Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File:                     MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier:          EmB1uwtMpAKAjJIDLEYJc18Vx8O48UO7vvUGCqJf8ow=
Subject key identifier:   3B:53:19:62:66:23:54:E5:A5:74:5A:F4:E6:11:F5:E6:5F:4D:74:FD
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer:       /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number:          B3
Signing time:             Thu 11 Jun 2026 09:25:15 +0000
Manifest this update:     Thu 11 Jun 2026 09:25:15 +0000
Manifest next update:     Thu 18 Jun 2026 09:25:15 +0000
Files and hashes:         1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: IrvRgp7vJvSdZNIIp+Nzxog21N7me0PASc6Megz+aeM=)
                          2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
                          rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
        Validity
            Not Before: Jun 11 09:25:15 2026 GMT
            Not After : Jun 18 09:25:15 2026 GMT
        Subject: CN=6a2a7efb-b160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:42:ff:fc:12:e2:d9:fe:3f:ea:a7:d1:da:ec:
                    61:e9:ef:91:cc:d6:34:22:20:40:24:8e:9c:ac:25:
                    55:c8:cf:61:ac:bb:3b:50:25:a2:35:af:2f:f4:ca:
                    13:94:d7:26:ea:59:c2:20:b3:c1:7a:96:43:de:95:
                    6f:9c:6d:4b:1a:33:73:e1:75:b8:69:f6:8b:2e:67:
                    ca:c5:e7:86:68:7c:5f:0a:52:52:d8:78:f8:8f:3a:
                    4b:1d:89:05:1f:3e:eb:cf:1c:6f:b6:72:8d:f4:ac:
                    3a:b4:48:9a:9d:6d:be:ef:9a:3d:14:e0:0e:0b:64:
                    c8:9a:87:70:88:f0:06:e7:95:f3:09:f3:aa:cd:b8:
                    eb:40:f2:a0:d9:2e:9e:d0:be:89:86:ae:59:db:a8:
                    62:fa:8f:8a:0e:24:ee:2b:0b:5a:39:7b:77:1c:fb:
                    9e:d8:18:ac:f2:56:2b:be:4d:f6:54:86:fe:0a:65:
                    fc:50:85:8a:9c:bd:82:38:3e:db:9d:2b:b2:e3:50:
                    29:e5:d3:59:ee:e9:91:b6:03:4f:04:59:3e:94:66:
                    d9:7e:51:87:99:df:c4:70:4e:2e:98:40:15:5a:63:
                    86:65:b5:1a:4f:6e:74:84:59:87:ef:29:96:1e:6c:
                    d8:7c:86:f1:dc:71:f0:89:c3:e7:05:a6:ac:b8:33:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:53:19:62:66:23:54:E5:A5:74:5A:F4:E6:11:F5:E6:5F:4D:74:FD
            X509v3 Authority Key Identifier:
                keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:c5:c1:db:f2:73:89:3b:5f:fc:dc:d5:6c:e7:38:1d:21:
         8e:a0:ce:e0:ee:62:df:ee:06:cd:47:05:bb:52:18:54:69:fd:
         9e:8b:fb:5b:c5:77:be:16:cd:2d:a9:79:e7:64:49:bc:0b:19:
         76:fd:a6:48:7b:df:49:30:ca:bf:e7:82:1a:05:45:c9:5b:8f:
         a1:26:c7:db:cb:6f:67:c7:1b:69:99:00:60:84:00:cd:6b:49:
         34:78:73:a2:32:8b:58:45:b0:cb:5f:51:cf:2f:5c:71:bc:2a:
         92:33:b5:c7:c3:9b:bf:5b:58:00:5a:d8:1c:69:27:92:f6:ea:
         d6:6b:bd:23:39:5b:72:9b:3e:1d:b0:49:a6:ec:c0:12:03:ac:
         cd:f9:66:ed:20:ed:9a:fe:82:69:cb:25:0b:ca:e1:98:d3:ea:
         5c:b0:63:7c:42:a0:cf:53:ed:73:91:a3:40:96:a8:fb:91:18:
         64:34:fd:71:3b:7b:ad:28:a4:9c:25:f0:9e:82:c8:45:de:02:
         1e:db:ff:16:9b:08:4a:2c:d5:16:31:b5:23:e9:c3:02:87:b8:
         ce:14:57:80:ca:dd:c3:97:f1:26:b0:cf:5c:6f:31:cc:83:55:
         54:9a:83:d4:b6:1c:da:b0:ca:2e:ee:08:7e:74:8c:48:1d:a7:
         53:3f:dd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:28:33 2026 by rpki-client