Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
File:                     dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json)
Hash identifier:          LjfYvKlMhQZL1JT3i9ISxvYmcQfZHYNiLi0AZNH6+P4=
Subject key identifier:   51:A3:E9:46:78:0C:05:6F:71:A4:DF:04:FE:00:08:C0:54:1D:20:ED
Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64
Certificate issuer:       /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
Manifest number:          0264
Signing time:             Sat 13 Jun 2026 02:07:53 +0000
Manifest this update:     Sat 13 Jun 2026 02:07:53 +0000
Manifest next update:     Sat 20 Jun 2026 02:07:53 +0000
Files and hashes:         1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: WGmFWIeo24c4cAlpEuRUt/FawElx7USliAnI4vrxo1E=)
                          2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: xa2rzU8DhuvzABu0PhpiCxb/OU68RG+lrUJHazRYpJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
        Validity
            Not Before: Jun 13 02:07:53 2026 GMT
            Not After : Jun 20 02:07:53 2026 GMT
        Subject: CN=6a2cbb79-9a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:41:e1:21:4d:09:d6:58:50:1a:fe:e8:ea:
                    4c:fb:b8:e5:ed:97:85:d5:65:df:17:ca:12:f7:ae:
                    6e:17:21:ac:17:e8:f1:26:51:d0:ec:a8:c5:c7:54:
                    c8:a2:07:0f:32:2d:e3:3f:41:0d:6b:a0:ef:ba:0e:
                    6b:4e:0c:7f:de:36:5d:a5:ec:a3:d3:9b:b0:9c:b9:
                    c9:d8:1a:25:08:b7:27:82:bd:c4:cd:20:ac:9b:ef:
                    12:d0:6a:96:3c:d8:19:5a:4e:8f:59:ae:18:9e:4f:
                    32:ae:9e:f4:7c:1c:50:99:14:db:78:68:00:29:51:
                    bb:7d:ec:7a:e5:fe:66:f6:1f:ae:0c:bb:5a:5e:df:
                    e6:e3:ac:6d:82:28:27:d7:36:34:93:c1:92:e8:8e:
                    33:ca:b0:7c:6d:4c:48:e3:69:2d:06:cc:27:ad:30:
                    38:90:0f:7f:63:b7:a5:7e:bf:22:7f:25:93:d4:77:
                    d7:24:e7:1d:39:26:9e:8b:0a:a8:ce:d8:c4:eb:0b:
                    9f:b3:8c:de:bb:c5:08:5c:00:1f:5c:e6:84:f4:3e:
                    27:90:f9:bd:7f:1f:2a:b6:5c:21:17:2d:17:f5:ea:
                    79:0e:de:f2:1c:af:83:5f:e8:ca:0e:fa:08:7b:3c:
                    ad:db:5a:f4:3e:2f:20:6a:0b:58:28:c2:2f:23:60:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:E9:46:78:0C:05:6F:71:A4:DF:04:FE:00:08:C0:54:1D:20:ED
            X509v3 Authority Key Identifier:
                keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:7d:5f:b7:4b:e0:98:9b:82:70:8b:19:67:6c:44:10:dd:
         15:40:ff:18:af:ac:26:67:be:b9:92:26:9a:4c:13:9e:5a:01:
         b0:90:ba:cb:a1:8d:cb:39:9f:5d:a7:3a:3f:46:58:bc:54:cf:
         0d:35:0a:cd:dc:70:0f:b2:27:9d:01:43:74:c4:91:7b:bc:31:
         b1:36:16:8f:fb:40:ad:8b:84:7c:ed:d1:50:f9:23:c4:0e:ca:
         fc:9e:0f:4a:0a:5a:e1:44:89:45:19:56:c7:de:53:33:f5:b2:
         c6:02:69:00:ee:8a:73:32:d3:7e:a6:eb:fa:cd:f9:8f:dd:42:
         5d:28:0e:d4:73:b8:5b:c5:cc:22:ff:01:67:ee:52:f8:fe:65:
         17:ee:d8:90:02:6a:1f:68:0b:2b:8d:72:da:fb:4b:ca:7c:57:
         11:d9:f7:31:af:31:40:d1:ff:ca:00:a2:3a:00:95:ad:7f:c1:
         e2:ae:20:2b:c0:25:4d:df:8b:ba:0c:6b:2f:89:a9:1b:ae:49:
         1f:a4:92:67:1f:fa:99:b4:28:41:43:9f:de:3d:a2:b5:dd:0d:
         00:89:0a:17:b7:08:1b:c0:38:5f:82:df:fc:22:aa:b7:49:8e:
         d8:72:a1:c9:52:d7:5c:2e:92:e2:08:7a:17:1d:d3:3a:4a:61:
         3f:da:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:56 2026 by rpki-client