Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
File:                     aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json)
Hash identifier:          65NbjPCWetiazADiQmsiMmvCB1vLExF+eh2H+qqZFdU=
Subject key identifier:   32:09:78:20:24:11:88:0E:0B:B3:FA:7C:8F:52:BD:F4:AB:B7:31:BF
Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
Certificate issuer:       /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
Manifest number:          5B
Signing time:             Sat 13 Jun 2026 08:14:13 +0000
Manifest this update:     Sat 13 Jun 2026 08:14:13 +0000
Manifest next update:     Sat 20 Jun 2026 08:14:13 +0000
Files and hashes:         1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: +BJrcKEUqJgFhL8Pf5SnuFMs37qqZy71r2jzHEH3FMA=)
                          2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
                          rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
        Validity
            Not Before: Jun 13 08:14:13 2026 GMT
            Not After : Jun 20 08:14:13 2026 GMT
        Subject: CN=6a2d1155-9dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:57:ab:68:b9:47:4d:a6:7e:df:2a:58:28:
                    cf:ec:33:ca:62:b0:0e:d4:f4:c9:04:5d:52:27:98:
                    5c:e9:d4:7a:24:a7:f4:6b:ed:cf:f3:20:16:a1:97:
                    7b:80:58:a7:e0:5d:9d:5f:5a:7e:84:1d:19:42:7e:
                    bd:b3:ca:52:aa:18:a0:08:12:23:71:6a:3a:b6:4e:
                    e5:6f:00:0d:08:06:8f:9e:bf:25:5e:1d:1c:2f:df:
                    0e:58:28:ef:08:7d:f7:2d:e2:27:93:d7:77:50:d5:
                    3f:7a:5e:33:96:17:c6:a9:2a:59:e5:6c:58:a4:65:
                    2f:6f:64:46:5b:11:7c:82:bd:46:ff:d6:36:4f:08:
                    e7:4b:ba:85:cf:ce:58:33:bc:52:9a:e1:dd:5e:b6:
                    7c:30:ae:96:6f:4b:10:7a:6f:99:53:c7:78:9c:f5:
                    4f:50:0f:87:86:70:e4:60:68:32:1d:3a:a7:22:b6:
                    27:0c:b8:89:86:6a:7a:f7:83:ea:4b:4d:2a:ae:6c:
                    36:ee:91:bd:d6:68:cf:2d:8e:41:9b:81:9a:19:c2:
                    ab:3e:b3:a0:2b:65:34:e3:3d:14:a2:c6:b4:aa:a8:
                    85:cb:97:db:dc:91:52:3d:af:ea:b1:b5:e6:fa:6d:
                    44:52:13:6e:38:fa:f7:2a:c5:b6:48:f3:46:11:cd:
                    93:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:09:78:20:24:11:88:0E:0B:B3:FA:7C:8F:52:BD:F4:AB:B7:31:BF
            X509v3 Authority Key Identifier:
                keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ef:8e:bd:d9:ab:d5:96:1a:34:a1:91:9a:59:52:ca:cf:65:
         07:c7:c9:0f:b3:8c:e6:cb:8d:7c:f7:35:dd:8d:49:99:96:33:
         ab:9e:45:e0:56:fa:f6:8c:43:bc:b9:6a:3f:3d:3a:1b:39:73:
         65:25:98:a3:b3:69:4c:70:ab:00:6c:8c:bd:3b:5d:b2:77:fb:
         2d:5f:26:7f:62:75:71:28:2b:c2:b5:e3:bc:ec:97:f3:a9:b6:
         5d:0e:48:02:43:81:19:ee:35:aa:cf:be:aa:d3:be:ba:ca:a9:
         17:40:03:5a:e3:21:7d:86:b4:14:1f:dd:91:37:98:6a:2a:31:
         21:e1:fd:8e:d0:ab:c0:f3:9e:b0:18:59:09:73:0b:ec:59:9d:
         0c:c7:b5:1e:a3:c0:8f:22:5e:28:c1:e3:c1:cb:9a:3b:b0:ae:
         9e:21:6e:f1:b9:ff:93:08:be:13:4f:62:63:09:5d:6f:c1:6c:
         ed:73:11:04:69:2b:84:5f:c2:45:9b:a0:8a:75:bd:6e:64:44:
         07:1d:b0:6a:bd:7b:8c:04:f1:e0:00:32:a9:ba:37:05:9a:b4:
         df:d0:79:d4:d7:31:b5:e7:c0:46:e6:99:92:bc:ea:55:e6:85:
         46:c5:83:0c:c4:31:61:f9:1c:97:a9:11:d9:53:07:c1:57:d5:
         27:b9:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:05:31 2026 by rpki-client