Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
File:                     3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft (raw, json)
Hash identifier:          x3NgEgk5dNm0K1yBvUJz5qLvb21WZY1JXX6pXZtnfLA=
Subject key identifier:   97:0F:7D:35:35:2C:55:E4:58:B2:A1:9A:3F:A5:72:33:D7:C7:B8:B7
Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
Certificate issuer:       /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Certificate serial:       0AB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
Manifest number:          0A9E
Signing time:             Tue 12 May 2026 19:35:37 +0000
Manifest this update:     Tue 12 May 2026 19:35:37 +0000
Manifest next update:     Tue 19 May 2026 19:35:37 +0000
Files and hashes:         1: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl (hash: bCd+PhVQBVRMZCyXlVu/FMDhIBKCDlSffRiExUTRkXo=)
                          2: C1B3DE082BBE11EF809E1831C4F9AE02.roa (hash: pjTWlhBU9uLdZ8Pokz/j8Myvf4pRfYFG3vHjcrWT10w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
                          rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2736 (0xab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911035A, serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
        Validity
            Not Before: May 12 19:35:37 2026 GMT
            Not After : May 19 19:35:37 2026 GMT
        Subject: CN=6a038109-126e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:81:b9:c0:aa:e5:ac:93:1e:f5:92:fb:2e:
                    bf:77:e6:4d:cc:71:05:2a:bb:01:0f:7b:a1:6f:7a:
                    10:89:8c:7a:8a:a3:a5:f0:23:2a:76:2e:4f:3e:cf:
                    92:2b:9b:33:56:91:6f:a3:11:c6:a5:da:58:b0:13:
                    68:07:5e:10:3e:0c:9a:53:b5:41:64:30:c3:d6:87:
                    95:2d:d3:1f:16:45:a0:45:2a:b8:27:41:f4:55:02:
                    33:ba:d7:61:c6:68:a2:a2:43:23:d0:36:0f:db:99:
                    6d:19:66:1f:32:b1:fc:00:17:eb:2e:96:dd:51:a6:
                    06:9d:6d:e3:6e:da:89:26:7f:0c:2a:e5:4a:69:db:
                    ac:64:5a:02:93:41:e9:c9:cf:a5:5d:10:15:23:6f:
                    0b:d6:40:26:86:e0:68:aa:29:6a:6c:0c:93:92:89:
                    64:14:c7:ca:2b:56:76:c3:d1:a0:dd:82:e0:ff:a5:
                    fa:af:7b:e6:14:7f:06:23:f7:04:db:2e:b0:43:93:
                    cd:73:12:86:1c:cd:6e:4a:36:08:12:8b:40:1e:da:
                    fc:29:3f:4c:54:bf:b6:c3:77:8d:72:51:0f:c2:6d:
                    3f:cf:c9:4b:ca:f8:94:f1:15:c3:36:d9:b6:57:0a:
                    6f:2e:90:17:08:e3:7d:34:a3:27:7b:9f:85:0f:c8:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0F:7D:35:35:2C:55:E4:58:B2:A1:9A:3F:A5:72:33:D7:C7:B8:B7
            X509v3 Authority Key Identifier:
                keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c4:45:2a:2c:64:58:53:1f:84:4e:8f:f5:1d:01:9e:c3:6e:
         6b:ca:75:aa:09:48:79:6f:98:4b:7c:82:38:9b:a0:79:db:ca:
         a5:5b:b9:26:93:60:99:f4:b2:c7:0d:78:da:c8:40:55:27:6f:
         8e:80:59:19:86:a0:45:97:8e:58:f2:e9:93:06:43:ec:20:c5:
         8e:3c:84:b0:45:55:ba:0b:2e:cd:d5:78:b1:9d:bf:00:77:ee:
         5e:d1:28:6e:28:f5:91:6c:22:88:bb:cd:0c:69:38:4e:db:7f:
         ad:c4:4d:6a:27:95:0b:a7:1f:59:f8:df:b7:c5:d3:79:f5:ae:
         ad:fe:00:ec:83:33:8d:89:ae:b0:a5:80:48:17:df:52:ac:63:
         11:1c:b3:59:2e:4f:bc:e0:f3:7f:9c:5b:6e:91:30:4f:c8:31:
         10:15:c8:2d:d5:bd:4a:79:45:6a:8c:2f:07:b9:56:91:6e:6a:
         0c:6d:79:44:26:b7:45:75:59:b6:da:c9:69:8b:76:9e:f5:42:
         16:a7:9c:21:50:49:23:ba:30:fe:43:4a:8e:f2:f6:7e:8c:8a:
         1d:02:20:c4:7a:da:e3:06:68:b6:85:e1:cf:93:c0:08:19:d2:
         63:d9:a7:b0:06:5b:d6:e3:64:75:ed:5c:5d:43:02:c1:3f:5a:
         bb:ff:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:28:14 2026 by rpki-client