Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File:                     b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier:          oIhjz7HJTcwuG3cKAHxIRVsMn8Rxu8LDrG4CGGRNOng=
Subject key identifier:   7C:30:08:A7:A3:7D:B8:43:EA:26:C2:F0:8A:20:CE:F5:F8:B5:5A:B4
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer:       /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number:          CE
Signing time:             Sat 13 Jun 2026 06:54:59 +0000
Manifest this update:     Sat 13 Jun 2026 06:54:59 +0000
Manifest next update:     Sat 20 Jun 2026 06:54:59 +0000
Files and hashes:         1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: TQmfE0l7OBz91Dbm2v+l32RRkeGv2r4b80I4UJ8T7x8=)
                          2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: vLHp4ObDO1IK1mUqYi6ciOieF4o9Rbhwa3XZX1qH6lI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
                          rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
        Validity
            Not Before: Jun 13 06:54:59 2026 GMT
            Not After : Jun 20 06:54:59 2026 GMT
        Subject: CN=6a2cfec3-7fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:bb:e1:31:cf:9e:83:bf:c6:c2:c4:0a:d6:
                    a3:61:ac:76:c3:02:77:63:4d:44:b6:c0:9c:39:c6:
                    35:b7:8d:bd:e4:0a:13:37:71:5b:3d:68:11:96:99:
                    ab:af:45:73:e9:e3:1a:17:bd:08:e0:01:70:b8:4a:
                    10:85:05:49:cb:f5:98:d5:21:f3:69:df:de:b3:51:
                    90:51:92:be:d8:46:34:b5:14:3f:3b:a3:3e:af:f5:
                    0e:ff:b9:dc:b8:38:e7:06:d1:97:01:61:49:b3:24:
                    c4:41:f2:15:6c:62:a3:0f:2b:9a:fe:04:1f:02:ee:
                    c3:be:88:47:d2:be:3e:3b:a8:6c:f4:a8:44:c9:3a:
                    50:49:4e:bd:07:8c:8a:75:f0:4f:99:7c:d4:96:4f:
                    6c:57:94:20:92:56:d2:33:84:40:e4:33:90:23:37:
                    17:01:6d:b0:e9:c9:44:d5:b3:48:dc:1e:9a:03:1b:
                    2f:25:14:3b:2b:4d:06:00:38:ea:6e:cd:cb:28:6e:
                    8d:ba:2a:8b:e0:fa:58:8a:13:34:2a:79:be:ee:97:
                    50:4d:70:7b:41:6f:9e:2d:08:92:26:87:b0:c5:1c:
                    86:9f:c8:56:b3:bb:d4:65:48:6c:ef:f4:3f:f5:a6:
                    35:29:de:37:30:50:9b:f8:7a:22:28:d6:cf:9a:cc:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:30:08:A7:A3:7D:B8:43:EA:26:C2:F0:8A:20:CE:F5:F8:B5:5A:B4
            X509v3 Authority Key Identifier:
                keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:85:63:23:dd:e7:e6:ad:eb:f9:13:3f:12:4f:95:ff:0a:64:
         30:7e:94:55:32:51:a6:05:25:2b:d0:8a:cb:44:aa:26:99:df:
         7e:6a:d2:80:97:97:b0:75:ac:bf:9f:29:15:dd:fc:a3:40:52:
         a1:de:25:b3:14:5d:72:f3:f1:df:18:20:7b:55:9e:9a:ec:5e:
         f9:75:71:ef:12:b3:32:c4:fd:03:d0:00:e5:21:05:db:97:c4:
         9a:77:6b:1e:2b:4b:a7:c5:d6:f2:a3:05:dd:4c:ee:a6:b8:80:
         68:7f:94:c4:f4:6e:03:fc:13:f3:f8:a7:16:d3:54:ac:7f:df:
         be:11:da:fb:db:08:65:36:7c:66:2b:70:06:5a:35:4a:81:96:
         03:80:87:30:b6:52:05:72:9f:f8:8a:c1:59:c4:fe:a0:92:4a:
         f1:95:22:0b:08:e3:e9:ee:b8:49:a7:f4:be:d6:50:5c:8b:a1:
         29:be:12:9c:45:12:18:80:d6:46:48:d4:b3:ad:01:6d:a2:22:
         94:45:54:48:2f:67:36:ba:60:61:01:7d:33:5e:2d:5d:78:a0:
         ca:62:63:f9:92:1f:81:69:12:1e:43:d3:1a:69:4d:3a:79:01:
         ec:bd:96:19:9e:8a:45:51:bf:86:3a:85:45:3f:41:60:ea:0a:
         09:94:4a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:31 2026 by rpki-client