Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
File:                     3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft (raw, json)
Hash identifier:          eN+R+hcwkvenMbPM8ZJxvo3XXV+9BJXMUuo80B1JUdU=
Subject key identifier:   76:8C:69:28:E7:CA:6E:D6:2A:00:25:ED:74:C4:2F:AB:EB:91:4B:0C
Authority key identifier: DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
Certificate issuer:       /CN=A9154515/serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
Manifest number:          43
Signing time:             Mon 11 May 2026 08:41:26 +0000
Manifest this update:     Mon 11 May 2026 08:41:25 +0000
Manifest next update:     Mon 18 May 2026 08:41:25 +0000
Files and hashes:         1: 3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl (hash: MgmpZvRl2t0oWJtOJxJOEwvJiONCmmG65PNWQpT23K8=)
                          2: E7A0471CF5FE11F091C416DF536F56BC.roa (hash: k8QEl3i1mj0JdrQoFekMU1jbFfjtjnZk+vYtYEngXQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
                          rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154515, serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
        Validity
            Not Before: May 11 08:41:25 2026 GMT
            Not After : May 18 08:41:25 2026 GMT
        Subject: CN=6a019636-e312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c4:74:ac:44:12:f3:36:c1:06:0d:27:4d:63:
                    69:d9:db:50:28:79:16:94:b9:96:1c:67:39:f1:43:
                    e6:ef:88:e4:01:68:e6:37:98:29:8c:76:44:33:23:
                    7d:27:cb:30:5c:a3:75:da:f0:dc:58:f4:73:dd:50:
                    77:87:8d:fa:4b:e7:13:7e:bd:10:94:dd:27:f8:e4:
                    50:80:3b:5a:19:c6:5b:ed:99:92:72:02:ce:67:c2:
                    83:03:dc:94:9c:19:6f:e3:c5:c0:5b:c5:35:ce:3a:
                    b5:55:9f:a1:6c:8d:51:c4:d9:d7:6c:14:86:7a:25:
                    b4:be:ca:5e:62:55:89:89:02:e4:f3:b9:a4:4e:0b:
                    fd:15:41:ad:45:24:f9:68:e3:8e:e6:54:ad:2d:ef:
                    e1:7a:ae:79:7c:56:5e:e2:bb:1e:1f:62:16:22:49:
                    96:07:2b:33:8e:05:6b:bb:e1:fe:b2:57:a7:0c:12:
                    ba:8b:af:b7:37:54:8d:70:6f:ab:bb:7c:34:f3:f0:
                    38:66:a9:37:c2:3c:2e:36:ce:a1:cf:50:8a:cb:e1:
                    50:d8:52:81:88:1b:f0:3f:67:b2:51:eb:b0:b9:2d:
                    bf:04:77:e1:6b:f1:38:c5:8a:eb:01:f1:dd:4e:26:
                    cc:e6:04:bf:9a:2a:89:2b:ee:41:ef:18:f5:da:64:
                    39:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8C:69:28:E7:CA:6E:D6:2A:00:25:ED:74:C4:2F:AB:EB:91:4B:0C
            X509v3 Authority Key Identifier:
                keyid:DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:04:94:85:99:33:da:51:d1:0e:a3:15:d7:b1:71:45:7c:
         f3:7b:38:4a:c5:55:02:d4:e9:19:c1:39:2a:9d:12:13:44:99:
         3a:1d:57:70:dc:4c:10:38:40:cb:b7:87:15:5e:23:0c:79:64:
         47:40:20:be:84:5b:12:26:7e:3d:c4:70:2e:c2:27:11:20:04:
         9a:fc:33:c5:91:79:66:ab:bd:2f:1a:c0:54:38:b1:5d:b3:28:
         52:6c:05:6c:d3:ee:90:cf:fa:f1:71:6e:e8:67:e0:3e:ad:7e:
         1b:e7:23:aa:af:e5:06:50:cc:cc:5a:01:39:cd:4e:e1:87:0e:
         dd:86:d3:19:1a:2e:dd:57:7a:b6:ca:97:b4:d9:34:fb:8d:af:
         b1:a3:8a:8c:97:9c:e1:a1:f2:32:51:1d:9c:35:4b:a2:95:8a:
         ea:aa:6c:80:b0:2a:81:42:c4:ef:f4:f3:92:05:3b:5d:db:58:
         e0:1a:3d:ca:08:73:bd:34:19:02:02:33:1c:54:12:41:f4:71:
         d7:2a:30:73:c5:d1:95:90:ea:17:47:cf:af:86:a7:8b:dd:ae:
         c8:a5:9f:db:81:6e:d1:f2:e7:9b:53:11:c7:fd:8d:3c:8a:8d:
         3a:a8:13:33:cd:13:0b:09:ed:83:95:15:ee:d5:f3:ff:43:b1:
         24:6b:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:45 2026 by rpki-client