Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
File:                     3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json)
Hash identifier:          NuW3fM714VI+vws16aJiGY9BUfVq/OWdbLg9CUrdMAw=
Subject key identifier:   D2:3D:E7:D9:73:6A:20:56:78:62:97:9B:B3:DE:82:14:88:D6:51:50
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Certificate issuer:       /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial:       1695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
Manifest number:          168A
Signing time:             Mon 22 Jun 2026 16:40:04 +0000
Manifest this update:     Mon 22 Jun 2026 16:40:04 +0000
Manifest next update:     Mon 29 Jun 2026 16:40:04 +0000
Files and hashes:         1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: XLEtNAKFHfXZ7yt/+0f/v1LRNTB7T0F1lucbz3Y1/FI=)
                          2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: VHKrRamBzI5Z2a2wNY14oKOBu6LJFzzc8akNzDVPDyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5781 (0x1695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
        Validity
            Not Before: Jun 22 16:40:04 2026 GMT
            Not After : Jun 29 16:40:04 2026 GMT
        Subject: CN=6a396564-c292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:af:26:2d:55:6b:c1:9e:8d:a2:1f:31:69:
                    53:2d:55:09:d6:99:7e:25:b8:4b:6d:a4:bd:7e:89:
                    9f:b6:6e:41:1b:8f:0b:ec:d5:f1:ad:11:b1:f0:4f:
                    48:a4:34:99:55:e1:25:ca:40:d6:82:19:20:00:a3:
                    38:f2:ed:be:05:03:17:8a:a2:24:7b:25:88:4b:57:
                    a6:a8:ea:58:b7:44:12:a8:97:b6:8e:58:ae:f3:e6:
                    e1:e2:c2:c8:2f:2d:87:8f:77:d3:01:3d:53:0c:02:
                    fb:48:66:b8:52:f8:c8:07:e1:27:45:d5:8e:52:c7:
                    f8:42:a3:9d:82:17:1a:49:f5:d3:b6:94:cf:9d:f4:
                    0e:57:96:4f:94:17:84:1f:f8:5d:cb:0e:65:3d:09:
                    a1:9b:fc:cd:7e:8f:73:76:c1:4c:cb:dd:77:bf:eb:
                    39:dc:94:0b:8f:e0:f8:2b:34:dc:9c:32:2e:de:d2:
                    22:da:d4:96:c1:c5:4e:ab:a9:dd:d7:b7:58:59:2d:
                    e5:32:7e:64:7d:c0:91:57:b4:b4:0b:65:ba:21:e4:
                    ee:69:1e:84:7b:9b:dd:fb:18:fd:ec:e3:45:a5:d0:
                    b2:0d:0b:d7:59:b8:88:eb:15:11:ce:72:1d:a6:4b:
                    6e:be:6f:5f:42:eb:ae:9b:94:d3:a4:0c:f4:e7:29:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3D:E7:D9:73:6A:20:56:78:62:97:9B:B3:DE:82:14:88:D6:51:50
            X509v3 Authority Key Identifier:
                keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3f:c8:36:e9:b8:71:0c:c1:c0:fc:0e:6b:8c:81:c2:38:71:
         ac:6f:02:e3:4a:f6:91:3e:58:67:73:64:e9:ef:18:24:ea:32:
         cb:5e:d8:ca:1d:21:9f:ce:53:5d:7d:0a:ab:3a:07:02:f6:fd:
         1b:c3:ef:a2:c4:64:a8:ba:3b:49:34:02:2f:7d:ad:1f:fd:54:
         e1:11:d7:6d:d7:ea:a0:2b:77:ef:28:e4:22:7e:8e:44:95:45:
         8e:14:c7:22:b8:29:62:cb:1c:b9:20:96:09:84:3f:93:04:1e:
         26:8f:27:51:84:cd:c2:38:35:88:e7:cf:37:f2:9d:31:0c:99:
         97:40:42:69:0a:af:77:b1:da:9e:4b:41:8d:09:76:44:86:4b:
         ba:66:6b:8e:e6:e8:41:2e:29:e9:bf:0f:58:7d:fa:b4:84:14:
         ee:1e:f9:d3:f6:b7:65:8a:34:3f:a2:26:89:ad:fa:be:33:75:
         4c:a7:9d:cc:75:a3:a5:e7:66:6b:54:27:e2:f3:8d:7f:05:30:
         ba:fc:53:bf:08:92:9a:e9:1b:3e:5e:86:e3:12:b8:fd:0b:b3:
         b5:c8:21:2b:53:c6:10:9f:6d:40:45:ea:3f:1b:b7:e8:ea:de:
         b8:76:4c:23:fa:3f:b7:f4:a0:d5:38:d3:fb:74:89:5f:06:12:
         d3:2c:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:00 2026 by rpki-client