Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File:                     z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier:          Kp6eaObKpJxrBbPV9YhqhmhMn7hBZMpq6yT/c/7iwEo=
Subject key identifier:   FA:FB:7E:CF:B8:FF:DB:31:0C:F9:EA:13:7C:3C:33:38:46:FC:EF:6A
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer:       /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial:       3576
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number:          354B
Signing time:             Tue 12 May 2026 14:28:46 +0000
Manifest this update:     Tue 12 May 2026 14:28:46 +0000
Manifest next update:     Tue 19 May 2026 14:28:46 +0000
Files and hashes:         1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: tpQiEVoq55mfskwcE3+QGOj27TB9KCneSFn2G3XCxH0=)
                          2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=)
                          3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=)
                          4: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=)
                          5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=)
                          6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=)
                          7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=)
                          8: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=)
                          9: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13686 (0x3576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
        Validity
            Not Before: May 12 14:28:46 2026 GMT
            Not After : May 19 14:28:46 2026 GMT
        Subject: CN=6a03391e-cc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:cb:11:00:2b:6b:13:9f:9d:59:8e:f6:50:
                    29:2d:bd:b5:1d:d2:87:ee:db:de:34:54:5f:e9:7b:
                    da:8e:ed:81:cf:2a:5c:60:e5:72:88:2b:cd:0c:74:
                    67:3d:69:fc:88:25:96:6a:85:ff:f5:e1:32:de:bf:
                    e9:62:47:38:da:40:e5:e0:46:60:ce:39:16:2b:18:
                    89:24:ac:c8:14:d3:e4:11:70:7a:e9:d6:a6:9c:f6:
                    d3:81:09:a3:2c:e4:8d:a1:02:e2:30:d9:1e:90:3e:
                    21:ec:ba:ce:42:e4:9b:74:f3:85:b6:ba:58:1b:0d:
                    bc:19:52:06:f2:74:09:8c:ca:c5:cc:28:f9:43:3b:
                    15:bd:61:e0:1a:17:6f:e3:88:68:79:b9:91:84:86:
                    30:4b:62:4e:4d:35:77:4a:e6:10:87:0d:6a:d5:82:
                    55:9b:8c:00:5c:5e:72:da:73:7e:5a:27:90:66:62:
                    0a:d2:ec:99:39:ec:84:52:4f:df:d3:44:cd:a0:65:
                    2c:a1:4d:23:59:97:28:1c:c1:4a:0c:0d:fc:7d:31:
                    3f:48:24:73:7a:87:b3:f4:88:91:50:3f:6c:a4:ea:
                    8d:fa:18:b4:bb:e2:91:d9:6d:a6:53:e4:59:11:37:
                    14:c8:ab:d2:22:a1:7c:80:df:38:a4:48:ff:4c:26:
                    f4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:7E:CF:B8:FF:DB:31:0C:F9:EA:13:7C:3C:33:38:46:FC:EF:6A
            X509v3 Authority Key Identifier:
                keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:5c:15:e9:40:5e:7b:55:f4:da:d7:f3:80:ac:88:ef:23:
         21:b7:83:06:eb:14:58:9a:10:8b:24:30:51:05:46:60:92:a2:
         6e:c7:56:3f:fa:d4:1c:aa:f0:82:6d:f1:58:9c:c7:d6:32:a6:
         a3:86:73:6f:44:4e:90:b9:9a:ff:b4:f3:15:d3:8d:e4:34:67:
         29:ba:5e:92:fa:1b:64:23:2a:3a:cd:bd:b3:b9:cb:31:05:8e:
         f6:e7:c6:6f:c2:69:d2:42:fc:86:52:1c:27:33:74:7e:57:3c:
         32:e8:60:8e:0c:b7:32:42:3f:24:9c:29:e2:4c:d1:fa:d9:9b:
         04:15:51:f1:b4:f1:36:d4:13:a0:31:ba:cb:35:78:9a:0f:5c:
         62:f1:6b:25:36:26:b8:7f:3c:43:e4:ea:e2:9f:b1:8a:c0:b5:
         57:0e:be:86:56:7d:12:01:59:87:6c:5e:43:3f:78:f4:40:a6:
         01:98:60:b4:c9:a4:28:ec:27:8c:c7:87:05:de:a7:cd:97:cc:
         1d:6a:f3:e8:82:3e:6d:4e:b9:95:51:34:af:e5:89:dc:fb:2c:
         79:42:e1:67:79:34:a0:d1:b6:9c:95:f0:1c:0f:b1:9b:d1:c6:
         ce:49:37:e7:57:c4:d5:8b:ae:80:7b:70:88:2f:d2:65:0a:cd:
         6b:4a:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:28 2026 by rpki-client