Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
File:                     mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json)
Hash identifier:          wSKG0QUr4FIuitwYG8u7pVudj58/nswABdO/QC73wYA=
Subject key identifier:   F8:3C:34:DE:21:20:DB:23:89:06:CF:D3:5F:43:89:5E:9E:11:24:07
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Certificate issuer:       /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
Manifest number:          05C9
Signing time:             Fri 12 Jun 2026 23:08:16 +0000
Manifest this update:     Fri 12 Jun 2026 23:08:16 +0000
Manifest next update:     Fri 19 Jun 2026 23:08:16 +0000
Files and hashes:         1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: 2x+CQPSYDSsY2XfSVrinzZWm7bu9xbkb2W6HfMRaaZ4=)
                          2: 02817064DCD811F0A33153DF516F56BC.roa (hash: A0XhDPuStyqiQYD+/HDNtMid0Z+VUqgdpsSkPHtmU0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
        Validity
            Not Before: Jun 12 23:08:16 2026 GMT
            Not After : Jun 19 23:08:16 2026 GMT
        Subject: CN=6a2c9160-5d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:51:78:e8:99:e4:17:c6:ee:d6:74:27:3d:
                    c9:09:8d:8c:78:06:1a:42:ad:d8:d5:8f:ec:af:21:
                    bb:ba:31:46:a9:2f:df:0a:0b:6e:74:0a:bb:2f:a7:
                    4c:1d:d6:3a:5a:27:9e:89:fa:23:c2:ba:9b:c9:7a:
                    65:55:7f:46:1b:ed:2c:f6:76:6a:27:09:75:e9:40:
                    f5:b1:7b:18:3a:be:19:b8:5f:6a:90:e4:00:4e:b7:
                    f5:99:97:a7:a3:71:49:25:a6:7c:c2:c1:94:4f:a5:
                    86:44:c6:60:c1:82:74:60:87:a2:81:9c:ac:83:80:
                    fb:7c:9f:69:17:c2:bf:0c:7a:47:9f:85:e7:e8:17:
                    cf:80:a6:0f:77:d4:7d:33:64:da:05:17:3a:63:68:
                    9f:6d:75:27:45:ff:0e:ad:81:4d:60:94:80:d4:1b:
                    a4:22:44:ee:53:64:33:61:97:ef:9e:7e:84:94:17:
                    81:fe:f1:be:c3:60:4a:6c:01:36:40:cf:0e:56:ca:
                    12:ad:9f:c9:f1:84:5e:51:f1:49:1a:f1:cb:49:ef:
                    47:01:ca:db:f0:82:f5:80:e9:9c:dc:33:12:82:88:
                    f5:3c:c2:7d:05:95:29:0a:39:b0:8a:4a:89:ab:ee:
                    2a:c6:7c:de:ac:33:5f:58:b3:82:08:ec:ba:f1:1f:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:34:DE:21:20:DB:23:89:06:CF:D3:5F:43:89:5E:9E:11:24:07
            X509v3 Authority Key Identifier:
                keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9e:93:69:2a:dc:91:44:21:dd:e2:72:c0:8f:ee:af:fd:66:
         df:92:e4:3a:6d:e4:30:76:d4:ae:9e:d3:fc:ec:96:9d:f5:f3:
         02:86:d2:fc:13:6a:b3:c8:58:00:1f:39:ee:c3:6b:1f:3e:04:
         4d:1e:c4:d2:d2:55:5d:a9:09:0e:90:a3:7f:e1:c4:44:0e:99:
         25:33:37:1b:7f:b0:4c:9c:e4:c8:32:e1:d1:8f:80:ea:32:d1:
         b2:58:91:99:fc:d2:d0:2d:16:4a:a7:c1:fc:78:e9:1d:09:1a:
         63:a6:5d:65:d0:18:71:ca:64:01:ba:8b:56:7a:37:e6:40:2b:
         21:97:8b:12:23:b6:8d:23:49:6b:ae:92:aa:e7:2f:b1:3f:ff:
         fe:4c:c8:0a:47:17:76:aa:15:ff:30:f8:e9:3a:c5:0c:49:d8:
         7a:f5:2b:f3:da:b6:57:05:d2:30:58:8c:bc:a3:be:80:21:49:
         61:ef:5a:a6:6a:40:fb:d9:b7:c6:61:aa:0e:68:cd:87:9a:42:
         6d:fc:23:ac:97:34:06:d9:97:03:2b:8c:e9:89:a5:45:ef:d3:
         16:39:a9:7c:ca:24:b5:53:ae:37:70:62:30:f3:b4:58:fd:52:
         d0:80:64:a8:5f:00:02:55:22:f5:fb:65:1b:55:b2:c0:cb:65:
         1a:12:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:10:53 2026 by rpki-client