Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File:                     3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier:          NnTsWOG7IUZWL9vmYYR0UNiJ+f82CdmT5ecOtKd+pdY=
Subject key identifier:   CE:16:A3:51:6E:A2:F3:B0:74:55:53:A3:A1:4C:BA:F5:39:41:D1:44
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer:       /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial:       085D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number:          2DB5
Signing time:             Tue 12 May 2026 16:45:25 +0000
Manifest this update:     Tue 12 May 2026 16:45:25 +0000
Manifest next update:     Tue 19 May 2026 16:45:25 +0000
Files and hashes:         1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: GZCD+uWCgsoYFG4IWiHZRGepioYrlraFU6GxtRxw62Q=)
                          2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
                          3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141 (0x85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
        Validity
            Not Before: May 12 16:45:25 2026 GMT
            Not After : May 19 16:45:25 2026 GMT
        Subject: CN=6a035925-1bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8d:90:1a:3e:83:db:4e:9e:04:96:d0:bd:17:
                    70:93:e1:79:a2:95:7b:84:ad:9c:81:8a:37:ad:3b:
                    dc:2a:e2:13:2a:17:c6:82:61:a1:69:07:0c:73:3c:
                    3f:79:f7:7e:52:bc:bc:94:27:c7:53:a1:24:70:6c:
                    74:d1:71:c5:70:0a:ca:4c:e2:c3:75:8c:89:70:b3:
                    33:da:41:d3:b0:8b:1e:11:7b:f3:ec:70:61:2a:5f:
                    58:a7:6b:e2:30:52:ac:4a:62:a7:69:ae:98:a9:d3:
                    e5:a5:96:fd:e4:2c:fa:db:c7:72:52:7b:70:37:c5:
                    75:9b:00:2f:d5:d9:11:13:61:df:02:16:dd:11:bf:
                    ca:47:71:e3:cd:17:f0:f7:76:30:22:11:c2:ea:0b:
                    32:f0:32:5f:86:09:c3:26:c1:ba:e8:66:ca:16:94:
                    ab:4b:fd:16:1a:fd:92:33:ea:ae:11:5d:e6:63:25:
                    03:fa:ca:6e:f3:09:31:91:c1:4d:cb:13:fd:82:d5:
                    d8:ca:82:c7:00:15:96:6a:d6:88:11:c3:0e:89:25:
                    ae:04:ed:0f:48:fc:3b:1d:46:90:2d:99:ab:7a:49:
                    a3:dc:95:54:84:c2:8c:68:a0:49:b8:ef:44:71:25:
                    74:1c:06:d2:30:17:d3:07:06:b8:5a:5c:95:df:a5:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:A3:51:6E:A2:F3:B0:74:55:53:A3:A1:4C:BA:F5:39:41:D1:44
            X509v3 Authority Key Identifier:
                keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:6b:53:d7:36:b8:bd:ed:e4:29:16:62:e8:e8:ca:44:f9:
         2d:3e:b6:97:4f:f4:ff:7e:ad:47:1d:b0:fa:45:0e:f2:bd:ed:
         a1:f5:97:4e:b5:cb:ba:e0:94:1d:76:db:4e:43:48:0f:8e:b7:
         75:0a:0b:99:01:59:0c:55:cc:fe:c3:06:7b:63:41:8a:25:ff:
         43:89:4a:90:55:f3:20:8e:12:70:76:16:79:d4:ec:d5:9d:b3:
         b2:43:05:d2:69:e1:5c:55:62:9d:46:52:d1:20:5b:f3:45:9c:
         02:0c:36:d2:3b:06:16:83:60:b6:32:f5:c5:d5:e0:81:55:3d:
         55:85:71:e7:c8:08:d8:20:0b:1a:31:f3:d3:62:a0:79:7e:4a:
         2a:49:ef:01:eb:d5:76:fd:f9:c3:cb:a3:60:e5:b0:05:48:cb:
         67:25:e4:f2:ae:9d:7f:2b:3d:cd:ae:44:c2:50:ef:52:6c:1b:
         7e:4f:09:02:7a:53:26:68:34:07:42:69:93:1a:ac:86:3b:41:
         1d:95:d0:28:66:e2:18:2e:34:73:c9:dc:bb:cb:f6:68:c9:f1:
         0b:64:23:8e:81:f2:7b:70:6f:c2:ec:16:36:f3:b5:40:0d:f8:
         0b:14:42:a5:78:90:1a:79:28:d7:bf:37:48:cf:4e:cf:9b:ba:
         23:36:57:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw
QjZDRUFEQTgwHhcNMjYwNTEyMTY0NTI1WhcNMjYwNTE5MTY0NTI1WjAYMRYwFAYD
VQQDEw02YTAzNTkyNS0xYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9o2QGj6D206eBJbQvRdwk+F5opV7hK2cgYo3rTvcKuITKhfGgmGhaQcMczw/
efd+Ury8lCfHU6EkcGx00XHFcArKTOLDdYyJcLMz2kHTsIseEXvz7HBhKl9Yp2vi
MFKsSmKnaa6YqdPlpZb95Cz628dyUntwN8V1mwAv1dkRE2HfAhbdEb/KR3HjzRfw
93YwIhHC6gsy8DJfhgnDJsG66GbKFpSrS/0WGv2SM+quEV3mYyUD+spu8wkxkcFN
yxP9gtXYyoLHABWWataIEcMOiSWuBO0PSPw7HUaQLZmrekmj3JVUhMKMaKBJuO9E
cSV0HAbSMBfTBwa4WlyV36Xc3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4Wo1Fu
ovOwdFVTo6FMuvU5QdFEMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB
RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0
Mm8wSjU2clpnc2dMYk9yYWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAApprU9c2uL3t5CkWYujoykT5LT62l0/0/36tRx2w+kUO8r3tofWXTrXLuuCU
HXbbTkNID463dQoLmQFZDFXM/sMGe2NBiiX/Q4lKkFXzII4ScHYWedTs1Z2zskMF
0mnhXFVinUZS0SBb80WcAgw20jsGFoNgtjL1xdXggVU9VYVx58gI2CALGjHz02Kg
eX5KKknvAevVdv35w8ujYOWwBUjLZyXk8q6dfys9za5EwlDvUmwbfk8JAnpTJmg0
B0JpkxqshjtBHZXQKGbiGC40c8ncu8v2aMnxC2QjjoHye3BvwuwWNvO1QA34CxRC
pXiQGnko1783SM9Oz5u6IzZXLQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:23:15 2026 by rpki-client