Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File:                     A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier:          9t4tuDM/Ps8MuUX+Ci+XbrQRK5eH6/vBhbJr1I530Bk=
Subject key identifier:   0D:53:D0:C8:13:3F:4F:E1:65:3A:A9:05:F4:40:C8:DD:39:FB:62:81
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer:       /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial:       0409
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number:          03F5
Signing time:             Sat 13 Jun 2026 00:30:57 +0000
Manifest this update:     Sat 13 Jun 2026 00:30:56 +0000
Manifest next update:     Sat 20 Jun 2026 00:30:56 +0000
Files and hashes:         1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: MAZBpLU1FoaUtATCiwyhTcwIBTKprjfOD28oCy+QDQA=)
                          2: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: k2oBvP0OHpEhn0rFjfJBUkA03yXoD6fncIA5rTRi8ZU=)
                          3: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
                          rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
        Validity
            Not Before: Jun 13 00:30:56 2026 GMT
            Not After : Jun 20 00:30:56 2026 GMT
        Subject: CN=6a2ca4c1-451c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:49:a4:70:f3:bf:28:8c:4d:e3:52:ed:b8:
                    75:dd:12:56:96:a3:f0:c3:90:b7:dd:f2:38:d9:a4:
                    47:c5:ca:39:56:62:3e:ee:3e:59:f0:d5:7b:a3:63:
                    7e:4f:56:9c:42:35:c6:aa:80:27:3a:ed:37:52:be:
                    e8:49:88:f1:30:79:3e:5e:80:ea:11:38:e5:ee:c4:
                    9d:d6:93:90:25:7c:6c:76:37:fa:fc:17:cc:c3:6f:
                    8a:a0:53:69:34:af:7e:dc:93:5d:87:4b:be:6d:e2:
                    d4:f1:d3:cc:ce:df:8a:15:48:f3:1b:93:1f:80:91:
                    80:93:c2:a8:c4:19:90:3e:09:4d:26:ee:9b:4e:1b:
                    1a:33:d6:47:e8:9f:90:22:9e:96:a3:e8:bb:53:3a:
                    9b:f4:e0:2d:4b:f9:3e:53:98:a2:4c:4d:67:33:a2:
                    d7:90:64:e2:68:7e:d6:1d:62:ad:7c:29:64:33:3c:
                    1a:cb:03:16:ca:83:cf:08:af:ff:7b:a6:88:17:96:
                    2d:33:d1:f7:f3:d1:d2:79:64:8d:ff:0c:3e:f2:07:
                    b4:4f:b7:88:5c:a9:5b:3d:8e:70:fa:b8:a0:cf:9f:
                    fb:10:51:43:88:d1:a5:f4:cb:2f:b9:de:d5:ae:fd:
                    4a:b4:36:ae:a1:96:23:d3:83:74:b3:e8:e8:d3:72:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:53:D0:C8:13:3F:4F:E1:65:3A:A9:05:F4:40:C8:DD:39:FB:62:81
            X509v3 Authority Key Identifier:
                keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:73:42:fc:20:61:9c:93:36:29:81:4f:29:17:72:58:3e:10:
         d1:3f:db:70:26:01:ef:f9:d0:58:8c:7e:00:d9:70:80:3a:41:
         72:13:98:e6:71:71:94:06:86:bb:0f:88:d6:0a:2e:39:c5:09:
         7e:c7:42:dd:7a:8a:45:aa:ca:39:45:a8:4f:13:b4:fd:d1:19:
         cd:40:50:25:39:bb:ec:02:23:3e:ef:0c:74:eb:e9:dd:2b:61:
         80:04:04:63:d9:23:7f:37:c6:57:19:d1:3b:6d:dc:87:b6:c3:
         87:36:ba:10:b4:1d:dd:8e:eb:b0:60:0b:0e:0c:76:1b:2d:d7:
         93:0e:73:82:20:7f:99:d4:57:cf:96:ed:f7:70:64:db:dd:52:
         8d:1d:9c:93:48:84:81:5b:24:7f:ed:4e:39:26:51:c9:20:df:
         c7:1b:f3:c9:3f:f8:a5:5b:af:03:fd:0f:95:e0:b6:8e:1b:26:
         18:b6:85:4a:25:57:cd:ff:56:15:93:d0:3c:54:a5:04:43:fd:
         be:2d:9b:13:5e:77:80:45:5c:57:da:1b:b9:ff:12:15:18:b7:
         19:6d:70:68:e4:25:c5:a1:af:6c:6e:4a:d4:f5:00:22:7f:b3:
         63:cd:da:16:c0:94:68:c0:11:6e:43:31:75:04:50:bc:fa:93:
         08:e2:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:27:40 2026 by rpki-client