Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File:                     fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier:          /Esrah/pqzOwSSihkkvSjHZz54v7nDyHmrBWbmBMCnc=
Subject key identifier:   3C:80:68:58:CA:25:CA:76:6E:A6:D8:E0:02:15:F1:1D:52:91:1C:20
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer:       /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial:       3558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number:          3551
Signing time:             Fri 12 Jun 2026 14:39:04 +0000
Manifest this update:     Fri 12 Jun 2026 14:39:04 +0000
Manifest next update:     Fri 19 Jun 2026 14:39:04 +0000
Files and hashes:         1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: j9OUqRrF1Djs4/gM+7PK4YuuO60uDqHj3EV4nrVSf8E=)
                          2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: HjtXlASFfUyesyuq12S6h4/nNp1al3EbTL9dYMiuAwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13656 (0x3558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
        Validity
            Not Before: Jun 12 14:39:04 2026 GMT
            Not After : Jun 19 14:39:04 2026 GMT
        Subject: CN=6a2c1a08-a658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:bc:c7:13:0b:32:d6:04:7c:69:56:16:05:
                    bc:fc:ff:cb:7d:08:e8:9f:79:13:86:d3:b4:1b:bc:
                    73:10:b7:3f:e0:8f:1e:37:dc:73:94:ca:47:50:00:
                    33:76:96:95:e7:4f:c5:d2:2e:d4:ab:a0:77:6b:9c:
                    6b:21:5d:d6:18:de:c9:75:89:6a:f1:93:87:0e:41:
                    ab:83:eb:a6:bf:18:03:7a:9c:99:1d:08:28:03:aa:
                    b2:60:96:b5:b3:70:34:2b:b2:b9:6c:17:f5:2c:41:
                    a8:20:29:b3:21:da:b8:d1:19:37:3b:fd:3a:f3:f6:
                    c7:85:6c:d5:db:0c:e2:75:ff:21:75:76:7b:94:e5:
                    a6:a0:98:3a:b7:bd:ed:0a:94:38:35:2e:7d:dd:10:
                    87:56:79:6a:66:df:98:02:6f:87:97:ce:2b:db:cb:
                    7a:2e:f4:1c:64:45:b9:5f:e8:22:94:6c:0b:39:4b:
                    f0:80:73:e7:a1:a5:50:0d:4e:e0:a0:e9:ec:e2:3d:
                    3c:fc:7b:fd:c8:a9:ec:a0:d4:38:75:b5:3a:cd:ed:
                    2b:ad:0a:a1:6f:e4:4f:e3:f7:7b:74:07:9f:0a:e2:
                    03:31:96:f1:bd:7d:94:62:f4:a6:01:0b:66:a7:d5:
                    e5:38:cf:92:20:c8:4d:f8:d9:90:c5:e9:60:0f:1a:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:80:68:58:CA:25:CA:76:6E:A6:D8:E0:02:15:F1:1D:52:91:1C:20
            X509v3 Authority Key Identifier:
                keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f3:a1:ed:7e:c9:04:b1:6c:95:3b:4e:49:8c:9d:23:74:34:
         b5:47:ff:67:33:ab:a4:da:09:46:44:22:26:24:03:72:04:e1:
         20:ac:87:d2:74:e7:e1:31:d0:22:27:47:f0:3f:c3:8f:71:2d:
         b3:6e:7d:7f:67:37:28:64:9b:56:23:89:cd:88:e2:7e:2c:93:
         e4:3f:c6:1e:63:37:7a:90:d6:f4:74:65:21:7c:bd:b2:86:e6:
         cd:4f:4c:6a:6b:9f:0f:38:a0:1a:3f:6d:64:12:35:6d:e1:0d:
         f6:8f:eb:40:08:85:55:a2:45:4a:ef:96:a4:ca:27:b3:8c:b4:
         de:8c:9c:71:6a:f9:b2:1d:ab:d4:98:a0:72:c5:f9:32:32:99:
         4c:00:95:0d:86:56:a2:74:a7:7a:3a:c4:7d:d3:be:5b:6f:4d:
         84:3a:56:65:46:30:0b:f2:99:fa:d9:5a:9b:ca:b1:76:3f:8e:
         97:d7:2a:bb:1d:d4:72:bc:7e:c3:b8:b0:f1:f6:fb:59:bf:06:
         cb:10:21:ab:e0:e8:ee:a8:af:f6:17:2d:f9:f9:63:bd:d4:b0:
         a3:33:1a:2f:13:bc:7a:ff:9a:13:01:64:28:bb:bd:a1:cb:39:
         b9:4a:cd:ac:05:c1:15:36:90:62:29:b1:75:1b:69:fc:97:e7:
         85:80:23:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:36 2026 by rpki-client