Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
File:                     8e0mdV_Ai9BZkZUyuPo6akg04_k.mft (raw, json)
Hash identifier:          BC76xE2aCTyg7MVPMFym+SOI81Z2Ox+RV8ARk2VWDs8=
Subject key identifier:   3F:3C:9B:0A:F5:2B:BC:AE:EF:D0:C6:0A:28:AB:87:DA:3C:7E:3E:89
Authority key identifier: F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9
Certificate issuer:       /CN=A91E6369/serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
Manifest number:          3C
Signing time:             Fri 05 Jun 2026 08:58:52 +0000
Manifest this update:     Fri 05 Jun 2026 08:58:52 +0000
Manifest next update:     Fri 12 Jun 2026 08:58:52 +0000
Files and hashes:         1: 8e0mdV_Ai9BZkZUyuPo6akg04_k.crl (hash: j6+pgJppWVLwfXGv4ov2Lewoq3Z+hEbhBEDZTeL1+Ko=)
                          2: E0F26F840C7A11F1925E54691C3D8C67.roa (hash: I7EBb+YBXT8xgUhV3T13QqxJ9GRbIYd43OJn2AJIB9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl
                          rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6369, serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
        Validity
            Not Before: Jun  5 08:58:52 2026 GMT
            Not After : Jun 12 08:58:52 2026 GMT
        Subject: CN=6a228fcc-88da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:09:55:53:a3:88:ea:17:fc:73:ab:76:72:
                    30:51:de:17:83:b3:ab:6b:21:f7:ae:41:06:4d:b5:
                    5b:21:f5:21:cb:b8:5e:3b:bd:a5:1f:9c:db:8c:54:
                    bb:79:eb:75:34:0c:03:50:35:e0:a7:32:b7:c9:0b:
                    12:97:2f:cd:28:1a:66:1d:42:eb:99:f6:25:66:2c:
                    70:8d:c3:de:ce:ae:57:6d:ed:d2:4b:b1:49:51:67:
                    9e:90:dd:cf:22:c9:33:1f:90:06:25:ec:a3:ad:f0:
                    94:74:79:c8:c0:25:12:90:8f:da:ac:b4:b3:37:9c:
                    ea:2a:99:ef:36:7d:7f:35:34:3c:6a:5a:23:bb:cc:
                    83:13:da:03:25:80:e6:2c:45:47:21:bc:f3:0c:3c:
                    1c:b6:20:46:26:eb:c7:76:01:a7:9b:1f:5f:36:70:
                    d5:36:e0:03:14:45:f6:b9:af:42:30:c0:eb:05:68:
                    54:d2:4c:f2:73:91:23:fd:c8:08:88:ed:a3:18:9d:
                    91:8e:26:53:c7:a6:d7:24:2c:17:a3:e1:e6:19:43:
                    8d:93:ca:02:8e:34:97:69:9b:df:d9:27:85:38:d0:
                    c7:9d:24:a7:1b:cb:ea:36:ea:d3:c1:db:7c:eb:f0:
                    61:d1:17:a3:b4:59:7b:08:7d:1a:6d:b8:ff:42:fc:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3C:9B:0A:F5:2B:BC:AE:EF:D0:C6:0A:28:AB:87:DA:3C:7E:3E:89
            X509v3 Authority Key Identifier:
                keyid:F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:7e:08:5f:69:b1:c6:87:4b:bb:d6:a0:0e:96:2a:99:4b:
         67:4b:dd:00:13:a0:dc:5b:45:2a:28:eb:92:37:ee:86:31:d1:
         eb:97:1b:c6:34:43:17:7c:23:5e:64:03:52:5b:1f:ac:5e:5c:
         76:67:53:d7:18:28:13:fc:4c:48:39:12:a4:00:c1:68:db:9a:
         29:6b:70:66:2a:6e:a8:0d:ff:c6:8f:1d:c1:fb:79:4b:81:c4:
         d6:e7:5e:9e:65:a9:ed:88:3a:67:e1:97:c9:48:55:72:73:a7:
         01:af:3f:eb:ba:b8:f7:73:02:93:c0:d9:48:9d:31:e0:d5:91:
         0e:74:9c:c9:0e:76:03:83:c9:6d:e1:3f:8b:25:10:86:39:4a:
         8b:b9:03:5a:af:4a:64:e3:4d:17:f1:a0:7d:6e:c8:65:f4:26:
         1a:34:65:bd:0d:26:ba:e1:ea:3e:b2:e0:06:14:11:ed:38:52:
         26:b2:1d:da:47:9b:19:9b:ef:c3:a3:3b:02:cc:0c:27:82:74:
         55:d2:ca:01:f6:91:fa:e9:34:17:50:28:4c:d6:64:11:d2:13:
         8f:15:1c:21:89:70:03:9a:63:08:2d:3b:f8:a2:10:f1:b7:10:
         b9:7f:0e:b4:f6:70:da:e8:5c:4d:74:51:dc:a9:8e:a2:23:50:
         ae:3d:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:24:12 2026 by rpki-client