Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
File:                     3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json)
Hash identifier:          t2Jy5RMvMlf/uoq29xZL6gL/tfcDkm55knzTp+sqjDs=
Subject key identifier:   DB:E8:E4:63:2D:AD:CC:50:50:F2:60:D5:4C:DE:CB:EE:FF:95:24:2D
Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
Certificate issuer:       /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
Manifest number:          0212
Signing time:             Mon 11 May 2026 02:56:29 +0000
Manifest this update:     Mon 11 May 2026 02:56:29 +0000
Manifest next update:     Mon 18 May 2026 02:56:29 +0000
Files and hashes:         1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: XYaZyxQFGIP5i+/6ZpudVYyHWAVS2bmv1VMkg2miSbI=)
                          2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: X00gSuzOOkYP4DLmpOt/0UBFhvldg0Co5j7FLcwODFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
        Validity
            Not Before: May 11 02:56:29 2026 GMT
            Not After : May 18 02:56:29 2026 GMT
        Subject: CN=6a01455d-89ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:38:ec:5f:7d:d4:bf:be:79:b1:87:a2:ce:
                    83:c4:36:2e:04:33:a4:7e:12:fa:1f:ce:67:22:c4:
                    55:dc:dc:ed:89:70:3c:d0:ae:f7:1d:f4:90:59:9e:
                    b0:87:7e:80:5e:dd:02:ea:01:47:f5:16:10:de:46:
                    b2:94:7e:ac:bf:47:3a:a0:ba:9b:fa:3f:20:e9:d9:
                    6b:44:32:49:25:44:43:1b:fe:3b:60:48:90:48:18:
                    e0:c7:00:80:e8:98:41:aa:d8:45:b1:7d:8f:d2:91:
                    4b:0f:df:0c:0e:5c:1a:30:ce:ce:99:30:6a:b7:cc:
                    2d:0b:8a:9d:03:9f:68:af:05:dd:a2:f0:dd:24:ef:
                    e3:ee:ad:94:1d:db:c1:d3:d5:9c:07:bb:b9:75:d2:
                    fe:72:91:59:eb:78:b4:8a:74:5c:f9:12:bd:41:5d:
                    f0:b1:69:f5:3b:39:31:ed:03:17:d3:ba:e4:56:88:
                    f9:b1:58:f3:ae:39:a1:d6:a5:6d:10:d4:f1:22:35:
                    1c:39:c2:b2:4b:2c:51:71:ac:39:06:97:5e:79:9a:
                    e2:10:b9:2c:b9:e4:ec:ed:1c:0d:03:af:53:23:36:
                    dc:97:d5:38:fc:f9:1b:9e:d7:0c:f0:d7:a9:6d:aa:
                    cc:f2:7a:94:62:ec:ee:78:c2:8e:8c:1a:7d:f8:23:
                    b5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E8:E4:63:2D:AD:CC:50:50:F2:60:D5:4C:DE:CB:EE:FF:95:24:2D
            X509v3 Authority Key Identifier:
                keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:8b:d5:36:c4:40:df:79:23:db:06:cb:e7:e3:ca:3c:a1:
         1c:95:c2:eb:06:59:d0:3c:f9:a7:fd:a1:f8:ba:fe:dc:e0:28:
         d6:47:35:7d:7f:a6:78:66:b5:07:50:a1:cb:fa:e3:a7:ca:f9:
         ce:59:a7:e0:96:20:b5:bd:49:88:2a:aa:e5:e6:1c:49:e3:e0:
         85:40:2f:f9:e9:40:0a:29:ae:3f:b8:56:74:72:6a:71:ef:49:
         4c:e8:16:18:f5:10:58:f2:61:49:57:80:51:79:5a:21:38:56:
         ec:46:e7:75:0b:79:92:18:18:32:45:02:ad:45:f2:b2:20:d8:
         be:d4:b8:ef:4a:03:83:14:10:68:48:15:e2:54:6d:3e:2f:0c:
         5b:61:55:e6:ca:ad:4d:cd:6f:67:61:3d:96:60:a6:0a:82:a2:
         4b:78:e3:a0:e4:a7:6d:8b:bb:a4:a9:56:5a:32:63:2e:db:f4:
         cb:21:99:be:ea:06:f8:56:bd:18:f5:1a:a6:d2:a8:14:f3:86:
         d8:86:24:7d:2e:c0:dc:3a:ec:74:0e:eb:1a:95:36:95:9d:16:
         79:04:84:3b:f7:67:4c:15:2a:57:e3:12:ad:5b:ba:b2:c3:d5:
         70:a3:b9:5c:d7:fa:c3:15:a4:9a:fe:98:94:9b:8e:a5:f3:52:
         82:fd:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:25 2026 by rpki-client