2026 GMT
            Not After : Jun 20 08:06:24 2026 GMT
        Subject: CN=6a2d0f81-f220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:a8:67:ac:9f:84:1f:e9:34:6b:72:ac:f6:
                    73:54:be:4b:e5:ba:02:b2:54:8f:d3:30:ef:fe:d4:
                    a8:2d:58:37:9b:f4:6c:8e:fc:18:f4:70:01:73:17:
                    a2:eb:58:9c:ad:69:24:1c:33:0c:fa:10:f6:b9:65:
                    9e:be:15:d9:1d:5d:6a:ba:d6:ce:88:a4:1c:7f:6c:
                    4c:86:33:93:36:62:ea:16:25:6c:72:4a:a6:b9:bf:
                    c9:5a:9a:f2:46:c6:be:51:1a:58:08:8d:e9:38:95:
                    61:d6:14:28:56:30:4c:82:5d:05:c0:75:85:93:96:
                    24:04:bd:51:0f:24:8b:8e:b0:2e:b5:f6:1a:1c:c6:
                    0c:5d:27:29:dc:dd:9b:1e:65:3b:79:ba:0d:24:0c:
                    a8:90:93:54:82:1d:0d:c4:f2:00:07:50:de:f1:d0:
                    0c:28:b5:a1:48:8c:85:06:ac:5e:b8:7f:47:c7:2d:
                    69:26:ff:36:a3:dc:fe:43:09:b1:ab:1d:95:a0:43:
                    d9:bd:35:2d:29:2c:1e:fc:12:a7:67:7a:e1:c8:18:
                    63:2a:06:ff:46:14:91:85:19:14:3a:20:76:96:3e:
                    40:40:ca:ff:1c:12:06:10:a8:27:2c:8a:1d:8b:99:
                    a0:00:5f:69:c2:d2:23:56:b2:99:ab:2e:9e:99:a9:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:92:49:8D:7A:C2:E8:C3:9C:0D:80:D4:59:4C:70:06:EE:CD:0A:B5
            X509v3 Authority Key Identifier:
                keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:26:ee:25:e3:d5:2b:fe:45:96:fe:d9:d6:d2:c5:8f:c1:
         ac:0e:a8:50:09:4e:fc:3b:8d:60:57:47:c5:7f:ec:9e:49:6a:
         1f:a7:52:72:07:db:a3:5a:ce:60:61:d1:ad:c6:88:77:21:49:
         a0:90:b3:56:8c:b7:1d:1b:f2:a0:a5:43:c5:22:9a:9b:fd:f1:
         14:51:82:91:18:f9:8c:e9:e5:51:5f:03:19:71:dc:8c:9e:1f:
         67:d7:0b:99:f6:4b:11:68:17:17:90:34:e8:ec:e7:4c:7c:10:
         8a:bc:3c:de:5c:82:13:d0:21:5d:38:89:3a:c7:3d:6c:46:d4:
         03:fc:20:61:6b:5e:28:e0:e5:84:03:fb:1c:ec:c1:74:a1:d5:
         36:0b:5b:ed:21:3a:ce:ae:f8:23:f6:3d:f3:19:1b:5b:4b:bd:
         37:e0:5c:64:f8:b2:ff:b3:78:6a:d2:74:fe:d4:86:be:27:65:
         ee:86:fb:50:29:37:34:54:e0:c6:92:b1:c8:28:95:c9:57:14:
         ba:8f:9d:51:5c:dc:90:a3:fc:24:21:48:06:9b:c5:2b:39:70:
         cf:fc:60:c6:54:b2:8b:06:c4:b7:12:fa:0e:8b:ce:2f:28:2a:
         29:68:bd:12:18:cd:bf:63:f5:b5:e2:40:53:06:f0:8e:12:a2:
         47:08:5e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:17 2026 by rpki-client