Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
File:                     3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json)
Hash identifier:          l48c/O5f1c83ZeAPSNehrhSXRHwcru9z3cNrCDGi1fU=
Subject key identifier:   0A:12:08:8C:8E:CD:C1:98:BC:01:7E:3F:94:7B:50:AF:D7:6F:2C:14
Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
Certificate issuer:       /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
Manifest number:          C6
Signing time:             Fri 17 Apr 2026 06:38:09 +0000
Manifest this update:     Fri 17 Apr 2026 06:38:09 +0000
Manifest next update:     Fri 24 Apr 2026 06:38:09 +0000
Files and hashes:         1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: ok7GoQXXWSPdB7d0NWeXe3agQu7o/VGmlnp2G1CcNmc=)
                          2: 0B65C980136D11F09F542C81C4F9AE02.roa (hash: wGUGCDLQuCuMzbcHbV/cBOi37S+j6xYKnWjU86HEOho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
        Validity
            Not Before: Apr 17 06:38:09 2026 GMT
            Not After : Apr 24 06:38:09 2026 GMT
        Subject: CN=69e1d551-2681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:e6:3e:16:41:43:37:c1:8a:c3:bb:ec:bc:
                    4a:f9:f8:60:b8:02:c9:0c:b2:81:f9:4c:a8:aa:f2:
                    16:02:1e:6d:f5:fd:6c:5e:5d:65:36:de:64:18:ed:
                    cd:22:15:01:2f:2e:6d:5e:98:d3:9c:98:d7:0d:03:
                    90:27:68:50:ea:92:66:03:76:15:02:4a:78:a5:48:
                    de:70:b8:72:f3:c0:8d:9c:ab:1d:6d:95:9a:0d:c3:
                    58:1e:10:24:c6:3e:13:b7:e3:12:d0:84:c8:8a:81:
                    29:b4:67:b5:5e:55:b8:b2:3f:b4:fe:01:cf:79:39:
                    4e:87:a0:09:be:8f:41:0d:eb:09:c5:51:2c:19:12:
                    c4:d3:55:e0:59:e4:8a:9c:a0:6d:9d:74:c4:f0:b0:
                    59:cc:0f:38:34:bc:1c:66:59:9a:12:b3:a3:54:bc:
                    49:e1:ca:0c:28:f8:75:ae:f4:da:49:8a:e9:6e:08:
                    4d:3e:07:91:a7:03:fd:38:7f:d3:26:23:a9:a2:84:
                    b0:15:cc:47:a4:29:7e:98:c7:52:6a:4b:14:75:0a:
                    a0:3b:99:9b:48:53:6b:36:f6:17:62:f6:9e:fa:14:
                    c3:08:94:20:21:ab:ae:57:b7:dc:2f:67:80:b0:67:
                    32:ea:c9:0e:f1:27:ac:b7:a8:46:33:2e:ac:bf:47:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:08:8C:8E:CD:C1:98:BC:01:7E:3F:94:7B:50:AF:D7:6F:2C:14
            X509v3 Authority Key Identifier:
                keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:24:43:c7:a4:ca:7f:95:0e:a8:1f:09:e5:29:cc:74:68:6a:
         e4:40:7b:64:c3:2f:52:9e:9e:26:0b:f4:09:04:cc:0e:38:e5:
         80:e2:0b:10:27:b7:d2:ca:36:ab:06:99:13:05:65:c3:d1:a3:
         5f:70:16:18:0c:6d:eb:76:73:da:02:a3:cb:db:73:d0:43:cc:
         45:76:99:f5:c0:47:cc:a8:83:fe:ea:cb:d4:64:03:e5:85:94:
         b5:f1:83:92:11:83:ba:e3:f6:60:80:71:36:30:2e:94:96:f2:
         6b:e1:e3:f3:67:95:57:46:bf:5d:b1:3f:0d:8a:35:70:db:c7:
         17:44:4e:f0:69:8d:a8:cb:d2:28:54:1e:a4:bf:63:c1:55:75:
         cc:a4:a4:96:e4:a6:ac:75:7d:59:06:70:ee:70:9a:1c:6d:4f:
         0e:23:41:f3:a4:fb:04:f2:ff:04:2a:14:08:59:4f:44:5a:b4:
         04:46:9c:98:63:77:20:48:57:b8:b8:2a:4c:82:62:4d:3a:dc:
         54:73:a8:a8:05:6b:3b:4c:e0:a2:6c:16:06:ac:b5:f7:2a:a0:
         5f:2c:34:c4:77:12:32:f0:18:3d:c9:80:36:8a:bb:48:bc:74:
         44:32:ce:f8:bb:e4:a3:f5:f3:61:a7:fc:a5:a8:1c:65:0c:17:
         d1:6e:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:50 2026 by rpki-client