Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
File:                     3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json)
Hash identifier:          /UPKnU4vT8la/pJcjj4QsVfNh1o3g6oLjlgRekv3ETE=
Subject key identifier:   97:8C:D3:FD:76:FC:65:FA:01:38:83:6A:E9:D5:33:81:9A:AA:56:98
Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3
Certificate issuer:       /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
Manifest number:          088C
Signing time:             Fri 12 Jun 2026 20:39:17 +0000
Manifest this update:     Fri 12 Jun 2026 20:39:17 +0000
Manifest next update:     Fri 19 Jun 2026 20:39:17 +0000
Files and hashes:         1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: NYqA1Ky5XedNFKH7EWCGlm5DNtLa1gvMSg7dxaTtD2U=)
                          2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: gjXk5FJ28SiJiqatM16BZg/99HgL3HEPLn3XZb4vIWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
        Validity
            Not Before: Jun 12 20:39:17 2026 GMT
            Not After : Jun 19 20:39:17 2026 GMT
        Subject: CN=6a2c6e75-c9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:24:15:c7:a4:5b:69:07:83:15:f1:ef:f0:
                    b6:34:ca:23:80:07:3e:60:9c:7c:0f:aa:9e:13:27:
                    66:58:45:1e:c2:12:0b:84:09:ec:23:ba:2f:f0:c9:
                    48:6e:8f:47:9b:2c:d8:45:c2:2f:7c:bd:8b:6b:1f:
                    26:b9:48:cc:ba:fd:02:cb:15:2c:23:e1:0d:b8:90:
                    a8:0e:ad:f4:e7:d8:4c:49:c5:38:34:7c:f5:29:c1:
                    e8:ab:f8:28:06:3f:97:9a:1f:57:cf:95:96:3f:53:
                    59:8b:37:c6:d4:95:af:03:ee:7f:da:f6:19:d9:ad:
                    34:56:7b:88:93:93:41:10:15:fa:de:ff:d1:37:91:
                    6a:86:8d:c5:67:d1:6b:d4:09:a3:57:39:99:b0:a2:
                    39:43:37:91:b7:cc:c3:77:1a:aa:d0:5e:60:0e:e0:
                    1b:b7:40:bc:53:e6:5f:24:81:5c:03:3b:70:4f:54:
                    6a:b4:2d:3d:9f:de:22:82:2a:52:86:7e:5e:14:ce:
                    3d:8a:83:92:f6:06:2d:19:04:ef:5c:65:06:fa:34:
                    9d:98:b7:74:98:e8:65:d3:f3:08:40:51:f6:38:1c:
                    12:f4:48:b1:f7:fb:96:17:16:8b:6d:2b:11:7c:bb:
                    75:40:8c:78:19:af:66:9d:7f:bd:12:21:bb:78:1f:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:D3:FD:76:FC:65:FA:01:38:83:6A:E9:D5:33:81:9A:AA:56:98
            X509v3 Authority Key Identifier:
                keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:1e:75:d3:6a:7b:66:be:17:e1:7a:d3:d7:f6:e9:65:4b:
         ca:51:f8:65:b5:40:fa:56:e0:61:f4:72:41:24:ea:87:b8:e7:
         a6:fe:76:b5:f2:91:27:f8:2b:2e:ba:b6:6c:79:57:d9:f3:ac:
         e0:13:72:29:fa:ff:a3:50:03:c1:5a:fb:da:32:a5:66:b1:3e:
         2b:eb:6b:b8:91:9f:85:9e:32:9a:3d:d5:95:2d:48:38:fa:30:
         5f:e7:de:31:ac:5f:35:dd:d7:60:39:d9:53:de:88:c1:b2:70:
         81:b9:4d:9a:0b:38:ec:06:d5:e9:4b:e0:99:3c:a8:9d:47:37:
         a0:bf:df:1c:b7:2a:a3:6e:c2:9f:87:4a:06:49:6b:db:ff:8f:
         bf:80:af:70:65:58:e5:d0:34:e2:80:0c:6c:8c:69:de:fb:19:
         fd:33:bc:e0:af:e3:e5:29:87:35:de:a8:b6:93:9f:95:1d:87:
         9b:8a:9e:25:ef:c4:c2:5c:70:19:13:47:0e:f4:63:b7:c2:b0:
         0d:00:99:c4:40:8d:ec:25:ae:91:ea:6a:b6:3d:6e:29:b2:71:
         d4:2a:b2:43:c6:7b:26:62:3e:c9:a9:c3:37:3b:f0:31:75:19:
         a1:ba:b4:fd:c3:87:1e:4c:1b:de:0e:29:6e:39:48:1b:96:13:
         57:6b:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:05 2026 by rpki-client