Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
File:                     p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft (raw, json)
Hash identifier:          jp8g14BMdXi1nQgzJD6cHQTXoACXyVOMF8JPxueVGf0=
Subject key identifier:   69:AA:BD:B6:81:7A:F7:7C:E9:BD:CC:B7:3D:55:74:A2:DF:8A:EF:4F
Authority key identifier: A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
Certificate issuer:       /CN=A916A78A/serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
Manifest number:          34
Signing time:             Wed 17 Jun 2026 08:54:00 +0000
Manifest this update:     Wed 17 Jun 2026 08:53:59 +0000
Manifest next update:     Wed 24 Jun 2026 08:53:59 +0000
Files and hashes:         1: p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl (hash: kdT//VgA3vI1hOoPBAEi18u4DAHeirFoN0MWEFasz+Y=)
                          2: 0997DA40251811F19187E6B0C0833773.roa (hash: EBehWsJCDzKDmD+oQkR35+7/S/sLkeR1I1PxlnGdMJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
                          rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A78A, serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
        Validity
            Not Before: Jun 17 08:53:59 2026 GMT
            Not After : Jun 24 08:53:59 2026 GMT
        Subject: CN=6a3260a8-bc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:24:fb:26:52:fb:c1:fa:d8:70:61:d2:66:
                    a8:b6:e8:f4:b6:00:75:dd:ee:8b:a6:02:b6:fe:70:
                    5c:c2:e5:44:64:1e:40:15:70:e3:5e:e1:93:06:8d:
                    f0:c8:bd:2c:b2:24:89:65:fa:f0:6b:c2:5f:32:0d:
                    a4:06:60:d0:dc:2d:53:50:93:22:21:d2:37:8c:ea:
                    49:46:d1:64:a6:ba:5a:1c:43:97:33:64:33:cf:3d:
                    36:cb:a9:ac:b3:5b:de:55:38:94:d8:85:6a:b8:55:
                    b2:c9:9b:fc:25:55:7a:8c:97:64:6e:74:db:5c:e8:
                    4b:a8:19:2b:e3:79:d8:03:58:fe:3b:ff:99:f5:be:
                    09:ea:ca:87:ea:9f:48:66:c1:ac:45:3e:96:12:34:
                    6e:58:5b:05:0d:b5:5f:52:52:85:56:91:e2:f3:b8:
                    90:39:f0:a8:1c:6d:8b:61:bf:33:4b:cc:ac:da:f0:
                    84:9d:ac:e9:00:68:8a:aa:84:17:4e:60:9a:8f:3e:
                    4e:d6:10:e2:d2:a8:59:d4:fc:da:99:7f:49:20:cb:
                    ff:18:a4:23:b6:f2:e7:4f:da:0b:5d:bf:6e:1f:24:
                    96:0c:ba:a7:f8:88:ae:55:eb:a0:34:88:78:a4:9b:
                    34:03:df:1f:44:7a:3a:55:d3:9d:4a:5f:6f:aa:3a:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AA:BD:B6:81:7A:F7:7C:E9:BD:CC:B7:3D:55:74:A2:DF:8A:EF:4F
            X509v3 Authority Key Identifier:
                keyid:A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:a8:c4:b5:60:60:2d:87:56:43:49:ba:c3:0b:94:ea:11:
         59:f7:5c:f4:f6:8b:27:95:20:dc:39:9c:ef:53:b1:0f:b0:da:
         9c:9a:35:f9:c7:d7:64:de:5b:62:55:98:76:69:32:8a:98:59:
         f1:d3:37:64:98:b5:dc:1b:6b:30:c8:57:f3:df:0f:a2:5f:04:
         9b:81:11:16:68:30:52:8d:ed:3f:c5:5f:b4:24:e5:0e:98:a4:
         2b:bb:90:55:a3:4e:df:c6:fa:3f:c4:92:31:fd:95:1d:bc:d1:
         da:3a:db:b3:61:69:c6:86:21:a6:4e:94:00:18:f0:41:db:0f:
         25:92:03:0d:5d:34:10:2e:8c:80:fb:de:9c:19:71:40:d8:88:
         f7:ff:89:3a:9a:87:8f:89:11:c9:83:96:ab:6d:83:b2:c9:86:
         14:0b:30:f4:99:df:64:40:7a:62:81:f8:96:a7:94:92:0e:81:
         04:35:1c:b5:84:84:e6:e2:ad:9a:59:99:17:fd:c5:30:c8:52:
         0a:ca:58:a7:d4:c3:56:ea:80:dc:f0:f6:85:d5:4c:39:99:f0:
         04:c5:0a:c4:8d:ba:90:b3:e1:ff:16:1f:1a:83:70:99:70:2e:
         9f:53:f2:eb:bd:9c:79:8e:3e:c1:e0:92:c0:59:e0:bd:31:8a:
         1f:d5:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:35:27 2026 by rpki-client