Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
File:                     N2LeNhaqS6BLeurLVIuGpi5vFw4.mft (raw, json)
Hash identifier:          NGZ1eLKDZHYpF6uPk7nJSQYzyrBashdg8b3HjiC413s=
Subject key identifier:   79:FB:C7:9A:69:1D:97:20:A3:CD:26:14:E1:8F:55:22:34:91:AE:BB
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Certificate issuer:       /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
Manifest number:          3A
Signing time:             Tue 12 May 2026 02:54:12 +0000
Manifest this update:     Tue 12 May 2026 02:54:11 +0000
Manifest next update:     Tue 19 May 2026 02:54:11 +0000
Files and hashes:         1: N2LeNhaqS6BLeurLVIuGpi5vFw4.crl (hash: Zs9G0vKKOACS7CvHx0cbFvOnPL+2dRmmzk7V5gpB/W8=)
                          2: AA175058274911F1878D13C8B4833773.roa (hash: kTIz7rz7OZ8EQKnSrQuhCggmlAoEm989ju8R+p6peKU=)
                          3: D7E35D8A4DAD11F1962E9D16A8833773.roa (hash: dZnVkJ9Du+NonF+jeiJKKDTcwr6+Gn8YtN3j2dsH8mI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
                          rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 02:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
        Validity
            Not Before: May 12 02:54:11 2026 GMT
            Not After : May 19 02:54:11 2026 GMT
        Subject: CN=6a029653-b376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:9f:8d:2b:b1:0a:9c:6b:f0:2f:17:ac:53:
                    3b:b6:fb:70:f0:77:a5:c8:0c:d6:8e:14:f9:4b:04:
                    f4:c5:5a:1e:a0:b1:cd:b4:c1:29:ed:b9:ee:0c:b9:
                    f9:89:e3:b9:ae:f2:3b:da:92:dc:30:e4:2e:ac:3b:
                    64:d6:53:f9:58:37:24:9e:26:5b:cf:11:3d:7e:6a:
                    fa:c2:d7:d9:1f:ef:c6:ff:f7:33:e2:f2:61:4b:89:
                    26:50:d3:5c:61:92:d4:cb:2c:0d:b4:51:62:7e:e9:
                    8a:e5:b5:ca:82:ad:68:39:08:ee:cc:ad:8a:2e:57:
                    9a:47:e3:de:32:f9:46:d0:24:18:7a:57:b7:c1:7d:
                    96:ae:16:04:1f:c6:3c:2b:28:ca:8f:4b:ec:5e:f0:
                    a2:90:4a:e8:ee:ce:c8:ca:5f:f7:23:b5:3d:1e:de:
                    51:53:5c:48:fe:42:e7:2f:96:10:46:fd:a9:10:8e:
                    82:b6:a6:58:55:29:55:aa:ea:77:ef:1c:7d:73:1e:
                    c5:54:62:dc:75:9c:ee:c9:4a:f4:e2:6d:99:9f:3d:
                    f8:74:03:b0:74:38:7d:1c:60:0e:1d:3a:d0:b7:f7:
                    03:42:af:40:4b:30:e8:be:04:90:d2:06:ff:44:e9:
                    1c:7f:cc:91:df:34:40:4d:86:ba:63:8c:d6:93:e9:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:C7:9A:69:1D:97:20:A3:CD:26:14:E1:8F:55:22:34:91:AE:BB
            X509v3 Authority Key Identifier:
                keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:89:63:ed:f7:e7:4a:04:fb:eb:78:99:90:5e:f0:61:ac:
         c7:cc:8c:77:24:94:f7:4e:71:bf:3d:af:f4:dd:b9:b4:8d:0f:
         31:d3:d2:a6:0a:26:76:99:bb:09:0a:71:36:91:6c:66:1d:a9:
         18:84:36:a7:ac:07:38:09:f0:bc:99:a6:00:81:2f:9e:62:9c:
         88:52:ee:d5:0b:cd:3b:45:a6:0b:62:95:3c:11:4d:a3:13:84:
         18:fd:06:49:23:9c:a1:98:ab:a8:18:b7:74:03:fd:e6:d4:0c:
         20:56:da:5a:37:bc:82:15:4a:2b:3c:b0:8f:09:eb:85:cd:8b:
         99:88:d9:6c:1f:f7:90:2d:3a:24:a2:ff:f2:9b:04:00:24:a0:
         52:6b:d6:14:a8:d4:60:97:67:4d:d8:2a:32:8e:e9:1d:c6:05:
         55:c3:33:e7:16:51:ab:23:e8:af:52:69:a5:87:6c:5b:7f:ff:
         a2:9f:26:48:52:04:a5:f4:87:26:b7:ef:78:03:8f:d1:c4:28:
         05:63:82:4e:ab:70:d0:9e:45:47:f5:03:85:29:72:0b:7b:3b:
         fa:ab:b3:42:40:9c:86:72:97:32:be:65:b7:ba:58:9b:76:70:
         24:f4:5e:e1:43:e1:5c:e7:6d:44:44:bf:d8:bc:35:a3:a1:89:
         b9:6c:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:13:59 2026 by rpki-client