Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91924F8/6864CB7C641111F18113D0D69B47A888/R5PsX_jLU27KdSzP-FRB_aY8LsI.mft
File:                     R5PsX_jLU27KdSzP-FRB_aY8LsI.mft (raw, json)
Hash identifier:          H2KKNJGVMbV7bIgrIfsztvUd5ZN6qj6M+fLK5rZ4hFM=
Subject key identifier:   91:F5:A4:8E:C4:5B:39:B8:26:ED:A4:66:D7:2A:B4:0B:D0:34:24:ED
Authority key identifier: 47:93:EC:5F:F8:CB:53:6E:CA:75:2C:CF:F8:54:41:FD:A6:3C:2E:C2
Certificate issuer:       /CN=A91924F8/serialNumber=4793EC5FF8CB536ECA752CCFF85441FDA63C2EC2
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R5PsX_jLU27KdSzP-FRB_aY8LsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91924F8/6864CB7C641111F18113D0D69B47A888/R5PsX_jLU27KdSzP-FRB_aY8LsI.mft
Manifest number:          05
Signing time:             Mon 15 Jun 2026 09:19:28 +0000
Manifest this update:     Mon 15 Jun 2026 09:19:28 +0000
Manifest next update:     Mon 22 Jun 2026 09:19:28 +0000
Files and hashes:         1: R5PsX_jLU27KdSzP-FRB_aY8LsI.crl (hash: kD9RI2I1ra2HM/EC5eehtdtyUeRJdeq4kZs/oioI9mQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91924F8/6864CB7C641111F18113D0D69B47A888/R5PsX_jLU27KdSzP-FRB_aY8LsI.crl
                          rsync://rpki.apnic.net/member_repository/A91924F8/6864CB7C641111F18113D0D69B47A888/R5PsX_jLU27KdSzP-FRB_aY8LsI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R5PsX_jLU27KdSzP-FRB_aY8LsI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91924F8, serialNumber=4793EC5FF8CB536ECA752CCFF85441FDA63C2EC2
        Validity
            Not Before: Jun 15 09:19:28 2026 GMT
            Not After : Jun 22 09:19:28 2026 GMT
        Subject: CN=6a2fc3a0-4b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:0d:18:07:6a:47:e1:79:ae:71:34:1b:6d:
                    f7:95:15:3c:d4:9e:28:7a:dc:02:f5:95:aa:80:c3:
                    b8:51:f5:af:0a:22:f6:9e:e5:93:81:df:af:bc:03:
                    71:00:69:cd:c9:8c:e9:4c:28:78:c3:33:b8:6c:dd:
                    aa:6f:b2:29:45:61:f2:28:35:d9:ce:4e:cc:12:71:
                    04:b1:72:d4:63:7b:ba:65:59:66:00:b5:7d:e2:3f:
                    da:34:ed:c3:74:33:62:9b:a1:38:6a:eb:66:73:37:
                    47:7f:0c:e8:fa:e0:d5:b8:a0:55:77:c1:ac:c4:0e:
                    0a:8d:fc:14:ba:e4:4b:2c:df:60:91:6d:bd:a6:04:
                    d1:cc:d5:16:f9:b0:45:82:12:4f:5b:89:17:90:ba:
                    bc:10:6b:fd:bb:f7:e5:56:01:cf:2d:0e:ee:f6:2a:
                    ab:d9:91:c3:fa:70:d7:d0:2c:f2:16:c3:c6:49:19:
                    dc:b9:05:af:5f:85:4d:5d:ee:b6:95:3c:e9:75:41:
                    bc:97:f5:38:55:1e:0a:b8:dc:65:da:c6:15:03:9f:
                    29:46:ba:28:bf:92:3f:cc:6f:c0:aa:c1:94:56:c2:
                    8e:6b:b6:b2:c5:a9:35:f2:0d:71:f3:3b:77:57:c4:
                    ed:fc:15:58:6b:c3:19:f0:e2:8b:eb:e4:83:c7:9c:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:A4:8E:C4:5B:39:B8:26:ED:A4:66:D7:2A:B4:0B:D0:34:24:ED
            X509v3 Authority Key Identifier:
                keyid:47:93:EC:5F:F8:CB:53:6E:CA:75:2C:CF:F8:54:41:FD:A6:3C:2E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91924F8/6864CB7C641111F18113D0D69B47A888/R5PsX_jLU27KdSzP-FRB_aY8LsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R5PsX_jLU27KdSzP-FRB_aY8LsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91924F8/6864CB7C641111F18113D0D69B47A888/R5PsX_jLU27KdSzP-FRB_aY8LsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:45:16:4f:7a:88:f3:d3:87:90:28:7c:c6:4a:70:5a:c0:37:
         0c:7b:77:92:11:45:db:95:ca:63:00:93:c7:44:84:f8:10:6e:
         2b:fe:68:76:1c:0e:27:d4:54:31:4b:70:90:72:95:c6:de:43:
         bb:e6:5c:57:ac:fb:36:74:c3:f1:fe:52:6f:7c:cc:d8:7c:a1:
         6e:d3:7d:64:47:9f:5f:71:28:63:03:2a:9a:40:8b:95:90:36:
         50:a6:00:4a:95:6b:6d:6d:35:b6:b6:d9:b4:8c:a3:61:87:46:
         eb:41:e3:62:eb:dc:72:0b:e5:42:b8:3d:4b:0c:89:12:7d:5e:
         60:28:0d:8d:1a:be:ff:05:ce:6a:08:c8:88:4b:e0:c8:14:01:
         b6:94:f6:76:c6:a7:b6:6a:bb:2e:38:86:da:39:a2:2c:5d:bb:
         b9:bc:ec:2f:5f:69:bf:65:58:ba:b5:b5:92:de:c7:8a:ed:5d:
         7d:4d:f4:4b:b3:d1:11:17:fd:fc:42:f2:7f:4e:07:a5:8d:ed:
         02:76:20:23:ff:c9:aa:7d:a5:53:26:6a:6b:bf:6a:a5:cb:4b:
         f4:86:70:02:aa:bb:c5:95:8a:e1:07:c2:54:eb:ea:b2:2e:d2:
         e2:15:f6:03:cc:2d:e4:2c:4d:d3:de:37:4e:8c:3f:05:c0:4f:
         ab:57:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:31 2026 by rpki-client