Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File:                     _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier:          qc8oiP4x9NWfb7XEDQncmlEVCzukWrTERxvP1Expvgw=
Subject key identifier:   39:4B:26:8D:72:9F:52:7A:92:24:2F:AD:E4:8F:BE:C4:BC:18:2D:51
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer:       /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial:       02C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number:          02B7
Signing time:             Mon 01 Jun 2026 02:10:03 +0000
Manifest this update:     Mon 01 Jun 2026 02:10:03 +0000
Manifest next update:     Mon 08 Jun 2026 02:10:03 +0000
Files and hashes:         1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: ajNLTFCWN9O2sTxRXKCNEsJOyKk6QGO6QtDQWnmQCOw=)
                          2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=)
                          3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
                          rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 02:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
        Validity
            Not Before: Jun  1 02:10:03 2026 GMT
            Not After : Jun  8 02:10:03 2026 GMT
        Subject: CN=6a1ce9fb-731c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:e1:c1:0c:26:4c:ec:49:b7:fd:72:94:5c:
                    67:45:b4:6a:40:c6:db:fd:4a:5f:45:2b:53:59:28:
                    c1:fe:52:d9:f9:35:e3:85:dc:66:c6:26:d0:a8:b9:
                    ee:51:e2:40:20:d9:03:d3:4f:5a:73:73:87:6e:39:
                    31:3c:c5:25:ad:63:04:66:ab:77:35:fd:bd:a4:38:
                    cc:d7:ad:83:e4:52:bf:0f:10:1f:4d:c6:57:db:31:
                    df:e5:b4:4c:79:8c:29:48:79:26:70:f7:8b:5a:85:
                    2b:c2:3c:63:cb:ba:88:84:90:48:d2:99:63:d3:2d:
                    88:93:c9:f3:92:03:f8:8b:86:f7:52:52:31:ac:87:
                    d6:4d:b7:56:fc:8f:af:2f:47:5d:71:e0:dd:10:c9:
                    62:fb:fa:df:3d:d6:32:bd:56:a5:2d:cd:3f:78:f6:
                    a1:97:43:bc:49:f7:a4:52:f2:39:9f:48:40:71:7b:
                    63:3b:72:c4:68:87:5f:f8:1e:5d:bb:82:b9:cb:30:
                    f5:86:3c:be:f9:34:af:af:81:32:e5:2e:a8:44:29:
                    e3:be:a1:9e:92:ff:ac:06:7b:95:9f:ee:ea:7a:36:
                    70:a0:e7:b8:2b:32:ec:d2:b3:83:5e:67:e2:c9:02:
                    aa:a0:f5:ca:55:e7:1c:d5:c8:2e:e3:51:9a:e6:b1:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4B:26:8D:72:9F:52:7A:92:24:2F:AD:E4:8F:BE:C4:BC:18:2D:51
            X509v3 Authority Key Identifier:
                keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:85:51:8a:50:c6:b5:d7:86:17:4d:59:d5:65:4a:8c:ab:b6:
         6c:7c:e7:78:bc:31:bd:67:08:ad:e4:45:a2:5d:6d:5f:24:ec:
         10:d1:76:70:d6:66:99:dc:16:d5:1a:0a:ae:be:b5:40:50:86:
         21:1a:d1:e4:71:0a:cf:e3:b9:d1:f0:ea:71:84:c2:37:82:5b:
         c2:30:54:50:51:50:7d:aa:3a:d1:31:e5:30:96:dd:bd:20:db:
         28:4b:71:10:29:5e:7a:b9:43:66:08:3a:65:a4:4d:5c:d9:69:
         8d:7f:fa:14:85:ef:e7:88:6f:0e:3e:a6:e9:a6:be:5e:0a:67:
         5d:9b:e7:c5:7e:6e:e4:6f:bf:ea:05:3a:48:64:0d:20:d4:d3:
         0c:18:98:42:36:8c:2f:cb:51:25:8f:b9:e5:23:7e:33:dd:00:
         0a:58:96:f1:bf:26:bc:fc:46:12:ea:96:b8:70:1d:41:2f:e1:
         dd:19:2d:59:0d:49:0e:f5:74:b5:06:ef:45:58:e4:95:b7:72:
         dc:68:de:bd:5d:71:d0:2f:8d:9b:d9:1b:4d:e7:32:4c:43:e4:
         9d:32:3a:90:58:61:d1:b7:cc:28:63:de:5a:79:0b:cc:e8:fd:
         37:f9:2e:96:73:87:56:d3:c6:86:d2:23:5d:12:b4:16:3f:8e:
         a1:18:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:20:36 2026 by rpki-client