Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File:                     nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier:          VfEQoP/FvXXCsNZqwQRZ8USeqVQNyESyNhwygFndMNE=
Subject key identifier:   42:CF:D7:0C:C4:A1:69:9C:04:29:AF:03:A7:0C:75:F0:4E:B8:CD:CB
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer:       /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number:          01F3
Signing time:             Thu 11 Jun 2026 05:29:28 +0000
Manifest this update:     Thu 11 Jun 2026 05:29:28 +0000
Manifest next update:     Thu 18 Jun 2026 05:29:28 +0000
Files and hashes:         1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: 8QonkJBl2/Of+ASX1eabCLbU3gRor+NHKdJ8DHkeCNA=)
                          2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=)
                          3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 05:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
        Validity
            Not Before: Jun 11 05:29:28 2026 GMT
            Not After : Jun 18 05:29:28 2026 GMT
        Subject: CN=6a2a47b8-b7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5e:43:a7:41:6c:42:ec:27:2d:c5:7c:b1:70:
                    0f:36:78:04:a5:d9:da:11:7c:4c:87:c5:92:2e:1e:
                    cd:eb:7e:41:58:7d:60:03:54:41:9b:b7:f0:44:33:
                    e2:e1:17:87:a5:47:63:1f:93:8b:bf:81:88:a5:4a:
                    b4:d2:45:85:04:5f:46:79:5d:25:da:20:9e:aa:5b:
                    63:76:06:a1:a3:8c:f4:a9:de:35:97:0c:01:90:2f:
                    f0:ea:eb:ab:b5:81:1a:ae:4f:85:00:b2:85:e5:a2:
                    67:43:bf:30:9d:2b:1f:54:de:a5:40:8f:a9:8c:c3:
                    36:cd:6d:5f:4b:a5:60:ee:ee:c9:6d:34:4c:9c:65:
                    4b:35:bd:0e:68:d6:29:4a:03:66:3b:e9:49:36:aa:
                    cc:f5:bc:ab:83:3a:85:f2:18:c8:7f:d2:55:a3:63:
                    90:ba:bb:9f:09:30:61:0d:e9:8a:af:3b:b3:c0:18:
                    67:d2:9c:d4:c8:f0:48:71:4d:5d:6d:1d:fd:ab:20:
                    26:ac:b1:d5:a3:5d:ab:25:23:39:36:ec:da:63:2f:
                    4f:d7:d3:98:cd:5d:01:9f:f1:35:d8:b6:bf:4c:18:
                    d9:13:5a:a9:51:95:c0:d4:1c:d3:8e:40:b6:ed:6c:
                    de:9b:9b:10:ef:ec:cf:06:00:55:2a:89:e7:c0:50:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CF:D7:0C:C4:A1:69:9C:04:29:AF:03:A7:0C:75:F0:4E:B8:CD:CB
            X509v3 Authority Key Identifier:
                keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:80:60:ea:9f:39:fb:4c:bb:51:78:e5:84:08:ae:41:02:34:
         f7:7e:8b:0a:be:64:1c:c3:85:8c:1e:8d:3c:5b:97:1e:6a:04:
         7f:a8:6f:a0:1d:56:14:26:ea:b6:01:f6:a1:aa:38:40:a7:21:
         57:18:fa:5d:6f:97:95:77:d8:bf:80:88:e2:b6:25:92:7a:40:
         78:d9:61:8e:ca:52:5a:0f:b1:f1:37:ca:27:fe:77:fe:16:65:
         f3:43:84:ca:b7:71:c2:1d:a1:f6:9a:91:68:3e:bf:9f:a9:aa:
         b2:7c:14:35:0e:9f:d6:89:d1:01:34:7d:a8:3a:ab:85:3e:e6:
         07:e4:16:86:f8:59:f3:43:f8:7b:f5:a0:66:74:97:8f:9b:65:
         55:d4:32:80:5e:b9:5a:1e:ac:c6:87:e0:72:25:5d:34:1c:a0:
         ee:64:61:81:09:1f:b2:dc:93:f7:7a:0b:dd:bc:55:06:46:46:
         55:6e:96:4e:88:4c:e8:ee:91:04:03:c8:af:fb:85:fa:6a:c8:
         67:b5:8a:70:73:6f:49:7e:81:41:82:06:fa:9f:43:f5:e2:af:
         2a:e3:48:1b:f4:ef:3f:c1:bd:6e:e5:81:0d:eb:43:17:21:7e:
         08:de:3d:64:2e:41:d0:45:55:b0:59:0c:47:6b:8b:25:c3:8a:
         09:6b:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:53:26 2026 by rpki-client