Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
File:                     z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json)
Hash identifier:          toYcvymwkIadJFmTRZbtw6ymVd23+SXI5hqIJPWPTd8=
Subject key identifier:   16:BD:5E:28:68:09:A0:8E:7C:AB:60:F4:97:81:12:BB:19:08:10:4F
Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45
Certificate issuer:       /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45
Certificate serial:       1B02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
Manifest number:          1AE0
Signing time:             Thu 04 Jun 2026 16:18:12 +0000
Manifest this update:     Thu 04 Jun 2026 16:18:12 +0000
Manifest next update:     Thu 11 Jun 2026 16:18:12 +0000
Files and hashes:         1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: MqJ8Z+ch3sQx5+6evdQmVfVet4B3LXah+F00UFby8uY=)
                          2: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=)
                          3: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl
                          rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 16:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6914 (0x1b02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45
        Validity
            Not Before: Jun  4 16:18:12 2026 GMT
            Not After : Jun 11 16:18:12 2026 GMT
        Subject: CN=6a21a544-6832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:ba:e5:f4:a9:82:14:bb:2b:d4:e8:2d:e2:
                    e7:48:22:fb:5a:26:de:cb:1a:4e:25:41:6c:e5:da:
                    b8:66:b2:21:f3:3f:a1:7a:52:af:33:59:4f:3c:58:
                    67:16:cd:fd:e8:5e:0c:0f:8c:b7:9f:2e:fd:13:5c:
                    b5:cc:16:ae:bf:33:a2:b6:23:be:0c:d4:f9:90:ed:
                    a6:53:ef:52:13:f5:2a:9f:ac:5d:8c:77:58:03:0a:
                    49:0d:7d:98:0e:71:6e:70:18:19:e1:b2:73:a4:ea:
                    da:48:86:e0:9a:1f:1f:3c:8e:d3:e1:d9:51:8b:6c:
                    0a:42:24:fb:b4:a1:6a:7f:19:6c:e4:05:c3:52:cf:
                    11:24:df:bc:51:bf:43:36:9a:ee:3f:0b:9c:82:c8:
                    63:56:ca:b2:e1:73:cc:0f:52:2b:a0:e5:4e:85:05:
                    c8:2e:9d:45:e3:2e:d9:f9:35:82:df:25:e8:56:6e:
                    a3:63:df:ff:da:b8:c1:22:ec:3d:61:d7:15:60:2c:
                    b4:4a:3e:77:ff:c8:ce:74:b7:c3:8f:89:d6:8a:67:
                    a0:de:1a:92:7f:17:d9:1d:5c:f8:37:d7:fe:18:0a:
                    d5:4f:8d:67:37:2e:1c:ad:de:92:35:c4:82:0e:94:
                    fc:be:07:e6:0a:2d:a5:72:f6:cd:37:42:11:32:4e:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BD:5E:28:68:09:A0:8E:7C:AB:60:F4:97:81:12:BB:19:08:10:4F
            X509v3 Authority Key Identifier:
                keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:52:8a:33:d8:9b:b3:87:47:17:a3:4e:f5:5d:f4:e9:04:
         73:ed:c0:69:d0:4b:10:2c:02:93:31:b4:64:e3:11:28:8c:d9:
         af:dc:e9:2c:a2:af:58:42:68:ed:95:0c:80:4c:8b:0f:94:65:
         f3:5a:83:8f:82:bf:2d:57:bc:5a:4a:4a:fa:32:f2:53:7e:0c:
         5d:77:3a:b8:b9:c6:51:ae:b0:b2:99:51:28:a7:f1:d9:d2:a0:
         64:c9:be:96:19:10:49:bb:60:1c:d8:dc:62:8a:a4:d2:31:d9:
         99:a2:6c:14:2f:eb:7d:f3:ec:07:57:2f:30:86:4f:2f:b9:c1:
         ac:7e:69:59:2b:f3:0f:76:a4:e8:f9:37:c4:4d:0b:d9:45:62:
         2d:16:70:be:39:b1:e9:e4:36:4b:c0:6a:44:4f:b1:3a:0b:39:
         d0:26:67:f2:c4:b8:c7:e5:a3:54:4c:4f:ac:20:68:64:3c:a1:
         9d:26:00:98:92:bf:96:45:e6:6b:91:ab:27:17:fd:1e:7a:1d:
         f1:f6:8b:89:ea:6f:70:a9:c4:3b:a2:3e:2e:9f:90:14:66:9a:
         59:70:ac:9c:16:24:6c:09:e3:56:87:05:e5:f3:d2:58:15:43:
         5f:be:57:8f:8e:81:2d:ca:02:09:85:89:0c:56:d6:59:84:7f:
         d1:60:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:36 2026 by rpki-client