Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
File:                     5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json)
Hash identifier:          QSOwJPn7pEVwlrty0+tPQp1WSCyw0+wLil0Pfc6tVXI=
Subject key identifier:   E8:DC:7D:F5:D6:99:A4:46:7D:42:27:E3:42:E4:D9:0D:D2:39:11:39
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Certificate issuer:       /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial:       0353
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
Manifest number:          0337
Signing time:             Sat 13 Jun 2026 01:10:51 +0000
Manifest this update:     Sat 13 Jun 2026 01:10:51 +0000
Manifest next update:     Sat 20 Jun 2026 01:10:51 +0000
Files and hashes:         1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: +k/WhctlxM5HF2XPVti6ujF05WRWdgi92ZEDp8EEq8A=)
                          2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: SaiPWLAHUnkyojVdelS2uSfpAinLvbN01a3ry45lnng=)
                          3: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: GgxFX6325kuN6RICOxtS2gvb+gkFJTzGc8YA7E0IOc0=)
                          4: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: BV3fAhzYpd4ungoocRUfiG5/5RWB1BiAarK17R/lLO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
        Validity
            Not Before: Jun 13 01:10:51 2026 GMT
            Not After : Jun 20 01:10:51 2026 GMT
        Subject: CN=6a2cae1b-a180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:62:2e:68:23:bc:bc:b2:bd:5a:cf:72:bf:
                    9b:7b:3b:a6:2a:a9:c9:9f:d3:49:a1:54:3c:96:d9:
                    28:63:72:16:4d:3c:a5:4f:91:2e:3b:51:d7:87:28:
                    8f:c9:53:ad:08:a1:f9:89:b2:19:df:f8:f7:50:8f:
                    2e:3e:0f:09:dd:7b:f8:31:2f:1b:23:9b:6f:ae:d9:
                    26:26:61:d7:14:ac:4b:1c:e4:79:fb:73:d2:cf:2d:
                    47:16:0a:a5:55:ac:16:61:87:17:02:5f:0b:b9:11:
                    c2:cd:99:f8:61:16:e9:f6:ae:e1:6c:be:78:2b:1d:
                    ba:12:ba:45:95:56:6c:e0:de:c1:06:a5:a8:89:9d:
                    3d:35:37:7c:8a:cd:86:d9:46:62:e1:dc:81:a7:fd:
                    2d:e1:57:90:92:0e:95:47:4c:2b:72:48:37:d4:a8:
                    c8:56:09:d3:f4:54:64:b3:01:17:3f:ba:18:71:6f:
                    40:e3:b5:ba:95:a5:e0:7a:58:17:0e:8a:ef:99:e6:
                    4b:17:bc:75:db:98:36:ad:45:e2:70:17:74:ae:78:
                    d1:13:89:67:c9:54:64:71:7b:59:8d:56:1c:95:66:
                    5c:8d:68:da:11:39:e3:44:ee:45:15:8d:e3:64:80:
                    38:84:f6:e0:c6:a5:7e:fe:1a:31:8f:dd:aa:d1:08:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DC:7D:F5:D6:99:A4:46:7D:42:27:E3:42:E4:D9:0D:D2:39:11:39
            X509v3 Authority Key Identifier:
                keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:dd:97:b1:37:dc:5c:e6:7e:ad:a0:7d:57:7e:2f:43:66:
         28:48:31:2d:34:f7:ea:d7:2c:20:c3:3f:ff:10:b6:fb:83:9d:
         35:b9:e4:b2:0b:ff:1d:c1:d2:31:15:6d:c4:62:e4:f4:0b:03:
         f3:ac:88:34:8e:44:16:e9:5f:b4:6d:0d:f3:4a:3e:a2:5f:96:
         40:3a:7c:fe:0e:8c:bb:13:d2:f2:1f:0e:d7:6f:7e:de:ef:eb:
         4e:fb:d9:54:d1:94:90:67:95:a0:da:75:46:db:a4:36:f9:3e:
         13:19:dc:41:d0:7f:69:9e:2b:49:14:b9:ff:1a:35:2a:62:66:
         02:cc:41:04:77:94:f8:50:5e:92:86:83:83:15:ff:71:90:05:
         37:b7:3c:9c:f7:9f:18:cb:7a:af:75:7b:cc:90:50:71:1b:ff:
         ad:b3:55:7a:7c:db:24:c2:23:54:41:00:7f:4d:6e:c9:44:a6:
         54:99:1a:cf:4d:fd:66:e4:bc:45:39:4d:2e:6c:b2:d8:9a:65:
         df:02:36:41:cf:91:a0:db:24:bf:ff:a6:f9:1b:86:f1:84:eb:
         90:45:e0:4a:0a:87:32:d2:31:e1:9a:59:dc:1a:31:b2:c8:70:
         30:b1:6b:64:cd:81:13:6a:68:0a:91:ea:b2:2c:51:54:9d:c2:
         0c:71:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:07 2026 by rpki-client