Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
File:                     r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json)
Hash identifier:          Vh2q6Ei2VRZ0+SFTw7fDq1+bBoQzlU5C8g6r2JGXMiI=
Subject key identifier:   E8:98:D0:F3:2D:1A:DB:7E:2D:5B:53:3D:45:D5:8A:BD:D6:29:D3:26
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Certificate issuer:       /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
Manifest number:          FA
Signing time:             Thu 11 Jun 2026 08:34:00 +0000
Manifest this update:     Thu 11 Jun 2026 08:34:00 +0000
Manifest next update:     Thu 18 Jun 2026 08:34:00 +0000
Files and hashes:         1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: pSLJF/33sJ2C7YYvCVIofKjagfRhQ+pOIAeCr7MMxms=)
                          2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
                          rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
        Validity
            Not Before: Jun 11 08:34:00 2026 GMT
            Not After : Jun 18 08:34:00 2026 GMT
        Subject: CN=6a2a72f8-d6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:33:66:b6:37:7e:7d:a3:23:2e:1a:31:f5:
                    f6:55:dd:82:85:ec:a8:0f:b9:f2:23:cd:bd:6a:2d:
                    0b:a9:24:35:a3:50:27:56:3e:e0:91:15:3c:2b:92:
                    cb:ed:d0:92:d8:27:4e:22:2c:1c:9f:e7:cd:7e:c3:
                    f3:03:ef:a8:74:2f:f0:ec:d8:b7:8f:f9:fc:08:c6:
                    48:20:59:9b:36:90:a6:67:47:5c:97:de:f6:61:a3:
                    36:19:7d:a4:ec:11:a9:1f:92:41:d4:7f:b3:76:dd:
                    9b:5f:4e:42:a8:16:72:1b:b6:ae:33:2c:50:37:54:
                    39:fa:91:d1:94:6b:9d:93:5f:55:bf:19:b9:dc:ae:
                    e0:30:c9:ff:5e:d5:e8:d2:e0:61:72:2f:f8:d9:e9:
                    47:29:9c:3f:eb:91:bb:74:0e:d0:7f:5c:b7:d6:c5:
                    a4:5d:79:0d:eb:a4:34:b3:f6:b6:18:3a:d4:a6:c2:
                    05:73:b0:71:39:38:05:b6:5f:88:65:4f:6a:02:12:
                    f0:76:11:89:78:c3:6e:79:5c:2f:4c:3a:12:b2:a0:
                    46:9f:bd:e4:40:62:25:1e:3a:3b:0b:ab:98:ba:ad:
                    84:76:29:d5:01:08:7e:30:66:9a:7f:18:80:d8:e5:
                    f0:bb:c6:9b:79:c1:55:9a:5b:11:c2:46:41:4a:ce:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:98:D0:F3:2D:1A:DB:7E:2D:5B:53:3D:45:D5:8A:BD:D6:29:D3:26
            X509v3 Authority Key Identifier:
                keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:7f:03:aa:b2:42:86:e6:c5:20:ef:55:03:2f:0f:46:06:ba:
         f6:4a:1f:d3:8b:12:68:33:65:43:76:1c:68:1f:1f:ef:cf:4a:
         0e:04:40:80:05:1d:58:e7:bd:97:c0:d0:38:e4:9d:59:4b:f1:
         84:a7:4b:99:20:49:9d:d1:67:16:e4:1a:33:92:9c:8f:c6:7f:
         d2:01:ae:19:7c:21:07:aa:6f:a8:43:2b:e1:4b:bd:2a:7c:85:
         75:1e:16:95:1d:9f:c4:8c:c9:5e:89:67:b1:e7:c1:09:93:30:
         55:5c:d5:6e:53:8d:29:35:e2:c6:31:81:f3:9f:b5:1b:16:7e:
         f4:6e:9f:68:45:42:38:52:57:7d:12:db:38:1b:3a:a6:f2:20:
         9b:0f:95:a7:54:6c:57:7d:b3:e5:b8:9e:1c:1e:0b:3c:d6:6f:
         9e:f1:8e:8d:76:98:ed:8a:98:ab:34:92:a6:84:4a:51:a0:42:
         98:0b:d6:21:59:18:31:d9:fb:7a:88:56:c3:d1:11:05:3b:63:
         2b:4f:2d:0e:52:91:d5:3a:ac:68:0b:29:fe:39:e1:16:00:c3:
         23:a2:76:18:ac:0a:ed:47:45:a3:b2:31:f1:7b:65:66:63:c2:
         fd:96:28:57:73:56:0e:e2:a9:de:d3:a7:30:89:46:93:00:c5:
         af:74:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:02 2026 by rpki-client