Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
File:                     r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json)
Hash identifier:          jX1edTsULoJlDc+Y3NdEimEoA7BKDeuEBs48JKPvcnQ=
Subject key identifier:   7C:C2:58:F8:7E:D0:2E:00:E4:0B:BA:2C:48:B0:CC:38:10:57:5A:69
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Certificate issuer:       /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
Manifest number:          F0
Signing time:             Thu 21 May 2026 06:28:14 +0000
Manifest this update:     Thu 21 May 2026 06:28:14 +0000
Manifest next update:     Thu 28 May 2026 06:28:14 +0000
Files and hashes:         1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: ZW0cPoSb1kRN2sPsZT3htcjsfTDyCc/Wb0sHg157E0A=)
                          2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
                          rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
        Validity
            Not Before: May 21 06:28:14 2026 GMT
            Not After : May 28 06:28:14 2026 GMT
        Subject: CN=6a0ea5fe-b3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:87:d1:fd:19:ff:6c:ca:dc:a8:9a:de:cb:
                    08:43:c0:08:10:97:15:5b:f6:ae:eb:8a:54:5c:01:
                    0e:57:c6:26:73:93:5d:52:da:a2:d6:83:9e:cf:3e:
                    d7:32:c5:65:cf:3e:eb:21:86:29:51:ef:df:49:86:
                    d7:ff:5f:11:ae:15:10:e6:5b:08:8e:38:d2:d0:e3:
                    4d:ab:79:b1:9c:5a:12:a3:81:d5:1a:cc:50:48:05:
                    09:76:46:ea:8a:1d:7a:9a:db:05:3a:6f:79:83:26:
                    44:f0:86:39:bb:a7:34:3d:6c:c5:54:1e:00:3e:e4:
                    e5:be:f4:c8:ce:ff:35:91:f3:d2:3a:ee:eb:e2:5f:
                    af:25:ab:7e:25:36:77:87:e2:28:ba:ca:29:f0:cd:
                    53:14:2e:8c:af:73:f7:d3:12:b3:d0:00:81:df:61:
                    76:d9:59:08:af:73:f7:a7:22:61:4b:5b:7f:1e:a3:
                    17:19:9a:ae:44:08:0a:e4:dd:81:ca:b1:0b:fe:5e:
                    e0:70:ed:a9:38:c5:08:45:5a:3c:4a:46:04:39:39:
                    c9:30:a7:3e:a2:ff:41:7d:ae:d2:31:e7:c9:01:61:
                    54:72:e4:64:4f:ca:3e:0b:0a:b3:45:af:44:93:ac:
                    5e:3a:03:52:db:ec:90:cb:91:42:20:7c:58:df:f3:
                    d2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C2:58:F8:7E:D0:2E:00:E4:0B:BA:2C:48:B0:CC:38:10:57:5A:69
            X509v3 Authority Key Identifier:
                keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:01:2b:b8:ae:36:11:41:ff:9e:db:8c:4a:ad:69:23:82:0a:
         e9:11:ec:74:14:f0:dd:c0:1b:fa:5a:5d:e7:13:4a:fd:7f:fa:
         6c:03:86:e8:2b:f1:82:1e:5a:8d:d2:8e:39:62:2f:bf:71:51:
         09:f7:f6:64:2d:9d:d6:7b:19:88:69:be:a0:02:bf:ce:b2:bd:
         ec:fd:2d:e0:7f:83:e9:1c:0e:7b:3c:9b:e1:1b:ef:2f:9d:31:
         57:c7:ad:e7:26:8b:d5:45:8a:5b:fc:1c:14:6d:99:60:4e:1f:
         5c:48:eb:14:bd:ed:a9:09:30:08:ed:21:b8:eb:c7:56:a3:3e:
         4a:c7:67:f1:85:75:0e:4d:3f:d9:2f:ac:aa:ea:2d:e5:de:e5:
         cd:e9:46:cd:60:aa:7f:53:de:47:76:79:9d:60:77:22:55:cb:
         9a:3d:9c:9a:cc:25:14:92:ca:2f:cd:97:5d:bb:91:b4:b9:23:
         88:4c:30:e0:4e:54:35:81:43:d3:59:3b:ef:a1:bb:bc:03:fa:
         81:32:51:f9:28:d2:ab:28:43:9e:e9:a1:dd:a9:03:29:84:0e:
         97:a6:34:ca:ac:f4:02:26:f0:9b:3d:de:c0:14:bf:ed:d0:96:
         a9:fd:4e:00:28:e1:b9:de:ae:9a:82:f6:62:e4:29:08:d3:2f:
         f7:04:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:55 2026 by rpki-client