Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
File:                     F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json)
Hash identifier:          rB1/1ETxaHhN//ML4pWkbE7ZgsCXFW1S7t7xZKNfjCc=
Subject key identifier:   31:A7:31:88:1D:55:3B:44:74:C2:7F:05:30:2A:D1:D7:01:C4:83:32
Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Certificate issuer:       /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Certificate serial:       3572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
Manifest number:          3559
Signing time:             Wed 10 Jun 2026 15:15:28 +0000
Manifest this update:     Wed 10 Jun 2026 15:15:28 +0000
Manifest next update:     Wed 17 Jun 2026 15:15:28 +0000
Files and hashes:         1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: X4O2/DFzIH10okiXibrzNxpH95yoXUNT1zjLPWdKYKE=)
                          2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: qbotwLlAh51+g4Xv22i4fgZHlT9iGbA8driasdN6/0A=)
                          3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 15:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13682 (0x3572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
        Validity
            Not Before: Jun 10 15:15:28 2026 GMT
            Not After : Jun 17 15:15:28 2026 GMT
        Subject: CN=6a297f90-c7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:55:44:ce:ee:a0:7d:6a:3a:b9:b7:34:22:
                    3f:cf:ff:c4:06:c9:bf:d2:62:c9:47:17:22:09:ce:
                    31:32:92:d6:cc:1d:bd:18:88:e3:e2:73:7e:c2:e3:
                    61:e9:a0:fd:2f:17:5e:2c:d5:2b:20:c8:aa:3c:47:
                    7c:70:39:0e:4e:4a:3d:40:fd:42:72:77:64:c7:01:
                    df:19:87:41:ff:2b:cc:77:2c:bf:f8:dc:6f:79:ff:
                    9e:6e:2d:82:b1:cd:36:47:7e:a9:e4:10:4b:e5:4a:
                    aa:ad:8b:03:c2:72:37:e8:da:40:8f:a7:cc:cf:52:
                    db:3b:67:9e:a2:28:e3:7a:29:cc:48:46:20:58:aa:
                    cb:f7:e6:c1:04:36:68:95:93:f3:9e:d5:0d:f6:b7:
                    4d:0d:b5:3d:73:be:f6:23:09:19:bd:7a:36:65:e8:
                    46:a2:41:db:81:c3:da:5b:21:9b:cb:07:bb:8e:71:
                    80:da:6d:ad:5d:52:b7:65:b3:62:d2:34:e5:63:5b:
                    a1:4b:ef:f3:ee:c1:b0:af:b3:1f:8d:7f:8f:f1:0a:
                    23:91:93:dc:35:bf:e2:d7:3f:0c:66:e3:86:e9:05:
                    17:79:89:02:ac:3b:bd:f3:66:2f:1a:cb:e4:b8:45:
                    5e:40:29:f8:c1:18:30:44:1f:ce:35:36:92:26:1f:
                    b8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A7:31:88:1D:55:3B:44:74:C2:7F:05:30:2A:D1:D7:01:C4:83:32
            X509v3 Authority Key Identifier:
                keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:2e:0d:69:f2:07:9c:91:38:b3:58:26:8a:25:c2:4f:ce:
         2a:4d:d7:cc:22:60:23:96:89:75:da:e2:87:2d:58:d9:b1:75:
         88:f2:c5:b8:e7:cf:f2:98:99:77:df:67:89:de:81:73:73:85:
         38:9e:e8:e3:a3:ce:f9:4c:8e:ea:b2:62:e9:3f:c5:0c:ad:ae:
         6f:8d:68:ca:f4:bb:21:8d:47:0c:45:2d:1d:e4:cf:2c:2e:0a:
         c8:f0:4d:48:d8:cf:51:f7:f8:49:ef:c6:db:5e:b1:22:55:e4:
         97:ac:a5:27:a9:1a:19:c1:81:4e:7f:53:1f:48:dd:34:5c:13:
         1b:27:d7:0c:38:a0:9a:51:c0:99:e1:e8:7a:69:1e:79:7d:53:
         15:87:bb:00:f4:25:4a:f7:18:b0:6e:77:01:da:f6:3b:0c:c7:
         02:41:60:e2:40:d9:5d:42:68:f5:9c:e1:3f:ee:57:c7:3a:4d:
         54:a7:04:43:29:55:42:db:c8:d6:85:7a:7b:80:ae:fc:59:20:
         f2:bb:a8:46:93:cd:38:5a:f3:72:a7:c5:44:ab:a0:15:92:09:
         19:61:31:dd:24:1d:82:36:2b:e7:ec:64:4e:c9:94:9b:2b:4f:
         ad:1d:9c:3d:6a:8b:e4:96:03:e7:ec:38:86:d2:a2:93:a3:c6:
         bf:03:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:53:25 2026 by rpki-client