Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
File:                     34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json)
Hash identifier:          pWzKdpU4/vapv71FUxRc6BR5XVX+6ykQ3u2cYqkusuQ=
Subject key identifier:   CE:79:22:72:3F:F5:B7:6A:66:F9:41:D2:5F:E6:B2:1D:55:D6:22:A7
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Certificate issuer:       /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial:       0362
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
Manifest number:          0353
Signing time:             Fri 21 Aug 2026 00:51:06 +0000
Manifest this update:     Fri 21 Aug 2026 00:51:06 +0000
Manifest next update:     Fri 28 Aug 2026 00:51:06 +0000
Files and hashes:         1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: zGnzwZGxujEVtDf/eTqGEDvJp/k2HSVGC/CrqA7LtZU=)
                          2: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: KnGlEyG5to94pHkynoYZJXGNW9EYXTwet6VMEUfkCuY=)
                          3: 7C754058415411ED8133414DC4F9AE02.roa (hash: yWFxqgc57Lpty88+MtSZirY1smEBvRoN1cv9SnBzAuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
                          rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
        Validity
            Not Before: Aug 21 00:51:06 2026 GMT
            Not After : Aug 28 00:51:06 2026 GMT
        Subject: CN=6a87a0fa-b474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:93:ab:65:03:d7:55:b1:9e:29:05:aa:ee:
                    fb:49:8b:fc:a2:d7:16:91:58:57:7e:93:d4:88:61:
                    d1:7b:f4:95:27:27:3e:3a:bf:9e:16:21:4d:ce:ce:
                    ce:94:21:69:87:e3:61:6a:76:b2:0f:ba:26:1f:47:
                    d0:66:35:d7:db:b5:a0:e9:62:01:79:92:05:90:b8:
                    04:84:67:fc:56:89:a1:93:f4:b7:a3:b8:b0:6b:b4:
                    22:8e:40:f6:ac:15:5b:cc:c9:6c:bf:ec:22:2b:2f:
                    70:a7:f0:1f:f3:8c:33:3d:c9:fe:e6:37:76:88:07:
                    35:d4:a0:a8:d0:1d:2d:38:1c:9f:23:df:cf:d3:ec:
                    da:fa:cf:e1:64:07:2b:0c:16:df:96:6a:38:c9:5d:
                    97:91:3a:cc:4c:bb:a7:1a:e1:34:ba:10:96:37:e0:
                    57:0f:ad:ed:ee:ca:1d:e0:a7:70:a4:be:9e:e7:d2:
                    25:45:4a:ef:64:21:e4:99:1a:d8:12:3d:b9:06:4b:
                    2a:74:28:b3:b2:07:7b:a6:f9:69:8d:9d:07:04:bd:
                    b3:d9:19:eb:0f:95:3e:9b:c1:3e:e7:1e:99:b9:10:
                    05:d7:9a:da:3d:4e:ec:f6:23:d2:04:0f:27:bc:b3:
                    85:11:8b:0d:5c:2d:0c:90:15:85:a7:cf:e5:f7:30:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:22:72:3F:F5:B7:6A:66:F9:41:D2:5F:E6:B2:1D:55:D6:22:A7
            X509v3 Authority Key Identifier:
                keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:55:ad:00:66:44:99:6b:fa:9d:a2:90:dd:63:df:60:76:5f:
         c2:60:af:43:5a:3a:11:77:5e:19:a9:b5:af:13:02:22:b1:8c:
         30:43:d6:50:5f:77:a0:32:10:55:86:21:a3:bb:1c:4c:d4:17:
         0f:23:ed:36:d6:e0:23:df:f7:e6:78:bd:60:f4:59:e2:15:88:
         bb:1e:09:2d:42:04:a6:df:27:52:6a:71:8e:f7:6d:bf:bb:a4:
         b5:ea:9b:5e:6a:cf:65:3f:7c:52:12:3c:e9:2c:88:6d:88:3c:
         d4:33:3e:de:90:aa:c9:21:ca:02:28:5c:f8:23:43:25:7a:6a:
         ce:42:56:c3:87:2d:8a:8a:3c:aa:7d:c6:ff:6e:62:4a:11:44:
         11:85:71:25:f3:0c:f4:5f:e6:74:5c:5e:3b:e5:6b:d6:e6:e0:
         f9:cc:91:95:81:6b:e6:b6:dd:00:94:bc:08:b6:3d:8b:33:f6:
         ac:97:0d:a0:72:b6:db:75:ce:20:1d:eb:1b:07:89:3d:30:bd:
         89:5a:2c:87:e2:7c:3b:73:8c:b8:77:4e:ab:a4:82:20:78:7b:
         c7:f4:73:f5:1e:c8:24:b5:43:38:a1:10:22:75:96:3f:97:f8:
         9e:2d:0a:22:b1:bb:63:01:36:5f:2e:be:0c:e4:5d:32:08:96:
         18:8f:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:53:32 2026 by rpki-client