Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
File:                     1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json)
Hash identifier:          hPDkX1bPHkfYzpZJAWE8bLH2rH9Shto/qsMx4PI4TZc=
Subject key identifier:   96:6D:AC:F7:08:0D:A8:36:F2:51:86:37:A1:10:09:0F:FD:55:4F:A9
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Certificate issuer:       /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial:       1CC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
Manifest number:          1C9E
Signing time:             Mon 22 Jun 2026 16:09:30 +0000
Manifest this update:     Mon 22 Jun 2026 16:09:30 +0000
Manifest next update:     Mon 29 Jun 2026 16:09:30 +0000
Files and hashes:         1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: X6ciQAuMy62ajwL+eXSHA73bgWgtc4V0qorW6XlCcfs=)
                          2: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: Kodnm0+rS9iUqWFMV9owslM69gEEqhhUDC5QqGUYClg=)
                          3: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: rpWO/lHhm5TFSW6ilLk7bGl8UUGMVt6i+NJTBnIB37Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
                          rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7363 (0x1cc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
        Validity
            Not Before: Jun 22 16:09:30 2026 GMT
            Not After : Jun 29 16:09:30 2026 GMT
        Subject: CN=6a395e3a-1f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:44:d4:0a:26:8d:00:8b:6d:af:15:93:70:
                    f2:05:81:99:7f:b0:cc:16:cf:1a:64:6f:d8:11:f5:
                    09:19:76:de:44:16:a2:d5:42:b8:b6:7b:1f:a7:d1:
                    10:18:b7:8c:c3:91:6c:55:1b:23:0a:69:54:7e:ee:
                    d1:00:7e:a6:f4:9d:f5:e2:22:30:dc:b2:84:ff:61:
                    89:76:5d:3c:80:4a:1a:8c:6e:6d:aa:cc:ba:b5:46:
                    b8:e9:d8:df:9a:57:75:d9:cc:76:51:f1:cc:8c:aa:
                    93:91:41:b3:41:5b:49:3c:54:5f:ee:e6:56:34:33:
                    0d:d7:38:7d:de:68:87:72:28:1d:6b:58:15:aa:b4:
                    88:b0:47:ee:21:80:49:e9:f3:ff:73:ea:39:e4:a2:
                    97:31:41:c3:47:08:4f:dc:62:e5:d7:e1:05:26:b5:
                    89:19:b8:f2:5e:f6:78:0e:7f:ef:5b:bc:35:7f:ee:
                    89:4d:2a:75:2e:9e:5b:75:26:ee:d9:a1:e2:f8:69:
                    38:3a:b6:aa:0a:20:b2:3a:8a:25:d3:f8:e0:7d:02:
                    9a:24:83:54:a1:29:26:97:24:56:29:80:ed:35:73:
                    18:e4:93:fe:ff:c2:a9:1a:d3:05:ef:ca:9e:3c:b7:
                    78:13:b4:c2:21:52:f3:07:25:47:53:e6:6d:58:37:
                    07:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6D:AC:F7:08:0D:A8:36:F2:51:86:37:A1:10:09:0F:FD:55:4F:A9
            X509v3 Authority Key Identifier:
                keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:51:f0:45:6d:a8:43:48:0a:02:07:25:b1:2c:e7:8d:5e:32:
         26:b4:40:c2:04:90:0c:92:43:b8:dd:c5:7f:32:9a:4f:38:cb:
         04:e9:d0:8c:a8:3d:53:ae:5e:c1:77:1d:32:4f:e5:16:0e:53:
         30:0e:b8:eb:bd:6a:ee:82:14:77:99:ed:27:23:4e:7d:25:23:
         fe:9f:22:ab:7c:49:a9:4c:e1:4c:da:6c:f9:29:23:b9:7f:44:
         e9:ed:aa:dd:06:81:1e:73:8f:95:c0:ed:67:4b:f8:d4:d4:db:
         17:76:fc:87:87:60:36:12:1c:82:cd:e6:4a:ed:a5:2c:7f:bb:
         d6:e2:1d:3a:1b:c1:f8:81:61:84:00:9d:49:fe:98:e1:92:7e:
         7f:33:e6:f8:fc:1c:c3:e1:67:3c:c3:49:01:ec:ab:31:ca:7c:
         80:80:ba:a8:17:c0:3d:5b:85:d9:86:bf:17:64:4f:8a:06:f4:
         d0:28:05:e0:22:55:b1:53:d5:94:74:91:e6:7c:88:4f:a3:3c:
         f8:2b:c6:24:15:34:64:67:d2:f1:32:58:c4:cc:c8:be:bd:82:
         1e:ee:aa:8d:93:0c:2c:cc:4f:52:b9:53:96:7d:5b:2f:d9:c4:
         f4:1c:39:e7:be:8a:b2:6b:e5:ba:31:f6:f9:6a:d9:85:88:df:
         24:01:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:09 2026 by rpki-client