Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
File:                     u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json)
Hash identifier:          VK8yT7UX+6HECBxcH30EDpkIiDPFodZJjaO2rEokxp0=
Subject key identifier:   EB:74:9D:92:AE:6E:C8:BF:4D:B3:EE:16:53:A8:2A:F4:F2:CF:DD:7E
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Certificate issuer:       /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial:       19CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
Manifest number:          198D
Signing time:             Fri 12 Jun 2026 16:23:43 +0000
Manifest this update:     Fri 12 Jun 2026 16:23:42 +0000
Manifest next update:     Fri 19 Jun 2026 16:23:42 +0000
Files and hashes:         1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: YaCQv9S3Yxo4EJZ11GyhfZThy+22PTujMnR6nsN6/m8=)
                          2: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: sxrPqnbF6T43GAzl7GDJj3PzJSHlDC7K4T4ROo3CtKo=)
                          3: 3BC16A0C5B4811F182614DE994833773.roa (hash: j1ZHgprZt5D6ye8dPtuzBjBeTD9Ha7NH8jbgaxgrm7s=)
                          4: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: kZ0uphZPyCd+wbYNkHA1SsHf26EQjAMAFcs0tjZEC/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
                          rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6603 (0x19cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
        Validity
            Not Before: Jun 12 16:23:42 2026 GMT
            Not After : Jun 19 16:23:42 2026 GMT
        Subject: CN=6a2c328f-7dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e8:74:2a:e6:48:a3:50:f1:f0:94:94:c5:0f:
                    9e:0c:ef:3d:c5:40:59:76:05:3b:9e:66:c6:c8:cf:
                    fc:5b:50:b5:c9:50:6d:80:40:ae:72:71:a5:d8:69:
                    97:0a:e7:17:16:b9:b2:88:60:36:ef:b6:b7:71:03:
                    c6:93:ba:6b:f0:78:aa:53:a9:02:f3:11:b2:de:1c:
                    c6:0f:2f:61:c6:e8:a9:26:c0:22:23:86:6a:77:b9:
                    54:9a:a4:08:45:1a:18:d9:87:95:53:22:d4:0e:5e:
                    eb:27:bb:b5:41:bc:3b:ce:8d:b9:8b:40:2f:36:f1:
                    d3:79:18:b6:81:d3:be:09:8e:1e:2d:12:56:da:fb:
                    6f:12:52:f0:f2:de:d8:02:4f:a3:19:16:ec:ab:12:
                    61:45:8c:fe:28:74:c5:cf:c9:29:9f:8f:7c:ed:f8:
                    50:c5:d5:09:09:f3:16:66:73:03:d8:e5:ba:aa:66:
                    71:e1:3b:d7:07:30:14:07:17:20:14:b5:c2:e2:53:
                    04:c0:d4:2c:e7:ec:83:c8:56:09:3f:ee:bf:cf:4d:
                    66:cf:b3:7e:b6:ca:ee:1d:7b:09:ab:8d:23:40:62:
                    3e:03:6e:14:c6:92:82:cf:8e:d8:c4:6b:df:2f:0e:
                    2a:ad:9a:35:f2:ae:59:11:61:b1:60:82:1a:bc:f7:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:74:9D:92:AE:6E:C8:BF:4D:B3:EE:16:53:A8:2A:F4:F2:CF:DD:7E
            X509v3 Authority Key Identifier:
                keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f3:6c:8d:c6:f6:89:22:40:25:6d:45:cf:4b:2e:19:4d:b7:
         e3:81:e4:9f:02:2a:cb:0a:4a:7f:37:23:70:bd:ba:2f:f2:74:
         06:d1:06:47:5e:34:83:72:78:f4:24:1d:71:a9:eb:43:e1:8b:
         f6:bf:a8:cc:e6:b8:09:1e:1b:36:41:2a:8d:96:12:5a:52:77:
         f4:8b:68:c2:a2:b2:44:8a:30:69:90:08:b8:69:95:14:7c:b8:
         3c:3d:b6:75:2d:0d:5f:86:77:e7:74:ae:4e:b0:31:fc:00:59:
         29:94:90:96:ae:37:cf:4b:07:92:08:87:47:0e:8d:a5:51:6d:
         f7:d4:d6:a7:18:7d:70:50:68:56:d5:8a:44:b2:be:02:60:41:
         03:dd:d7:3e:ac:72:70:e9:2e:2c:ca:8d:c6:e9:f6:31:b1:ad:
         e7:f2:62:e9:05:d3:0a:c8:5e:2d:48:ba:80:94:49:9d:a0:e6:
         e6:0f:09:a2:b4:c4:38:65:08:25:c1:55:49:8d:75:15:71:8b:
         3b:1a:39:98:9b:91:df:bf:46:26:47:42:51:a3:8f:2b:9d:c9:
         f9:ae:86:a1:e1:7d:85:6e:fa:a4:f6:bf:30:27:1e:7a:7d:17:
         4a:fe:58:f3:84:26:8c:8a:6b:ab:33:c6:1f:bd:00:51:1c:9f:
         25:af:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:04:22 2026 by rpki-client