Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
File:                     3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json)
Hash identifier:          1fvrW53DNaz0YpeD6ULdPxCk7cTUvC/7a5lsVMZq9k4=
Subject key identifier:   CC:07:C2:F8:65:B8:BE:33:BF:08:49:44:10:67:BD:4D:A2:EA:FD:03
Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
Certificate issuer:       /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Certificate serial:       02C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
Manifest number:          02B7
Signing time:             Mon 01 Jun 2026 02:10:12 +0000
Manifest this update:     Mon 01 Jun 2026 02:10:12 +0000
Manifest next update:     Mon 08 Jun 2026 02:10:12 +0000
Files and hashes:         1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: GAvlieYe9M1N1ugT1JZb67oVcCIb7OMVKO2JuQE0jZY=)
                          2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=)
                          3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
                          rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 02:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
        Validity
            Not Before: Jun  1 02:10:12 2026 GMT
            Not After : Jun  8 02:10:12 2026 GMT
        Subject: CN=6a1cea04-c93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ef:9f:5b:55:17:de:8c:15:c3:d1:80:52:8c:
                    bb:18:d7:64:cc:05:8e:d7:fc:73:e2:4b:75:54:31:
                    7a:f1:3d:a7:d5:b7:8d:01:95:de:22:7f:a8:ab:a1:
                    64:89:39:25:85:ae:de:2d:86:dc:92:d3:7d:c0:aa:
                    01:3e:25:5c:a9:8f:f7:7c:4f:dd:e8:fd:f1:79:b9:
                    27:25:30:2e:a3:ab:e0:c0:55:3b:44:6e:88:a7:2a:
                    b1:ce:95:9b:4f:70:c5:1c:fc:23:23:c2:32:37:1d:
                    69:ca:2d:9f:ff:31:a7:c7:53:86:59:83:d3:50:66:
                    8f:36:09:91:ce:28:b2:78:8a:31:ba:8d:0f:44:6e:
                    19:2c:00:96:d4:ae:3c:05:b5:30:75:80:4c:39:f9:
                    0e:b6:ed:2a:9f:57:ba:07:4a:65:fe:bc:82:27:c2:
                    c8:fa:8d:bf:df:85:cf:86:d4:9c:41:86:b8:76:22:
                    d9:c9:2a:41:d7:ea:a7:a7:be:60:bd:a3:26:08:d4:
                    89:90:bc:39:fc:cc:d7:32:49:43:86:b4:98:0a:d7:
                    03:48:9f:48:e3:76:84:67:39:9d:d5:ba:8c:b0:f7:
                    bc:d5:fc:fc:d6:58:e6:b1:8b:a5:1b:89:7c:9a:15:
                    c6:30:b1:f2:99:3d:40:19:fc:e8:66:9b:58:fb:de:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:07:C2:F8:65:B8:BE:33:BF:08:49:44:10:67:BD:4D:A2:EA:FD:03
            X509v3 Authority Key Identifier:
                keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d8:df:79:5d:1c:39:f3:92:0f:56:33:43:21:01:fb:d3:42:
         8c:62:a6:0f:8c:e3:35:fb:b1:cf:5e:08:a0:51:b4:ee:22:66:
         b1:fd:b4:d2:ba:0b:40:84:ed:c4:11:2a:d5:f1:9a:1f:71:4f:
         ce:35:0e:6e:c4:21:91:01:58:c1:dc:7d:44:a3:49:93:f7:27:
         36:f4:8b:e1:ba:1a:8c:e8:46:28:6c:46:c3:26:50:15:4b:2a:
         58:bf:5c:e1:6a:86:5b:27:6c:55:36:e4:be:2b:0a:17:26:d4:
         c1:80:a1:d6:6d:22:be:98:eb:97:fb:26:a1:9f:ca:c2:4d:5d:
         2e:50:b7:cc:97:51:91:c3:f7:6a:c3:11:eb:5b:86:44:66:5f:
         88:b5:86:db:67:11:fa:9c:34:9c:56:50:c5:c2:13:a9:72:9d:
         c7:44:26:05:91:7d:ba:b6:51:24:a9:e6:ba:c1:0f:ff:fa:98:
         bc:fc:7c:fa:4f:3f:fb:fe:a2:da:33:ea:de:2f:91:d5:b8:a5:
         c4:91:0c:a0:1f:0a:19:72:02:6a:75:d0:aa:15:f4:64:26:0e:
         8b:0f:5e:a3:fc:26:cf:4d:55:69:41:34:80:f0:b6:76:2d:fa:
         49:cd:91:3a:cd:7c:43:68:71:ed:19:f3:0a:a6:d7:5d:9a:1e:
         01:01:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:44:00 2026 by rpki-client