Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File:                     3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier:          wba/N3ppCVqpZ5BBzrzxva5suQ4LayvqEQzHhZ6Hf2Q=
Subject key identifier:   0A:AB:D5:DF:17:60:FE:63:01:E5:96:F4:8E:25:A4:D3:3F:D6:75:3E
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer:       /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial:       0872
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number:          2DF4
Signing time:             Mon 22 Jun 2026 16:42:29 +0000
Manifest this update:     Mon 22 Jun 2026 16:42:28 +0000
Manifest next update:     Mon 29 Jun 2026 16:42:28 +0000
Files and hashes:         1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: g2urDfJLFstxOLTSBML/ALdjuhKhl9j83LXsjsp0OBY=)
                          2: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
                          3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
        Validity
            Not Before: Jun 22 16:42:28 2026 GMT
            Not After : Jun 29 16:42:28 2026 GMT
        Subject: CN=6a3965f5-a28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:76:76:6e:99:1a:42:80:1f:5b:a4:12:ff:
                    64:ff:79:f8:c4:d3:b2:b9:b6:49:13:1d:e6:3d:3c:
                    55:c9:59:3f:4b:70:6c:84:c4:d5:fa:e5:12:06:9c:
                    f4:52:7d:5e:86:8f:c5:f5:b4:fd:fe:45:68:ec:e9:
                    53:31:69:fb:7d:8c:d8:08:62:61:42:f8:72:e4:46:
                    50:1b:fc:68:03:cb:f5:28:1f:32:90:f5:f3:3f:21:
                    8e:82:bc:0f:85:49:54:29:a5:d5:0d:48:3a:2e:b3:
                    05:91:66:d6:ed:4d:6e:ef:f1:6f:b3:4f:45:d6:56:
                    ef:63:92:5d:c2:c8:52:2f:02:a7:ca:06:83:2a:9b:
                    d0:fb:c0:2c:85:ba:d6:6b:bc:a7:5c:c9:ed:3a:d2:
                    18:37:a4:ae:4a:da:e1:c0:7f:2a:5f:d4:7f:32:a3:
                    bc:6d:f3:f3:05:bc:47:2a:7d:fa:f6:04:50:4f:9e:
                    b6:24:5e:bc:fd:6f:b1:22:ac:a0:b6:57:7d:43:37:
                    2f:dc:22:49:4a:8e:0e:ce:6a:07:95:68:0e:99:dd:
                    4d:73:ba:10:91:03:bd:90:c1:a5:d5:2f:a5:be:f2:
                    d3:1c:26:99:03:1b:b8:6f:34:fc:ac:60:a6:1d:04:
                    70:40:f9:fb:73:ef:58:12:c3:97:da:2f:bb:b0:12:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:D5:DF:17:60:FE:63:01:E5:96:F4:8E:25:A4:D3:3F:D6:75:3E
            X509v3 Authority Key Identifier:
                keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a6:99:3f:30:f5:51:d0:99:12:0b:03:91:98:66:17:e7:b6:
         09:df:eb:4a:eb:aa:22:88:8a:82:96:e8:18:91:a5:fa:cb:13:
         7c:f8:98:57:92:d3:fd:d7:b8:ef:19:af:b5:d4:d8:26:22:e2:
         19:3d:3e:ce:c4:d1:62:fc:64:44:b1:07:0a:27:61:43:60:36:
         de:47:37:b8:72:64:5a:e6:97:00:a0:68:44:6e:0e:ee:2c:4b:
         75:8b:e6:1d:5b:cf:d4:38:b6:0b:e8:6b:37:1e:88:d5:9e:ec:
         91:59:73:63:4a:49:26:cc:3f:55:3e:32:d6:1e:20:0a:24:61:
         33:3e:5f:67:95:40:66:e1:00:14:b6:7f:08:bb:4c:8b:60:77:
         51:69:09:8a:d5:17:fb:70:d6:c4:c5:ac:b6:27:10:f2:e4:f9:
         cd:ce:63:44:46:b2:f9:e8:aa:1b:d4:64:9f:fd:63:db:44:84:
         95:16:59:5e:0f:45:ac:46:35:bd:ce:2e:41:ec:ec:5a:29:2c:
         87:96:f1:58:b2:81:3f:cb:1f:64:9e:3f:f7:18:fd:b8:ce:4c:
         b6:f3:21:46:9a:e9:c5:64:9a:d7:9e:d4:9f:bb:e9:14:7f:18:
         35:99:88:d9:1a:e5:24:93:f3:7a:9a:cb:0a:be:06:26:8b:90:
         a3:fe:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:35:23 2026 by rpki-client