Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File:                     -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier:          B6XvGkdaIIaagT5/Dp6fG3u9CIPxQQYMrtDXhtstCCQ=
Subject key identifier:   03:5D:82:1F:71:30:70:24:1C:FC:4C:0E:41:B1:6A:F7:A2:AF:56:99
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer:       /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial:       062A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number:          060A
Signing time:             Fri 12 Jun 2026 23:01:27 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:27 +0000
Manifest next update:     Fri 19 Jun 2026 23:01:27 +0000
Files and hashes:         1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: Gl9D387CS5wihUTmrg5LEJJS9/9EzWRvWSwvzg3mnwM=)
                          2: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: 99SBr5WJIbWwpgEc6hwr9lvi4BLubRre2gvekG03kuo=)
                          3: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: sXo/EfCy1P1hXgj+XVBKjDkQi4E974lDfTItj2KXQOc=)
                          4: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: ME2B8uuD8K+ZGXPv64QmrsnI4TiGRtKbpWpIh4aJJVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
        Validity
            Not Before: Jun 12 23:01:27 2026 GMT
            Not After : Jun 19 23:01:27 2026 GMT
        Subject: CN=6a2c8fc7-7aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:85:b2:3f:cc:01:c5:d3:ee:31:b7:59:c5:
                    40:95:f1:e5:93:fb:b5:f8:15:fe:d0:af:aa:1b:fe:
                    c0:b8:a9:c1:3d:6b:68:35:ba:3b:49:f4:c2:c7:29:
                    43:89:b4:cb:57:4d:dc:15:49:1a:b7:06:5b:5f:5c:
                    6e:72:4f:30:57:17:1d:0d:00:85:22:81:a8:8f:e1:
                    3a:dc:3b:f3:f3:fc:07:e7:c8:13:ae:56:2d:4c:34:
                    3b:d4:ce:c8:87:3e:33:ec:06:60:f0:87:98:cf:1b:
                    d3:32:07:d3:05:ee:be:27:9e:ea:a9:57:37:ef:af:
                    94:6a:74:9c:9b:6e:f4:06:51:26:2c:a4:6a:ae:e0:
                    70:b0:f1:aa:d4:f6:34:1a:c4:80:eb:fe:02:92:4e:
                    32:05:c6:69:4e:9d:97:df:24:e3:e1:22:ea:9d:2f:
                    f0:c6:9d:d7:a9:26:29:96:0a:64:5f:3b:62:56:83:
                    1a:5f:91:e0:23:10:5f:7e:9e:8e:3b:79:b7:ae:66:
                    14:09:bd:86:20:19:4e:82:0e:67:23:90:68:f4:b0:
                    6f:5c:47:0c:89:7d:71:49:5b:58:25:69:e2:6e:8d:
                    c4:c1:9e:96:71:76:57:57:9b:af:05:5e:c2:08:ad:
                    9d:3c:fc:8d:a4:4a:e6:6a:a3:9f:a5:35:00:36:ce:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:82:1F:71:30:70:24:1C:FC:4C:0E:41:B1:6A:F7:A2:AF:56:99
            X509v3 Authority Key Identifier:
                keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0c:55:e5:85:97:1a:fd:b4:d8:c4:9f:3e:e5:19:a9:e2:07:
         e5:0e:f9:d3:17:31:6f:ea:7f:a8:78:bf:20:b9:78:a7:d2:4e:
         9a:98:36:58:e7:26:72:8a:c8:47:e8:df:33:c4:f7:1b:6b:39:
         45:f9:fa:08:8d:5c:f9:c8:6a:2e:3a:9d:5c:93:3f:6f:a4:b8:
         1a:1c:6c:df:d6:01:37:79:a2:79:8c:25:a5:65:29:8a:40:ce:
         e4:bb:a9:3c:a7:3f:a5:a7:82:e1:d0:a9:5f:c7:36:f1:38:fd:
         76:57:cd:5c:0d:51:73:4e:5f:10:58:1d:e3:29:68:91:f3:7a:
         fa:57:9e:2c:ac:c9:1a:2d:b8:cd:23:7f:65:6e:68:c8:65:ca:
         52:26:d6:5e:a1:8d:16:09:9f:af:73:07:b1:dd:99:66:bc:d7:
         43:e1:03:f1:cb:8d:3f:0b:d9:b6:86:2f:40:75:d9:56:23:34:
         a7:47:1d:0d:aa:93:45:26:05:12:44:f3:73:07:14:f8:4d:1a:
         00:7a:6f:a3:1b:81:ce:0c:a4:57:df:0f:9f:ce:9d:7d:c7:f3:
         ad:b8:9b:01:87:85:d7:0a:02:49:9d:26:37:a0:16:53:9c:83:
         cb:e9:b9:1c:05:d9:ab:40:d6:28:1d:22:a7:71:94:cc:68:37:
         6d:25:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:00:34 2026 by rpki-client