Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File:                     _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier:          AGTP8T85CSGXdZh58RV2dxVlY4MPXjYTb6wgnQWVnrg=
Subject key identifier:   2D:45:56:27:15:17:91:5D:52:EE:B5:B7:87:FE:D2:8C:5A:00:AF:7B
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer:       /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number:          0151
Signing time:             Mon 01 Jun 2026 05:53:32 +0000
Manifest this update:     Mon 01 Jun 2026 05:53:32 +0000
Manifest next update:     Mon 08 Jun 2026 05:53:32 +0000
Files and hashes:         1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: gVhmF6nSbrAsvqaxq9YZrkKKQsfDVX0rx/vuAAzzSIY=)
                          2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: 99UGo5KWvnN+gHhR9yWsZo5dAMlhKMO/SbxWG6qrgCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
        Validity
            Not Before: Jun  1 05:53:32 2026 GMT
            Not After : Jun  8 05:53:32 2026 GMT
        Subject: CN=6a1d1e5c-b9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:73:f4:68:b8:61:27:78:36:64:94:99:5a:
                    26:90:20:d2:74:fc:d7:98:bd:a2:fb:b5:1c:e0:32:
                    db:09:88:9a:7d:c7:eb:0e:62:3a:96:61:96:79:5c:
                    79:dd:ee:94:87:68:ab:d4:f5:c8:fa:d0:dd:2b:9a:
                    76:5b:93:e2:34:d1:73:f1:54:76:33:34:2c:43:97:
                    97:c1:cb:b5:9f:27:bb:86:b2:01:32:03:dc:67:b6:
                    2d:12:3e:92:ae:53:de:78:77:4a:3a:50:c6:79:fa:
                    eb:dd:18:40:40:8f:66:c2:d5:b4:bc:96:30:58:5e:
                    c9:bd:c2:35:1a:94:92:14:0c:63:de:dd:ef:06:f0:
                    e8:26:6d:cc:63:74:12:44:d2:c2:96:bb:b3:dd:be:
                    10:0c:f3:a1:3d:4d:51:8d:0b:be:4c:a7:79:b1:c7:
                    6b:37:95:2b:11:77:0c:81:8b:c8:31:bf:e3:ce:46:
                    32:6c:0f:71:87:26:32:6c:61:c4:a5:20:ec:90:96:
                    1d:99:d3:e6:0f:d5:a6:df:a5:7e:52:c1:66:a0:a9:
                    29:55:16:75:c8:08:3d:20:13:e8:1b:e9:d8:c2:7e:
                    00:59:6f:20:7d:5c:9d:ef:ed:aa:02:6a:a0:2d:8a:
                    db:2e:13:94:be:c9:b5:3e:db:44:20:b3:1e:d4:70:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:45:56:27:15:17:91:5D:52:EE:B5:B7:87:FE:D2:8C:5A:00:AF:7B
            X509v3 Authority Key Identifier:
                keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:15:b9:94:3b:29:fc:f9:a1:33:0d:9f:9d:da:fe:04:3b:1c:
         d3:e7:a4:4a:8e:77:45:75:15:62:62:48:d9:4a:9e:9d:52:06:
         4d:80:c4:a2:04:cf:83:07:0e:7c:c2:44:f1:ab:56:88:d4:58:
         46:81:10:f1:b5:f6:42:90:15:2f:92:a7:ab:c0:7b:80:26:e3:
         b7:f8:1a:52:6a:b8:37:6e:74:73:e1:9f:a7:f6:21:b1:4f:54:
         f4:b6:38:11:ae:16:a5:e1:76:95:3c:f8:f6:a1:cf:f7:71:01:
         ac:fd:20:62:18:f3:3b:16:59:ab:b4:7b:33:c8:d8:6c:67:18:
         ce:de:6f:5a:76:a4:3b:62:3f:e2:81:18:51:0f:c2:31:2e:7a:
         a7:91:26:f3:08:3e:35:94:b3:fe:9e:be:8a:2f:dc:dd:33:f9:
         e8:bc:e2:f1:5b:7d:44:b6:11:79:e0:97:f2:fc:c2:7d:e3:9c:
         73:0f:a4:9b:60:89:b7:a1:62:d0:67:99:82:2a:e5:75:cf:33:
         4b:ac:a9:cf:b2:ba:12:1c:7c:93:c0:ec:75:65:28:dd:d9:7f:
         1b:1a:2f:45:9c:a6:a6:a9:ef:84:fe:0e:0b:f3:e2:04:41:3b:
         c3:2b:0d:3e:88:f6:7d:0b:0b:ca:f4:8d:d4:fa:46:3a:3a:87:
         8d:61:9a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:42 2026 by rpki-client