Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
File:                     hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json)
Hash identifier:          ovr1M3MUQrSapxG2F+3XOu9EXnyPaH/j3gHiXC2zM60=
Subject key identifier:   4B:F8:F8:47:61:4B:FB:B5:7F:04:F4:90:1B:E2:38:0D:EC:DF:BF:7D
Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
Certificate issuer:       /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
Manifest number:          96
Signing time:             Sat 13 Jun 2026 07:33:20 +0000
Manifest this update:     Sat 13 Jun 2026 07:33:19 +0000
Manifest next update:     Sat 20 Jun 2026 07:33:19 +0000
Files and hashes:         1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: 75l68XkTGmG1cjt3H+rVUaTxyXD1vM/VNH+jSBJrtfo=)
                          2: 3D51EF7C8F0111F087307F35C4F9AE02.roa (hash: ZTYnYrXftu4EMVac2jtmasDDa1311QW4YkSq9Et/mjo=)
                          3: 1F578DB08F0111F0BF750433C4F9AE02.roa (hash: hmo0JZjqsUcXR1CeyKb5AUyvewOo9tGw1tDFanCmkiU=)
                          4: 8F35765ACF5811F085DD836EC4F9AE02.roa (hash: Rt4TGbr/K+WJ5nQlhD3lcCPl9EyJK1zP7OfMfktiw14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
        Validity
            Not Before: Jun 13 07:33:19 2026 GMT
            Not After : Jun 20 07:33:19 2026 GMT
        Subject: CN=6a2d07c0-8c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:ca:23:28:60:14:2f:59:87:bb:86:31:57:
                    0a:76:42:5b:ca:b6:e1:81:d8:2b:53:b1:48:48:87:
                    72:15:f1:8c:fb:5c:61:f3:cb:9b:35:72:3d:bc:69:
                    53:c1:0b:d0:8f:a0:4d:f5:ea:be:f7:f4:85:6f:82:
                    fc:43:63:2b:86:58:83:06:90:a6:a2:0c:dc:d8:26:
                    6a:6e:1b:ec:23:c0:d2:72:be:84:f8:6e:1e:37:c9:
                    16:fd:a7:cb:c2:20:db:d0:e1:c4:3c:23:f0:e4:60:
                    c0:67:ba:da:50:49:2e:b8:62:37:74:2a:10:ea:19:
                    06:6b:f1:0a:60:b1:83:43:34:fb:31:80:f3:2f:b0:
                    4e:1e:4f:ae:07:b4:2b:e5:4b:0c:70:e4:90:2a:9a:
                    2f:30:15:20:90:76:94:e3:59:99:ad:16:e6:09:7d:
                    d7:99:fe:da:1a:94:5f:84:5e:ae:95:a4:fb:ae:56:
                    21:56:50:2d:91:b8:eb:7f:32:99:e5:a3:12:7d:e2:
                    36:5a:b4:72:7b:e1:7b:ca:09:35:11:70:64:25:0f:
                    98:8e:61:3d:ae:34:69:4a:5d:be:7c:04:59:36:94:
                    33:e5:e4:a5:d1:d0:7e:fc:26:1b:43:2b:e1:bc:27:
                    dc:6e:a3:7c:12:5c:d4:c9:cc:86:9a:ef:ce:7f:64:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F8:F8:47:61:4B:FB:B5:7F:04:F4:90:1B:E2:38:0D:EC:DF:BF:7D
            X509v3 Authority Key Identifier:
                keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:23:b4:98:15:14:24:01:21:85:16:6e:3d:6b:90:cd:7e:17:
         aa:80:1b:32:59:14:13:96:9d:7e:52:e2:75:02:79:25:06:c9:
         ba:af:72:21:86:84:03:d1:c1:b4:a2:b2:01:64:fe:2f:78:95:
         20:22:e3:aa:af:e3:24:4f:31:aa:22:97:a4:5d:eb:20:b0:8b:
         10:e2:7b:d0:97:b2:43:db:dc:6e:29:18:6d:98:de:1e:f1:9c:
         9a:f8:8c:10:56:ee:1c:cc:b3:4f:08:87:4b:a9:18:2b:4e:44:
         5e:7b:80:38:26:cd:6f:12:af:75:06:9b:7e:a8:65:29:59:48:
         38:91:ba:5f:0c:db:81:fe:ef:a2:97:6d:fb:a1:11:9d:e3:ba:
         fa:0e:b3:70:7e:82:39:b0:6a:8c:09:1e:d3:33:cc:df:ff:fc:
         47:8f:3a:02:c9:e8:58:90:ca:39:22:78:40:36:ea:c1:90:fe:
         95:d5:e0:b0:37:19:92:d3:ea:3d:6c:be:24:ee:76:f5:7a:37:
         f3:7e:7c:57:f5:ec:9a:39:d0:dc:47:7b:2c:89:08:76:9f:55:
         23:49:90:be:f7:f2:50:11:3f:a7:e6:27:c3:3b:c0:e0:26:1f:
         44:ab:64:77:8d:40:4e:2f:9f:34:e9:ee:85:18:a5:76:ff:73:
         fd:ae:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:02:19 2026 by rpki-client