Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
File:                     3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json)
Hash identifier:          jE81pu6xJ7OIukE6A8ntHEsFvYNYJaJz8Cf4JSL+BY0=
Subject key identifier:   B9:8A:87:34:12:ED:4A:FF:DE:81:B6:1C:B1:55:BC:6D:6B:71:57:B4
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Certificate issuer:       /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
Manifest number:          CD
Signing time:             Sat 13 Jun 2026 06:57:47 +0000
Manifest this update:     Sat 13 Jun 2026 06:57:47 +0000
Manifest next update:     Sat 20 Jun 2026 06:57:47 +0000
Files and hashes:         1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: kwxw7/anFEWekH6YBsIjb6kWNStk3HPYVu6NULFDVJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
                          rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
        Validity
            Not Before: Jun 13 06:57:47 2026 GMT
            Not After : Jun 20 06:57:47 2026 GMT
        Subject: CN=6a2cff6b-ff2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:6d:76:44:51:2e:7a:8f:c2:6d:5b:41:eb:
                    74:25:28:05:14:59:74:0d:d3:aa:00:d3:45:8b:84:
                    59:b3:f2:bc:27:4d:a1:c8:c8:63:66:45:3b:25:f3:
                    22:c4:2c:4f:83:f7:42:8b:0e:82:d0:1b:66:f1:71:
                    2c:fb:fe:1a:08:a6:f0:9a:48:ad:2a:bc:14:bc:00:
                    f3:98:1d:9e:ef:15:a7:8f:56:da:22:23:d3:12:a4:
                    56:d0:6a:fa:45:10:58:de:a5:c5:b4:9e:f3:fd:50:
                    d5:98:64:53:db:93:8d:e9:ae:17:8b:93:bf:4d:23:
                    74:75:40:27:76:bd:fa:90:e2:e0:20:f3:99:04:cf:
                    e7:5c:48:ed:51:0b:5d:5d:71:1d:0a:69:8a:17:8c:
                    e4:54:b3:93:c8:29:ca:a9:83:51:d8:03:63:4a:c7:
                    08:5e:47:9c:9d:b9:a1:6a:4c:15:9c:4b:28:65:73:
                    eb:11:98:ea:f0:2b:51:60:ce:e2:e4:f1:fa:fe:16:
                    62:39:98:c2:fc:2b:eb:03:75:72:13:63:89:f7:4c:
                    f4:d1:0f:f7:2b:c9:b6:41:ff:3c:0d:bf:1b:79:c8:
                    b0:71:a2:9f:5f:62:57:f9:92:14:11:8c:f9:52:a2:
                    07:c0:ba:78:74:23:08:26:c0:ac:d4:c2:54:1a:37:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8A:87:34:12:ED:4A:FF:DE:81:B6:1C:B1:55:BC:6D:6B:71:57:B4
            X509v3 Authority Key Identifier:
                keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e0:0b:cf:a3:e9:e5:61:f1:1a:b5:21:65:e2:a6:06:fc:2d:
         2c:ec:38:aa:82:63:96:c4:4d:fc:8c:4b:09:f6:99:ee:aa:01:
         b0:8c:f9:fa:e7:72:76:8e:ac:a0:0a:a5:b4:ad:44:fc:c9:3b:
         0f:4c:66:a7:61:7e:01:01:05:c7:51:5a:67:5c:94:4a:13:60:
         a5:2e:ca:f9:a8:21:97:2b:0f:17:65:1e:92:d2:b3:4c:f5:31:
         4b:7e:c6:77:68:31:f1:c7:53:19:93:d0:2a:e6:a0:75:66:b7:
         6e:a2:e2:c2:16:dc:9d:e6:6e:30:c6:f8:93:a1:d2:38:78:66:
         9a:df:b5:cd:c5:ec:d3:39:78:dd:25:ab:7d:4b:70:97:c7:ef:
         97:c1:9b:2e:fd:ae:0b:99:57:61:f5:96:1e:20:38:d9:74:5e:
         24:52:6b:a7:5a:3b:dc:bc:ef:df:8a:e8:a5:cc:29:78:63:2e:
         dd:9d:75:ff:e8:7d:e9:3e:50:4e:a1:f2:b6:07:ae:28:43:69:
         d3:4e:6c:26:cc:5b:c3:f2:28:82:fe:4e:d5:09:f4:da:9e:3e:
         ef:55:ed:fc:f1:eb:12:02:d9:88:1d:83:e0:b0:48:df:6d:2f:
         97:a4:05:7c:94:8c:20:0d:3e:77:cf:a0:a2:62:90:9d:dc:01:
         cb:b8:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:34 2026 by rpki-client