Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
File:                     I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json)
Hash identifier:          +T1M7Njd31kp0//CiLOqVKPMtIDf0PsA/IiWQeKxw6I=
Subject key identifier:   C2:3E:EA:9C:52:1B:28:3E:8C:75:D5:89:8C:52:AA:2C:39:42:49:F4
Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F
Certificate issuer:       /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F
Certificate serial:       02C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
Manifest number:          02AD
Signing time:             Tue 23 Jun 2026 01:46:19 +0000
Manifest this update:     Tue 23 Jun 2026 01:46:19 +0000
Manifest next update:     Tue 30 Jun 2026 01:46:19 +0000
Files and hashes:         1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: d8R1zt+0ahTsuaTuBbcSAG66TC1t+b3MyGq+Gxrby9M=)
                          2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F
        Validity
            Not Before: Jun 23 01:46:19 2026 GMT
            Not After : Jun 30 01:46:19 2026 GMT
        Subject: CN=6a39e56b-a8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:f3:a1:53:07:3d:81:25:77:dd:92:68:93:
                    ca:29:2a:21:ce:3f:8c:de:50:aa:e2:50:7d:a6:5f:
                    c4:23:4b:2b:95:6a:2d:10:b8:28:0e:04:5a:b5:9d:
                    14:b0:8b:7d:28:93:d1:44:05:80:23:a0:30:dc:bb:
                    48:37:a5:08:25:71:4b:27:8c:89:7e:71:f9:47:ee:
                    f7:68:5e:99:ff:ff:06:c1:18:35:41:38:12:e7:48:
                    e9:e5:2d:45:d8:ff:5a:ae:6f:7e:b9:1b:f2:8c:06:
                    26:74:cd:e8:74:05:19:88:bb:d4:09:34:64:c4:3b:
                    58:dd:6e:11:3f:9a:f2:53:91:b2:5f:cd:59:be:ec:
                    8d:01:23:69:2e:a7:41:f5:82:f7:1d:6f:e8:b6:59:
                    b1:8a:d1:80:89:5c:dc:79:41:50:4f:55:77:21:e2:
                    27:ea:35:8e:1b:62:89:b6:76:db:c2:cc:04:82:45:
                    29:27:7d:6d:09:ed:3a:44:c3:9e:f5:b5:8e:f3:16:
                    10:b9:16:13:04:9b:d6:24:8e:a7:d2:c7:f3:3e:8d:
                    e5:3e:b5:b6:8c:51:95:de:fb:2a:8a:f5:99:56:d9:
                    f5:f8:c5:ac:92:e9:39:75:26:82:4d:d8:d1:84:66:
                    00:0a:5a:de:9c:4e:26:00:f9:a4:05:a1:86:75:33:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3E:EA:9C:52:1B:28:3E:8C:75:D5:89:8C:52:AA:2C:39:42:49:F4
            X509v3 Authority Key Identifier:
                keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:bc:b8:4b:7e:ba:70:14:22:ed:6d:b6:dd:42:4e:ae:d1:
         a7:51:85:8b:52:c1:e0:d6:ea:c4:37:c9:3d:8f:b1:f2:e9:20:
         45:18:08:c8:16:19:7f:c5:47:25:5d:b9:cc:2e:16:d6:19:8d:
         17:51:02:87:15:57:db:63:ef:3d:21:40:32:7b:85:5c:19:7d:
         6f:c8:41:e6:41:09:1a:23:73:3a:f6:b0:67:39:0c:83:2b:e6:
         55:87:b9:78:62:73:1b:54:30:8f:46:fc:a3:7f:30:01:64:4c:
         5f:24:df:17:a9:4d:66:7b:e6:c8:cc:a7:c2:83:01:a6:26:dd:
         eb:06:c8:7b:ab:d7:14:c3:34:c3:39:50:24:46:e4:f5:f3:57:
         6d:fc:46:5c:6a:92:72:5a:7e:ca:08:fb:38:da:c7:63:ca:df:
         3e:89:cb:b7:89:ad:2d:e7:f4:d2:9d:00:24:e5:08:ad:dd:00:
         18:8b:6c:e4:0d:2c:3d:d4:ba:1d:3e:61:a8:81:b2:80:e2:83:
         25:7f:83:26:89:e6:9e:00:7b:32:54:bd:42:81:58:4a:38:f6:
         4d:63:3c:a8:19:c6:f7:6e:dd:6f:89:65:3d:37:97:f5:6d:7c:
         6e:1f:6c:03:d0:de:31:eb:f7:c3:a3:5a:6d:fe:e4:e4:76:99:
         a9:1c:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:33:14 2026 by rpki-client