Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File:                     5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier:          Yqnq2IT7Yva1iOvPXZyPsMUSR0zE6bfaZJhHPofykUs=
Subject key identifier:   AE:F8:B4:93:76:B9:0F:20:C8:72:94:88:3B:62:99:68:8E:94:39:55
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer:       /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial:       0481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number:          0454
Signing time:             Sat 13 Jun 2026 00:19:36 +0000
Manifest this update:     Sat 13 Jun 2026 00:19:35 +0000
Manifest next update:     Sat 20 Jun 2026 00:19:35 +0000
Files and hashes:         1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: VHMQPRyOGO7wA32fCVaHa1uRzuQTtYp/oc9fZd/HAwk=)
                          2: C8165660822F11EEABA7D533C4F9AE02.roa (hash: TWI7/AHi80APjR4S5j80I9E6yRO+kebGNcad/BHi2Mc=)
                          3: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: 8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
        Validity
            Not Before: Jun 13 00:19:35 2026 GMT
            Not After : Jun 20 00:19:35 2026 GMT
        Subject: CN=6a2ca218-b0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:0c:ac:a4:b4:6d:23:15:83:54:75:92:b7:
                    48:61:ad:11:ff:e2:d7:50:e0:15:db:12:8a:73:d5:
                    1d:d8:fe:22:1f:60:84:fb:1b:18:33:9d:08:d5:66:
                    74:1c:fa:59:20:55:e8:c3:15:5b:10:42:d5:5b:dd:
                    f8:85:27:d1:a0:c6:92:86:22:84:e8:b4:5b:b6:8e:
                    8f:e0:74:63:8b:41:44:76:d4:2b:d2:6b:18:ae:30:
                    fa:26:26:d8:26:32:b4:a8:ab:9b:59:40:9b:87:75:
                    bd:0c:ed:60:79:48:e9:34:6b:45:3f:1c:be:0e:f0:
                    7d:93:e0:0a:82:af:69:10:93:ac:d4:90:06:ea:94:
                    ce:5d:f6:fc:1f:76:d6:8f:23:9d:4b:71:2c:af:c5:
                    30:bb:5c:a4:03:fc:1c:d7:ff:d5:2d:ff:30:c0:31:
                    c3:1a:2c:e5:19:7b:83:6b:f6:31:06:16:19:22:54:
                    45:c9:9c:f4:b5:9e:44:25:a3:75:b0:59:8e:19:5d:
                    8c:fe:df:57:9f:1c:80:b0:3d:6a:7f:3d:9c:05:ba:
                    97:15:fd:52:70:1b:42:44:0b:30:37:0e:c2:e2:6d:
                    6a:a2:75:b5:47:26:09:dd:14:eb:b0:db:91:18:ec:
                    15:8d:cf:51:98:85:f5:19:cc:ba:cf:e0:b2:85:a4:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F8:B4:93:76:B9:0F:20:C8:72:94:88:3B:62:99:68:8E:94:39:55
            X509v3 Authority Key Identifier:
                keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c9:bb:97:cd:c8:d7:e6:c7:db:1a:96:87:a8:95:d1:68:fa:
         d1:55:35:03:5e:3e:cb:3e:20:8e:cd:ba:58:a7:f6:7f:fd:70:
         1f:0d:a1:8a:aa:19:73:cc:d4:98:70:dc:25:b0:5a:6b:99:d9:
         00:0a:53:be:88:ca:12:20:89:98:39:71:aa:45:c0:74:77:b5:
         2b:39:21:fb:f7:fa:90:03:fb:42:48:f1:54:e5:6c:01:15:96:
         b1:a9:89:37:80:7a:1c:87:c5:b5:37:49:44:90:a3:37:1f:7d:
         72:9e:5b:55:fb:15:2f:d6:05:84:e5:24:07:f6:cb:c6:7d:d2:
         a2:cc:5e:64:16:a5:10:41:10:1d:25:8e:20:00:5d:b1:4b:ab:
         6c:0b:9a:d9:34:70:92:12:2f:07:9d:84:b7:0e:c6:79:29:dc:
         01:ae:2b:b2:7d:c5:05:6e:19:c6:a9:ca:0e:7e:21:36:79:fa:
         a2:b4:5e:12:3e:82:01:4f:1e:e9:52:79:8a:8f:36:d0:37:a8:
         31:56:91:0a:66:0d:fc:0f:42:91:0d:d0:65:f4:4e:14:47:a6:
         a9:d2:28:44:07:e9:ce:60:30:35:08:22:ef:66:b2:f5:40:8f:
         1b:7b:b2:93:cf:09:43:2b:1c:a9:fa:42:46:2d:25:2d:c7:7e:
         80:59:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:29 2026 by rpki-client