Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
File:                     3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json)
Hash identifier:          g0QfPJcLrkwinS6DvXExzwptTOq3smjOXVmjqEHtajw=
Subject key identifier:   0B:87:1F:01:9D:52:66:BA:40:48:4A:E9:40:97:6B:95:78:8E:77:42
Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46
Certificate issuer:       /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
Manifest number:          4C
Signing time:             Fri 05 Jun 2026 08:44:52 +0000
Manifest this update:     Fri 05 Jun 2026 08:44:51 +0000
Manifest next update:     Fri 12 Jun 2026 08:44:51 +0000
Files and hashes:         1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: ffNbEVVKRcBlE846Uf34S8fT4bqsLNofRFiEjw4Hdug=)
                          2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246
        Validity
            Not Before: Jun  5 08:44:51 2026 GMT
            Not After : Jun 12 08:44:51 2026 GMT
        Subject: CN=6a228c84-f949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:37:ee:42:8c:8e:f9:06:9b:c3:67:5b:a0:
                    b1:ee:0e:20:11:42:f9:2f:0c:ed:cb:18:6f:d3:bd:
                    20:2e:8a:1f:35:07:71:3d:e0:44:da:32:cf:0c:eb:
                    d7:e5:4b:97:fd:cd:47:c7:a9:c0:41:9e:71:e3:e7:
                    36:bb:6a:fc:c6:e2:0f:91:b0:a8:54:24:e0:a1:02:
                    0b:db:a5:47:99:59:76:44:17:9f:99:f2:11:94:0d:
                    9a:77:61:32:fa:a7:57:55:ca:b1:ac:05:93:8e:9a:
                    de:ff:4e:ab:9c:f8:0e:00:7a:6d:98:e3:c0:97:cb:
                    c6:db:77:6e:ae:1d:e4:0e:64:e3:88:da:f2:bb:a0:
                    9e:f7:9e:ca:a9:6e:0f:71:98:8f:f2:a6:2f:ac:6c:
                    98:88:e5:fd:34:aa:82:1e:68:8d:7d:a4:7f:ef:9c:
                    d1:27:69:8b:73:5c:00:d0:a2:2e:f3:b7:00:a0:71:
                    72:48:fc:0a:dc:21:57:01:cf:0c:0b:b8:c9:5f:ba:
                    d3:6d:17:4f:c2:ab:90:21:ff:b7:d5:52:c6:19:04:
                    9c:c7:45:b1:cf:08:d6:3b:06:5c:74:1a:a8:06:3c:
                    60:15:c8:da:a6:bd:0c:74:cf:39:c1:99:ec:c5:47:
                    22:bb:b7:4f:c2:8c:e7:f0:d4:0c:69:da:e0:de:c2:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:1F:01:9D:52:66:BA:40:48:4A:E9:40:97:6B:95:78:8E:77:42
            X509v3 Authority Key Identifier:
                keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:3a:19:0d:a0:55:9b:83:d4:9e:e5:40:00:49:e3:3f:0b:
         ed:63:6b:87:c7:19:ec:52:35:73:88:ea:d0:2a:32:40:3e:ad:
         23:d5:96:c7:83:f9:a1:7d:c3:9d:0f:86:45:eb:37:2b:68:e9:
         24:07:bd:1a:94:21:cd:bf:28:49:b4:73:b7:c5:02:2a:23:b4:
         b4:35:e1:2e:ed:73:12:8f:b1:7e:dc:01:eb:9d:a9:af:94:c6:
         c4:f1:22:b6:ee:0b:fe:b5:83:b2:72:49:2d:c5:ca:ac:2a:d3:
         fe:f2:7e:ad:14:ce:77:96:03:2b:95:6b:b3:f3:a4:f5:e7:f7:
         0d:d1:45:f6:2c:0f:c4:43:a8:30:b6:f4:43:84:00:4f:8a:ab:
         44:76:b4:52:ee:52:c3:cc:2f:2b:5f:16:0c:84:cb:93:4c:d1:
         0c:08:fb:3a:46:1c:ff:c6:86:dc:ad:61:3b:3f:1d:a9:e4:56:
         82:53:7f:d6:59:5a:3b:0c:00:61:f0:ba:e6:cf:57:d2:06:d6:
         26:c4:30:66:d5:13:ec:1d:c3:37:09:52:58:c6:52:bf:be:58:
         e4:95:a6:74:0a:93:94:8b:76:38:fd:97:8d:36:84:d5:04:bf:
         67:81:93:b6:64:eb:07:3f:ce:f5:c8:63:35:6f:49:a6:60:9d:
         1b:81:07:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:12 2026 by rpki-client