Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File:                     e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier:          PaRJOepcFSNF6nlw5zBY9WJc6zXo+bk3IJW1/UN6TEY=
Subject key identifier:   3F:A3:7D:5C:16:19:3A:E6:C2:24:7B:01:99:95:8A:10:DA:27:56:CD
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer:       /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number:          64
Signing time:             Fri 05 Jun 2026 08:27:29 +0000
Manifest this update:     Fri 05 Jun 2026 08:27:28 +0000
Manifest next update:     Fri 12 Jun 2026 08:27:28 +0000
Files and hashes:         1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: /ZDo8KCuYdtVj6ExEtgEZf7jd/n5u64bXUehK758wjk=)
                          2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: CPLpp/+FM2b54xSn6vuECW27aWUXXJQyS5P46Daeh1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Validity
            Not Before: Jun  5 08:27:28 2026 GMT
            Not After : Jun 12 08:27:28 2026 GMT
        Subject: CN=6a228870-c69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:b5:f1:02:aa:f3:54:08:36:21:7f:ae:06:
                    3f:bd:bb:cd:b0:d9:58:70:97:d0:2d:da:bb:a9:6e:
                    9a:ea:78:d7:b1:b8:f2:a1:34:80:56:3a:cc:d6:23:
                    26:7e:02:08:da:1f:13:71:d4:3b:04:00:60:1c:28:
                    52:0d:ac:ae:c5:7c:3e:62:f0:e6:e8:af:f1:9e:92:
                    21:fe:6f:90:63:51:64:ac:57:31:25:c8:63:72:58:
                    b4:be:66:3f:bd:cc:0d:ad:02:53:f7:b7:85:61:f0:
                    62:f9:2b:ea:18:3a:ab:cb:22:41:1d:b0:4a:66:81:
                    3c:2b:74:59:00:af:e4:53:b2:fe:d3:f7:e5:2b:df:
                    15:79:a3:e6:37:74:ac:08:c6:c1:67:24:4e:67:33:
                    02:0d:f4:25:36:c7:3d:00:a4:82:ee:d3:09:00:9f:
                    69:4a:27:4e:88:bf:c5:a8:e3:f2:c1:56:fe:5b:c3:
                    60:26:de:24:64:9f:e9:3f:ed:80:00:42:95:47:b1:
                    c5:c4:e1:7d:e9:a9:68:4f:99:e3:bd:cf:39:0b:77:
                    49:f9:64:de:f8:ce:b6:33:10:ea:da:26:0f:79:6f:
                    f0:86:20:86:f0:d2:c5:81:82:35:e7:74:9c:ad:f2:
                    52:de:6f:49:44:56:f1:6d:aa:c6:5f:aa:63:22:88:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A3:7D:5C:16:19:3A:E6:C2:24:7B:01:99:95:8A:10:DA:27:56:CD
            X509v3 Authority Key Identifier:
                keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:88:9f:a3:aa:6e:8d:8c:c3:8e:f3:cc:48:64:b1:69:54:c4:
         5c:a1:01:f1:d4:d5:a7:e3:52:76:6f:d2:9c:78:0e:e6:37:cb:
         42:cf:91:e9:91:db:60:f8:2c:4a:2f:45:f1:eb:e2:0c:fe:37:
         8f:2a:de:61:1c:e6:d9:0d:1e:0b:57:09:de:a7:0b:47:12:58:
         0d:bc:b9:dc:67:98:07:22:45:06:15:d8:ad:b7:57:47:7c:04:
         04:af:06:11:8a:99:2e:a9:6f:09:21:a8:b1:9e:9c:15:42:f3:
         02:ad:1a:9b:0b:27:17:43:4f:5f:3c:3d:47:74:7f:ef:47:48:
         32:dd:b2:d6:e1:35:76:b1:33:9e:43:a3:73:86:50:39:ff:06:
         2c:af:b8:3d:5b:26:5f:a3:63:79:77:06:f2:47:d4:95:80:d6:
         10:c3:ec:dd:e7:d2:f8:07:0b:db:e0:cc:e8:a2:89:df:4b:3f:
         74:31:38:c8:5a:58:d6:86:32:ec:2c:c9:04:ab:bd:d9:3e:e9:
         85:03:1e:3c:f6:f2:bc:04:69:ba:3e:bc:7e:ca:e3:55:8a:f7:
         76:ac:d1:b3:53:81:86:13:9e:bc:91:fc:61:2f:db:0e:14:03:
         fb:c0:c0:fe:30:22:33:29:66:45:e3:bb:fc:15:6d:42:61:1c:
         5c:90:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:59:26 2026 by rpki-client