Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File:                     M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier:          RXFfQ++lQkyLFnhKnyhlIrcq3uGk6ufTECU0yLz2oPs=
Subject key identifier:   B7:26:37:0E:23:DC:46:02:26:2B:CC:BA:BB:92:F1:C9:CA:EA:8D:E6
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer:       /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number:          0147
Signing time:             Mon 01 Jun 2026 06:01:37 +0000
Manifest this update:     Mon 01 Jun 2026 06:01:36 +0000
Manifest next update:     Mon 08 Jun 2026 06:01:36 +0000
Files and hashes:         1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: C56tJnI2iO/c+Aj/c/8W0kG58lxJ1RUO2iJu/3e+YSg=)
                          2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: SFRW6ZgLtC608yEa/dd47ZCBFLjksB/GM54AXvteWIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
        Validity
            Not Before: Jun  1 06:01:36 2026 GMT
            Not After : Jun  8 06:01:36 2026 GMT
        Subject: CN=6a1d2040-0eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:0c:43:69:f7:2e:b6:32:a1:e9:d7:1c:e8:
                    cd:69:3b:eb:81:2d:4b:c8:7d:c9:f4:76:58:79:39:
                    a3:6d:21:0a:9a:39:af:3b:72:a7:e0:6c:bc:7b:e5:
                    ac:a8:de:ba:a9:6b:45:74:65:86:4d:f3:b9:81:f1:
                    7f:b6:a5:12:39:2b:eb:c2:84:55:7b:86:fe:f4:5e:
                    c1:35:32:07:b6:06:db:b6:2a:34:85:19:67:21:e3:
                    99:0d:74:6c:7f:e9:6e:76:ba:00:5d:cf:60:97:1a:
                    fe:67:e2:32:a4:87:52:95:ae:db:f2:c3:32:6e:65:
                    eb:b7:e2:9c:a8:99:7d:8b:26:a3:d4:c6:99:02:5e:
                    a8:0f:23:23:0e:63:08:c2:fc:79:d7:ea:20:2e:97:
                    0f:96:91:12:27:5d:13:96:4e:03:bf:ea:4e:80:80:
                    3f:ff:29:3b:70:af:f3:a3:db:ba:30:d1:4f:14:d7:
                    ad:39:76:16:ec:d4:1b:ae:26:eb:77:8c:da:a1:f6:
                    f0:d7:d3:df:2c:96:d9:51:ba:6e:4b:97:9e:1b:04:
                    08:e0:9d:31:01:be:50:52:1c:c0:3d:34:76:dc:af:
                    56:88:78:48:85:5e:cc:60:c8:aa:40:ba:a4:5b:9f:
                    4d:90:2e:d6:63:ab:8e:0e:62:0a:62:1b:0b:45:da:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:26:37:0E:23:DC:46:02:26:2B:CC:BA:BB:92:F1:C9:CA:EA:8D:E6
            X509v3 Authority Key Identifier:
                keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2a:05:99:d9:61:38:78:64:f7:33:57:51:ba:98:42:95:7a:
         23:d1:09:08:9c:5c:59:05:0b:35:96:7d:f8:e5:5f:fa:e3:25:
         bd:6d:44:d5:8f:74:dc:f8:eb:a8:58:e6:7c:94:1e:ee:91:70:
         d6:b4:b6:97:11:c8:a4:e3:9c:87:31:7c:b0:96:45:27:47:cf:
         74:a4:6d:81:d0:ec:75:52:c6:29:bd:20:20:c2:0f:6e:2f:20:
         ab:4e:d6:91:67:0e:47:33:b4:b2:0e:a8:98:29:18:3c:aa:84:
         69:3c:c1:54:90:84:a0:af:04:80:88:88:9f:f1:ac:b8:09:c1:
         01:88:f5:ab:e5:b7:cd:d3:04:10:d5:17:ec:c7:19:6c:cc:32:
         f6:af:44:3b:3a:ba:74:9f:a4:cc:65:56:9e:2e:a7:20:80:64:
         ca:44:54:a0:25:ad:5d:1f:2b:d9:1f:27:87:60:8c:b0:a6:0b:
         d1:72:24:09:e6:82:d6:d7:43:1a:9f:89:35:bd:2b:9d:25:44:
         75:3a:99:72:e3:80:2f:93:54:6a:2c:f8:20:b9:86:95:b2:15:
         4b:cb:43:89:90:3c:04:88:0e:33:de:39:4d:0b:20:ca:0c:e0:
         80:e7:8e:3f:d6:d7:0a:20:77:b0:95:e3:54:e7:dd:f9:3e:be:
         99:fb:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:50 2026 by rpki-client