Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          DLPHnBTZ0my/4YNx8dKZD8HeCmP1ptkMzY66ZvxEQLA=
Subject key identifier:   5C:71:17:B4:B4:A8:43:FB:E2:9A:37:5E:76:82:C5:31:39:1D:8E:19
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          0101
Signing time:             Mon 11 May 2026 06:17:09 +0000
Manifest this update:     Mon 11 May 2026 06:17:08 +0000
Manifest next update:     Mon 18 May 2026 06:17:08 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: DnX3gEIG2x91Z4m6M5NSNpp4h1A7GVso/cRO1lsgDm4=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: May 11 06:17:08 2026 GMT
            Not After : May 18 06:17:08 2026 GMT
        Subject: CN=6a017465-164f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:c2:3f:4c:07:92:55:00:f0:61:c4:8c:0f:
                    40:7b:de:15:c1:5c:f7:11:88:42:d2:3d:e5:fb:98:
                    95:1c:10:b3:d8:1c:dc:06:d0:aa:12:f2:25:4b:6d:
                    22:27:00:c2:55:60:b4:ee:c7:42:b1:94:02:7f:d9:
                    40:37:20:ee:53:45:b4:2d:19:66:da:08:31:ab:c3:
                    5f:96:0a:d1:b1:ea:27:1b:24:8e:e0:d6:d5:73:8d:
                    67:f4:29:e7:b8:70:81:d9:1a:fe:4d:06:d4:e9:61:
                    07:8f:63:ae:44:39:1b:c5:ff:fb:ea:88:68:1b:85:
                    bd:73:d8:ba:8f:73:76:02:68:e1:4f:b8:d2:d8:20:
                    77:90:60:66:42:75:86:46:60:3d:20:e7:ba:82:de:
                    e3:bf:b5:3c:83:4b:e2:aa:ba:7c:ef:b7:4d:90:45:
                    d3:8b:61:ea:3c:f0:60:9f:3f:2a:9c:f2:b3:d0:f6:
                    29:d2:ad:b9:76:28:c1:f9:a7:10:11:d0:46:69:41:
                    5c:d3:56:3c:70:b8:9a:80:1a:17:d3:ba:a7:60:dc:
                    6a:9f:7c:95:4c:d7:dc:2d:f2:bb:cf:d6:7c:10:e3:
                    63:7a:e5:81:fd:ae:fa:54:6a:fe:17:13:f2:6d:22:
                    59:3b:5e:d6:42:4f:b9:e3:32:0d:42:12:4d:b7:f1:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:71:17:B4:B4:A8:43:FB:E2:9A:37:5E:76:82:C5:31:39:1D:8E:19
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:0f:a5:3d:8b:dc:b8:45:d3:38:fa:57:28:52:59:43:61:8f:
         5d:38:42:0a:63:c5:06:80:68:80:2a:14:73:7a:7d:80:1d:5e:
         3e:ba:02:77:af:f2:6e:87:e2:a4:a2:ee:eb:4c:29:a6:3f:69:
         8f:60:07:a0:54:1e:b4:e4:35:9b:04:7f:ca:31:6a:5b:93:28:
         09:57:7d:4d:92:33:89:6e:2d:bd:66:66:05:d2:cd:4e:6f:f3:
         82:23:3a:69:30:5e:f2:10:2a:f5:15:18:3f:bb:f8:39:36:6d:
         da:75:89:06:07:2a:25:7b:bd:ed:2d:71:0d:63:4b:75:1f:76:
         45:56:73:60:ff:03:0a:7c:cd:ae:d5:b2:91:6f:07:24:c2:b5:
         72:9b:c8:94:f4:e9:2f:d3:20:95:f4:48:e3:69:3e:9c:76:6f:
         95:2d:85:0e:54:52:08:0b:c1:67:7d:e1:8c:a4:e0:f7:ce:e9:
         13:77:84:45:8b:0b:4c:02:77:e9:84:77:97:fa:f9:ce:0c:ce:
         ed:ec:0c:8c:c7:55:f0:5b:74:c2:99:1a:2f:b3:3f:08:a0:1e:
         0a:12:49:a9:10:aa:0f:55:1a:77:3e:5b:69:ed:c8:63:75:37:
         f0:d1:bf:88:09:aa:12:ca:7f:45:b4:cf:73:77:e4:80:94:8d:
         13:87:a2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:39 2026 by rpki-client