Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
File:                     3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json)
Hash identifier:          ore8WEimSKJPIEjavBhQ0FehgFQB2gDpVBQvNsgZ1RA=
Subject key identifier:   7E:BB:B8:1C:6C:08:45:25:97:08:5C:74:53:15:54:4D:E3:5D:D3:88
Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66
Certificate issuer:       /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266
Certificate serial:       0CC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
Manifest number:          0CB1
Signing time:             Fri 12 Jun 2026 18:31:27 +0000
Manifest this update:     Fri 12 Jun 2026 18:31:26 +0000
Manifest next update:     Fri 19 Jun 2026 18:31:26 +0000
Files and hashes:         1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: 0rUO8WZQBtjKHeZUC12Opa+vx0h1vHz4A3kkw+cI9tw=)
                          2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: jtNA4DSxailzGixhCLBv/XtkHLhwf6qcSCB3BjEuN/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl
                          rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266
        Validity
            Not Before: Jun 12 18:31:26 2026 GMT
            Not After : Jun 19 18:31:26 2026 GMT
        Subject: CN=6a2c507e-a76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:78:a4:0d:f9:cb:4a:f2:37:79:86:e8:d7:
                    0a:7b:b8:c8:15:98:24:df:1a:bd:d6:e6:cc:38:c6:
                    9c:2b:b1:1e:85:d5:4f:d8:11:b2:df:c6:57:91:87:
                    57:aa:36:a5:56:da:bf:f8:67:19:48:84:cd:75:4b:
                    8c:e0:94:e2:3a:ad:a7:94:c3:80:c0:9f:d1:7f:1c:
                    44:02:38:89:dc:ec:40:dd:47:cc:98:8c:c2:b4:a5:
                    82:a5:7f:ef:28:4d:2f:1b:7d:a8:93:af:a6:c7:3a:
                    a5:2c:3e:1c:20:fb:4f:80:3c:51:47:12:18:7b:0e:
                    2e:ce:c5:c0:47:59:47:57:f9:14:94:1c:db:36:06:
                    76:d0:58:6a:e0:4a:ab:95:29:d5:a6:5b:e3:7f:ec:
                    54:09:2a:7d:0c:7e:d7:8b:38:97:8f:02:f5:89:20:
                    51:7d:43:7d:5b:4b:96:6b:2a:4f:3a:b4:0b:14:70:
                    f9:21:00:24:e2:0d:99:5d:46:7f:46:1d:6d:f8:c6:
                    f8:b4:ee:5f:eb:11:f7:a6:d1:14:f9:e0:da:aa:26:
                    aa:79:1f:7b:bb:37:df:8d:e6:bc:ca:9b:8d:72:b9:
                    fb:ed:6a:9f:b6:55:89:c3:58:0e:56:e8:0d:3c:d6:
                    02:a4:c1:cb:ce:c2:d7:4f:41:92:d3:f0:0e:44:dc:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BB:B8:1C:6C:08:45:25:97:08:5C:74:53:15:54:4D:E3:5D:D3:88
            X509v3 Authority Key Identifier:
                keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:14:49:3d:1d:09:c1:cf:32:a2:64:10:ac:f3:ba:38:6e:
         45:a6:b5:9a:22:8c:19:a5:fa:aa:1b:cd:66:96:b8:c7:ff:97:
         48:26:94:35:d6:70:68:3d:ca:e5:a9:db:86:c5:dc:32:a0:bc:
         6c:9c:5c:cb:26:dd:20:85:4f:e0:0d:f7:f7:04:f7:c9:44:cd:
         cc:73:0c:ae:1f:51:ff:e5:ba:81:97:84:c3:94:85:6a:cf:9d:
         dd:ee:69:a8:40:03:d9:cb:24:9f:e0:e0:b4:61:c4:3e:88:b9:
         23:b9:82:55:f6:ed:f5:18:c4:d8:d4:74:6f:c2:19:18:0f:87:
         0b:c0:96:10:80:99:0e:01:62:dc:37:c9:6b:a2:41:70:c6:fb:
         28:09:11:92:e1:f6:67:8f:28:36:f4:9e:b4:b0:4d:b6:aa:9c:
         f7:ac:aa:bf:5b:08:ec:e5:cb:36:67:a6:b3:2e:84:18:b4:c0:
         e7:db:36:a2:84:a0:ed:6c:ab:10:c4:15:6d:6b:fa:eb:67:4e:
         a2:ac:4a:0f:a6:62:0f:e0:65:56:51:3d:58:81:1f:7a:e7:ab:
         09:8b:30:e0:e0:5c:59:6b:6e:eb:0c:a4:3b:22:65:a0:2f:7a:
         14:7f:23:65:94:25:c8:7e:dc:63:68:44:8c:ff:1f:42:81:39:
         7b:2e:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:01:24 2026 by rpki-client