Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File:                     5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier:          p1oyiZV3J95hz/1C61Ogcw8Olh1Vb0X4DkMNf+GP/xA=
Subject key identifier:   6E:38:2A:47:68:CC:A3:6D:6F:DD:70:FD:15:76:8C:C0:FD:62:C2:7D
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number:          0211
Signing time:             Wed 17 Jun 2026 03:05:09 +0000
Manifest this update:     Wed 17 Jun 2026 03:05:08 +0000
Manifest next update:     Wed 24 Jun 2026 03:05:08 +0000
Files and hashes:         1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: t++GqeOFalZ/2fQRau4RSVuWBYUZhnDSzV3F4MmLRlY=)
                          2: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: 6zxbQD4gzRXvOfYhZXYB2uRI1fOm5dIZfKC/EQTi2Js=)
                          3: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: bSvC5EUhsAfmDzVmgucGYFQBCurrkXi4UpC3IDQOZ70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: Jun 17 03:05:08 2026 GMT
            Not After : Jun 24 03:05:08 2026 GMT
        Subject: CN=6a320ee4-4ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:95:be:07:2d:c7:54:12:89:f0:ed:2b:cd:
                    b4:16:b9:51:b3:ba:8b:99:4e:53:53:35:59:aa:25:
                    b0:96:de:2b:50:8b:40:6f:98:1f:ed:f3:70:94:ec:
                    c1:a0:51:5d:07:3a:6f:e1:88:14:a1:1b:01:6e:0e:
                    ba:b7:cf:b6:3c:46:47:b4:19:7a:87:c0:0a:97:93:
                    46:07:99:46:e2:d9:6c:2c:f1:75:85:02:de:ee:5a:
                    38:e2:82:22:a4:ca:3a:c7:4a:f9:e5:51:fb:1b:11:
                    44:09:3b:e2:29:72:5f:8a:fc:5c:d1:f2:a8:22:f3:
                    f2:39:ce:5c:35:50:a5:83:69:c4:ee:cc:97:2c:63:
                    2b:83:57:9b:b8:0c:53:5c:5f:36:9f:b6:7a:69:fd:
                    30:50:a5:2c:8c:d3:8f:69:e0:1b:db:ef:79:89:d9:
                    2c:55:a9:b8:b7:d4:e7:31:c2:16:65:48:74:76:37:
                    52:93:53:6f:b2:24:0f:3a:9b:9e:e2:0f:c0:36:5a:
                    78:44:b1:fa:52:18:27:91:ca:e6:d5:0a:4e:48:be:
                    c6:d3:77:a2:08:57:76:ae:98:e8:22:be:48:a5:e5:
                    a6:da:3a:91:d1:88:29:74:6b:5a:93:19:f9:7b:ab:
                    9f:84:23:d1:93:5d:54:32:0d:83:83:ed:ba:cb:06:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:38:2A:47:68:CC:A3:6D:6F:DD:70:FD:15:76:8C:C0:FD:62:C2:7D
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:5b:ab:c1:e2:99:76:cd:87:9b:b0:16:4f:d2:5a:4e:60:
         6c:d3:f8:04:fb:34:08:25:4d:96:67:bb:0f:08:6e:21:0f:f7:
         d9:eb:68:5b:34:b7:d5:4b:e0:c8:af:64:e0:cd:d3:e2:66:93:
         66:f9:a7:e5:c9:d7:81:8f:30:bf:e4:f0:bc:95:b0:45:57:6c:
         b7:0c:e1:c9:5b:62:9e:64:93:f3:c4:f5:9c:0b:af:8a:84:16:
         86:18:dc:e7:0b:ff:5b:04:56:31:32:ad:03:ac:ca:8a:27:c1:
         96:80:8b:18:e0:e6:4b:35:bd:d5:e5:22:47:41:ae:03:23:a9:
         d9:de:b7:c1:e6:19:08:29:ee:8d:7e:7c:d5:a1:66:7c:fa:52:
         86:22:91:da:a5:d0:c5:43:f4:06:3d:73:13:26:f2:28:e8:7e:
         e7:54:78:78:62:f0:8b:89:ee:35:5d:c0:20:19:c7:7c:ae:bf:
         01:6e:19:c3:93:4c:fb:92:8b:c9:05:32:8e:3e:3a:82:3c:b4:
         7e:dd:ff:12:ab:8d:4c:a0:08:88:74:53:e3:4b:8d:cd:dc:18:
         ca:7e:4a:6f:62:0f:6d:c8:dd:20:9d:50:86:c4:c6:1c:e9:98:
         33:e5:59:c1:e8:f1:75:7c:9e:11:94:a9:61:c7:ca:04:ce:f4:
         2b:dd:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:02:35 2026 by rpki-client