Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File:                     z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier:          CgJrdq7M7e/AUOnSkxqIDcS5MeDApzaLCrNQby+A7so=
Subject key identifier:   AB:E4:FD:ED:DA:C3:14:FF:FE:22:9C:7B:98:E9:47:DA:6C:C9:C5:FC
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer:       /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number:          355B
Signing time:             Fri 12 Jun 2026 14:28:18 +0000
Manifest this update:     Fri 12 Jun 2026 14:28:17 +0000
Manifest next update:     Fri 19 Jun 2026 14:28:17 +0000
Files and hashes:         1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: ap6RTpkf4pePXOlIjWdsym7a5c6YdbAFTSPdTD9B8vs=)
                          2: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=)
                          3: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=)
                          4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=)
                          5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=)
                          6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=)
                          7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=)
                          8: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=)
                          9: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
        Validity
            Not Before: Jun 12 14:28:17 2026 GMT
            Not After : Jun 19 14:28:17 2026 GMT
        Subject: CN=6a2c1782-6ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:92:fc:66:e1:ac:7f:43:ab:b8:de:3f:61:
                    8c:3b:19:76:d3:3b:cc:07:a9:25:72:1b:7b:f2:97:
                    6e:2b:51:97:68:b4:da:c2:3e:ae:a2:1e:0e:1d:95:
                    ce:f1:fd:a7:69:4a:aa:05:37:46:fe:1a:67:a5:47:
                    2d:57:75:b9:6f:9e:ac:83:30:ae:91:16:2e:a2:d2:
                    3e:b1:08:2c:0d:87:91:b4:48:af:35:88:ee:16:a7:
                    e1:f5:ec:65:7e:12:90:b0:8b:5c:ae:9c:bd:37:fe:
                    b3:ba:ad:58:c2:df:5d:fd:ad:f1:53:af:99:fa:d7:
                    b5:7f:c3:b3:7f:b2:57:2e:8a:36:f9:fe:47:90:54:
                    3b:9b:03:58:87:95:67:75:9b:f5:77:fc:5a:23:f3:
                    c3:13:e5:7c:ab:f7:e6:b7:40:b9:1a:14:03:7c:d1:
                    fc:59:a3:f6:cb:7d:c6:d5:28:ba:39:df:cb:36:39:
                    7e:11:fc:1d:71:7f:7e:bf:04:ee:f3:79:70:7d:79:
                    ed:de:6a:2a:07:f7:8a:d3:9d:0f:b3:17:ad:34:75:
                    72:0d:95:09:75:58:ae:ab:62:a2:f2:af:ff:7c:d1:
                    22:b3:eb:f7:cc:db:00:3d:7c:e3:fe:cc:a8:31:9a:
                    f0:4d:54:ea:88:50:c3:78:aa:d6:dc:26:fb:27:56:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E4:FD:ED:DA:C3:14:FF:FE:22:9C:7B:98:E9:47:DA:6C:C9:C5:FC
            X509v3 Authority Key Identifier:
                keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:0f:3d:54:f7:ef:40:90:8d:73:64:f7:86:14:59:64:bc:
         10:8c:c3:27:bd:30:3c:35:f1:c8:ca:3a:7d:cd:a1:f1:fd:0a:
         5b:b5:3b:81:06:d3:c1:6c:8f:4a:4e:94:5c:6c:77:69:65:91:
         d3:a7:48:8c:d7:5f:66:16:bb:6e:15:12:3d:d8:6d:9f:2f:07:
         ef:0b:e5:39:ef:10:76:6b:6e:17:94:c2:33:f3:5c:a2:56:06:
         ac:17:b8:3e:09:23:62:08:29:1a:9d:35:3f:e4:8f:fb:05:ff:
         88:6a:03:e8:a4:83:f2:f6:b9:71:d7:59:2a:d3:6b:b5:6e:36:
         3d:7c:c6:37:4a:d0:e0:b8:c4:f7:57:12:f9:62:36:84:37:7c:
         84:73:52:48:f2:45:15:dc:c5:16:c9:69:09:e3:03:cd:ca:ee:
         f5:e6:7b:3f:24:ed:c1:bb:78:65:fd:00:75:8e:0b:53:4d:ef:
         50:b7:0d:09:97:0e:9f:e8:d6:1b:0e:2f:6d:2c:cf:37:ad:1e:
         9a:04:fb:9c:df:0e:19:8b:50:c4:d5:f7:a3:d8:dc:09:46:d1:
         10:00:b9:d2:ee:7b:42:6e:dc:50:3d:18:20:d8:73:6e:93:2c:
         3f:61:cc:8d:5d:62:d3:f6:3c:d3:c2:be:73:83:c8:be:8a:67:
         62:ae:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:13 2026 by rpki-client