Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File:                     3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier:          uQQ96s3copEmsgJgw2c0PVe6NjShsNHcGnoN1VAGA/Q=
Subject key identifier:   AA:05:E3:85:4F:5C:96:C6:00:ED:A5:1A:1B:01:32:0F:DD:1C:AD:9A
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer:       /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial:       1956
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number:          194D
Signing time:             Tue 02 Jun 2026 15:47:25 +0000
Manifest this update:     Tue 02 Jun 2026 15:47:24 +0000
Manifest next update:     Tue 09 Jun 2026 15:47:24 +0000
Files and hashes:         1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: EKlC0mr6d5zLR5xKK/kwu1Z7ovKPdEsNBAHA6F2xHCo=)
                          2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: huSx5kpORQn0tkU4TRAPmVkFRxR4g/qvraibL4XJAo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6486 (0x1956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
        Validity
            Not Before: Jun  2 15:47:24 2026 GMT
            Not After : Jun  9 15:47:24 2026 GMT
        Subject: CN=6a1efb0d-a67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:84:d3:17:c9:a7:6c:b9:bd:db:92:e7:11:
                    0a:5e:84:9f:f4:38:6b:0f:db:93:0a:d0:40:50:68:
                    64:75:53:25:a6:d3:9a:7a:8e:ee:85:64:46:ef:db:
                    64:70:4b:ea:cb:fe:d9:19:5c:4d:0b:b0:38:72:9e:
                    20:5b:24:17:b5:dc:c7:e2:fb:52:d1:31:09:e7:e3:
                    9d:85:46:a0:4d:a0:aa:59:27:ac:d7:ba:9f:aa:bf:
                    d0:29:ee:10:a4:0c:39:97:f1:91:e9:f9:1f:ef:c2:
                    11:24:1e:03:aa:75:e6:f0:b4:eb:81:1a:c0:60:e8:
                    b0:82:7b:5d:1c:57:71:05:40:13:3f:4d:bb:16:c3:
                    46:75:6c:28:41:87:bb:ec:db:35:9d:25:fc:80:73:
                    f1:8a:e7:94:13:1c:4e:b0:7c:47:ff:af:b8:f0:de:
                    d7:7a:42:4b:e1:77:76:cc:a5:66:75:08:39:bf:c6:
                    42:c1:ae:5b:75:02:bf:fa:2c:a0:e1:32:18:56:59:
                    97:a0:66:1f:8b:a4:5f:c4:fa:f3:0a:3b:49:2d:49:
                    16:e6:01:61:b8:1e:92:3c:34:01:a5:bf:87:2a:2b:
                    ed:7a:fe:93:aa:3b:cb:a3:37:4c:08:bd:06:5c:3f:
                    26:6d:1b:89:1a:c0:36:ab:c6:16:7b:01:8c:d0:0a:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:05:E3:85:4F:5C:96:C6:00:ED:A5:1A:1B:01:32:0F:DD:1C:AD:9A
            X509v3 Authority Key Identifier:
                keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:76:25:72:3c:2a:50:51:67:94:f7:06:37:ef:f1:c5:2c:51:
         5b:87:f6:99:fe:c1:45:64:fd:f5:19:f1:c2:86:d9:29:c9:3c:
         4d:02:d8:7d:26:3d:e4:7d:80:7a:09:63:34:bc:3e:58:cd:ff:
         31:26:e4:8e:03:53:e1:f5:32:43:ed:f3:95:ba:a0:17:57:17:
         ee:3d:28:74:55:9b:57:de:f2:f8:be:34:87:a2:f1:bf:c0:d6:
         89:5f:bf:29:0d:aa:7e:ff:dd:4e:f7:f9:25:6c:7f:75:36:ae:
         cb:b8:84:56:d0:71:b9:ee:2e:19:6f:a1:f0:31:0e:7f:c7:a2:
         e7:75:d2:87:cf:5d:a2:3e:19:93:52:16:f8:a1:c5:0c:54:b3:
         4f:96:65:2f:61:2c:e4:2e:a1:65:ee:a8:64:9e:fc:e3:5b:ac:
         fc:55:73:85:e7:7a:17:2b:b7:a4:48:6f:08:58:89:a4:6d:bd:
         44:a6:18:1e:d7:0c:d5:a2:0f:bc:11:59:b1:03:dd:9a:46:b7:
         b6:9a:e1:b8:c4:bb:42:a2:57:d9:7a:a9:3c:10:f4:da:4a:2c:
         8d:86:d1:ad:37:37:f4:99:8a:be:61:5e:14:44:14:91:fa:55:
         f7:05:bb:b3:4b:44:ed:64:2e:b4:7a:96:81:1b:e0:c3:0d:c2:
         53:1e:1e:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2
MTFDQURBNTEwHhcNMjYwNjAyMTU0NzI0WhcNMjYwNjA5MTU0NzI0WjAYMRYwFAYD
VQQDEw02YTFlZmIwZC1hNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5aE0xfJp2y5vduS5xEKXoSf9DhrD9uTCtBAUGhkdVMlptOaeo7uhWRG79tk
cEvqy/7ZGVxNC7A4cp4gWyQXtdzH4vtS0TEJ5+OdhUagTaCqWSes17qfqr/QKe4Q
pAw5l/GR6fkf78IRJB4DqnXm8LTrgRrAYOiwgntdHFdxBUATP027FsNGdWwoQYe7
7Ns1nSX8gHPxiueUExxOsHxH/6+48N7XekJL4Xd2zKVmdQg5v8ZCwa5bdQK/+iyg
4TIYVlmXoGYfi6RfxPrzCjtJLUkW5gFhuB6SPDQBpb+HKivtev6TqjvLozdMCL0G
XD8mbRuJGsA2q8YWewGM0ApPCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoF44VP
XJbGAO2lGhsBMg/dHK2aMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE
MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs
Z3ZGYTNlN254b0poSEsybEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyHYlcjwqUFFnlPcGN+/xxSxRW4f2mf7BRWT99RnxwobZKck8TQLYfSY95H2A
egljNLw+WM3/MSbkjgNT4fUyQ+3zlbqgF1cX7j0odFWbV97y+L40h6Lxv8DWiV+/
KQ2qfv/dTvf5JWx/dTauy7iEVtBxue4uGW+h8DEOf8ei53XSh89doj4Zk1IW+KHF
DFSzT5ZlL2Es5C6hZe6oZJ7841us/FVzhed6Fyu3pEhvCFiJpG29RKYYHtcM1aIP
vBFZsQPdmka3tprhuMS7QqJX2XqpPBD02kosjYbRrTc39JmKvmFeFEQUkfpV9wW7
s0tE7WQutHqWgRvgww3CUx4exg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:43 2026 by rpki-client