Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier:          EemDeDZJ8m1oP2AaeBfmSr5FNGBYOLgBrPELAjny6L0=
Subject key identifier:   09:F7:10:A5:71:C8:EE:4A:AA:B8:7D:B3:6D:82:43:9B:23:BB:6A:40
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       056E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number:          0553
Signing time:             Fri 12 Jun 2026 20:26:02 +0000
Manifest this update:     Fri 12 Jun 2026 20:26:02 +0000
Manifest next update:     Fri 19 Jun 2026 20:26:02 +0000
Files and hashes:         1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: tH+SaE4V64L0SbXSLNZCUeOgljKfjOGVBhGMlXRv1ow=)
                          2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: Q9fK/HIBESDBwerI+LGeuA1a/3ibrPdtmUfxDWX3vMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Jun 12 20:26:02 2026 GMT
            Not After : Jun 19 20:26:02 2026 GMT
        Subject: CN=6a2c6b5a-f910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:d0:e0:74:64:1f:55:89:4f:53:df:f2:d6:
                    c8:99:75:05:da:48:c6:5d:cc:1f:a9:70:8f:fc:15:
                    08:41:9e:34:d7:3f:e1:e5:db:dd:a3:c2:06:c5:e0:
                    a5:ac:4a:43:13:7e:02:27:e5:f9:86:83:ac:5d:24:
                    93:44:aa:a0:5c:86:96:9e:8b:26:e6:7d:6f:df:5f:
                    f1:bb:49:65:f1:1a:b0:2b:bd:1b:57:ab:3b:8c:27:
                    85:61:20:a1:b7:6d:f6:68:20:10:26:77:e3:ac:7b:
                    5e:d6:ea:19:3a:64:f3:da:78:c3:98:04:81:dc:1b:
                    73:1d:9f:d8:f3:11:54:96:2b:de:12:0c:c6:4c:18:
                    85:84:d4:8d:c2:72:6d:64:3c:81:a5:a2:77:e4:1b:
                    1a:82:95:e1:d8:0c:b5:f2:72:7c:a3:e8:bb:84:28:
                    4c:37:ca:07:40:c8:fb:e7:a6:8d:62:31:d6:fe:68:
                    85:1a:bb:0f:76:66:c4:bd:a4:bb:79:57:21:d2:a8:
                    8e:7e:ba:1a:48:6b:62:cc:6d:af:8e:37:cb:e9:9b:
                    3a:b4:24:79:8e:ee:e9:fd:88:e2:db:b2:96:6b:f5:
                    30:01:9f:72:24:b3:60:45:88:59:cc:77:9c:e2:0e:
                    99:56:e0:9a:d4:8f:21:d7:ee:2d:f0:52:94:b3:79:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F7:10:A5:71:C8:EE:4A:AA:B8:7D:B3:6D:82:43:9B:23:BB:6A:40
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5d:a7:b2:4e:19:58:98:f2:36:c8:69:f4:88:0a:c9:1c:ad:
         de:34:75:59:10:36:be:29:f4:95:62:64:3e:ed:ae:9a:7c:c1:
         aa:05:2f:2e:2f:e8:1f:19:f3:35:ad:6c:aa:56:e3:d4:b9:27:
         90:38:eb:f3:0f:29:c2:c7:7e:cc:6a:23:8e:17:7d:a9:ff:b1:
         30:de:2b:8e:40:b0:ae:25:90:e2:58:09:f6:e5:ba:f8:f0:ce:
         6d:38:9f:bb:86:23:ed:ce:82:14:59:02:f8:bf:08:3c:de:98:
         ba:fe:00:f4:0a:4e:15:f7:ec:80:59:20:8b:ee:43:03:e5:6f:
         71:14:83:8c:2d:f0:93:45:65:3c:7c:1f:ca:d8:a9:84:10:26:
         29:9b:e0:36:d0:f9:0f:96:48:7b:26:29:e2:86:e3:b7:e9:df:
         e0:37:50:f3:4e:6d:15:50:27:8b:3d:cd:a7:53:76:a2:d3:41:
         1f:b9:48:63:07:fb:31:57:2c:ea:4d:0b:94:10:e6:9e:47:54:
         79:43:58:73:fe:63:10:0e:21:bc:b5:fd:db:ec:d3:86:c6:54:
         d0:7a:37:dd:14:d1:c0:d1:99:f2:12:b9:c1:15:20:bb:e2:d4:
         4f:60:bb:71:20:7f:25:94:3b:da:0a:85:9a:0d:74:35:0b:68:
         98:45:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:31 2026 by rpki-client