Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
File:                     35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json)
Hash identifier:          eCB4Pi4N0NJAMcUssM+PKkS4GzwZiI46tQIuNrKp4zY=
Subject key identifier:   F2:15:E7:73:5C:D4:6F:F5:4A:09:D1:95:F5:32:EC:1F:5D:7F:AD:FC
Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Certificate issuer:       /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
Manifest number:          8B
Signing time:             Thu 11 Jun 2026 09:48:44 +0000
Manifest this update:     Thu 11 Jun 2026 09:48:44 +0000
Manifest next update:     Thu 18 Jun 2026 09:48:44 +0000
Files and hashes:         1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: U1QX3JvETznRcR2w6TJxkzD1p3DfMOzZoljGJVAwREA=)
                          2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
                          rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
        Validity
            Not Before: Jun 11 09:48:44 2026 GMT
            Not After : Jun 18 09:48:44 2026 GMT
        Subject: CN=6a2a847c-8a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:f3:2a:15:86:e5:e7:82:77:45:d5:e8:db:
                    85:81:05:1f:8b:f4:bd:a4:26:3f:03:44:a4:9c:b1:
                    12:f3:6f:f2:22:26:56:99:64:dd:37:95:98:04:35:
                    88:9d:2b:6d:e8:c0:32:15:39:95:24:21:54:d2:1e:
                    57:07:73:7a:45:f4:c8:2d:cf:98:51:b7:c5:a4:f3:
                    a5:f2:1d:db:f2:a3:62:98:51:7b:8b:00:0c:41:da:
                    0b:76:fa:17:1d:e3:51:20:fc:2d:7e:42:f1:9f:bb:
                    03:a4:59:03:75:06:c4:1d:5a:fc:71:57:69:5f:1c:
                    48:a5:6a:a6:8f:07:5c:bb:5f:43:18:f7:15:45:fa:
                    2a:b0:14:02:3e:86:84:73:99:08:da:50:0f:22:1f:
                    3f:f3:7b:0b:1a:76:a2:a4:ed:df:74:f9:f8:3e:96:
                    bb:09:98:be:05:a6:0d:0b:b6:05:56:8f:8f:ed:0a:
                    4f:30:10:43:62:5d:b4:0e:ce:71:d3:78:04:86:77:
                    0b:7c:13:1e:83:f6:10:3d:a9:37:a6:b9:e2:66:2c:
                    77:a7:2d:d1:f2:13:35:ac:f6:ba:17:8a:5a:d6:97:
                    39:28:dd:72:cb:95:c2:ed:cb:65:bd:6f:55:a8:f0:
                    b4:4e:64:63:e8:d0:04:b3:51:de:4b:fc:39:7b:da:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:15:E7:73:5C:D4:6F:F5:4A:09:D1:95:F5:32:EC:1F:5D:7F:AD:FC
            X509v3 Authority Key Identifier:
                keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a3:90:74:01:53:fd:57:ab:40:e7:18:2e:d0:33:35:38:f5:
         83:29:9e:d7:df:95:a6:39:61:16:98:26:75:0d:5a:e3:54:0f:
         6d:37:06:d1:9b:90:ca:1c:55:6c:91:08:89:ff:bc:26:f0:d8:
         f5:9b:00:73:27:91:f1:b3:0c:d6:91:dd:b4:e0:17:ae:7b:87:
         f7:b4:54:ea:bf:16:24:cc:83:9c:fd:f7:ca:e6:e9:e2:ac:ba:
         f5:cc:c2:29:19:b5:5e:b2:59:61:53:7d:e9:35:77:28:b2:d5:
         61:89:3c:06:2d:25:3e:cc:ff:43:e5:47:e7:30:4f:df:23:91:
         dc:31:24:ff:c6:f0:4c:e8:7d:d3:b7:ee:48:c9:a5:9b:9c:56:
         3a:01:cf:e3:96:21:49:6f:09:af:ab:98:08:d7:b2:63:dd:ab:
         d9:a8:ce:51:50:1e:f1:19:12:5e:4c:03:ad:9c:46:12:e0:45:
         a7:a9:69:9c:ec:34:bd:1a:7e:85:36:e4:ef:4a:a2:9d:0d:15:
         49:2f:00:e0:4f:d6:6f:20:00:9c:d3:39:85:23:74:85:88:bc:
         52:00:db:54:b5:12:e2:20:f6:f9:4f:1c:1f:49:8c:ef:04:2e:
         db:61:ef:45:04:e9:48:fa:64:c4:96:58:ae:22:37:fd:7c:55:
         e7:aa:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:37 2026 by rpki-client