Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File:                     S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier:          eU8axNEqzFDNvdxYPho3EaDJGMimGLCYtDpLQUKnC/k=
Subject key identifier:   6A:5B:EC:04:B5:29:66:86:9A:37:92:5D:71:9B:1A:A6:0F:C7:37:EE
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer:       /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number:          028A
Signing time:             Sat 13 Jun 2026 01:50:16 +0000
Manifest this update:     Sat 13 Jun 2026 01:50:16 +0000
Manifest next update:     Sat 20 Jun 2026 01:50:16 +0000
Files and hashes:         1: S630I4efFU256siNFgtOEW9mzak.crl (hash: J91mwtb07WtqVzQq5s1g83mc+8VMhkACK+997Caz66Q=)
                          2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: slVc2MAuomJ1lVCpaSZf3MYFxy+QIrbxktNgNNmSdu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
                          rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
        Validity
            Not Before: Jun 13 01:50:16 2026 GMT
            Not After : Jun 20 01:50:16 2026 GMT
        Subject: CN=6a2cb758-66ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:8b:5f:02:1b:81:2d:94:f3:76:52:39:59:
                    f9:19:18:a6:a4:60:96:0a:7b:66:62:8e:d6:b2:4b:
                    65:6e:da:8d:70:18:eb:2c:29:58:5f:ad:7b:7c:be:
                    b0:1e:cb:13:6b:a4:d1:ae:b0:43:eb:31:d1:dc:26:
                    c6:18:79:57:50:81:0a:2e:2d:f1:30:55:e0:81:d8:
                    5c:3f:ad:28:00:c8:1c:2b:a4:ca:b2:2a:47:a1:e5:
                    7b:a4:19:57:b9:ab:16:5b:2b:ed:92:07:e4:6d:8e:
                    de:11:ee:6d:42:b6:7d:0e:d4:a5:ba:33:5d:77:2f:
                    94:31:d6:44:f1:92:55:89:03:5f:60:f1:ff:04:94:
                    77:6e:c1:27:9d:f8:38:74:91:c9:b7:ed:64:c8:97:
                    ad:72:d6:86:ad:f3:27:c6:99:c2:f1:38:14:e7:9a:
                    12:60:8e:a3:e4:eb:67:b3:66:4f:01:e8:66:35:ed:
                    9b:1b:2d:c0:1a:c5:c1:ef:e1:a2:b8:a5:52:46:ad:
                    ca:32:72:2f:dc:10:44:16:e8:fb:de:31:ec:ce:70:
                    25:77:21:b5:12:bb:28:6a:af:a5:88:53:2b:c0:2c:
                    5d:a8:fb:b4:a1:c0:63:1a:02:a7:0d:4a:24:50:da:
                    12:59:48:1f:48:3b:56:5c:04:a0:b6:ed:98:ad:a7:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5B:EC:04:B5:29:66:86:9A:37:92:5D:71:9B:1A:A6:0F:C7:37:EE
            X509v3 Authority Key Identifier:
                keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:89:11:b1:11:b8:9a:fe:20:6e:4e:df:77:c3:f1:ff:0f:fe:
         34:4d:03:dd:88:21:4c:06:ea:37:4b:36:41:8d:51:f2:1b:b7:
         49:50:b6:99:ff:23:84:c3:64:37:90:06:70:78:45:4b:c8:be:
         b9:45:b2:ee:e1:8f:3f:03:a0:30:e0:0d:e7:c4:71:37:36:29:
         69:a5:75:d4:23:e0:86:ba:42:91:bc:97:17:66:b8:e4:51:0f:
         96:d5:3b:3a:80:0a:1e:6e:e7:c9:0e:61:15:dd:f9:cf:9d:b8:
         ac:13:b3:f7:16:94:ac:de:b6:75:0b:c0:2c:1f:cc:d0:f4:d8:
         d3:ab:da:10:e9:fe:0d:aa:c8:7c:95:e6:8c:b8:45:0c:64:c8:
         12:d8:6b:3c:03:7c:9c:43:65:c7:48:bd:bb:b3:97:0e:d8:97:
         ce:8b:47:36:84:a8:14:31:7b:2b:4b:e3:f3:45:3d:c8:87:17:
         e2:23:5f:53:3e:04:c2:35:52:e3:8f:f1:f3:b6:22:eb:f4:ab:
         50:4f:94:a1:c8:31:6b:ec:f4:91:e2:d8:81:c7:43:23:0f:13:
         75:80:35:a9:9a:24:14:3d:8c:43:0b:a8:bc:e2:46:24:5e:64:
         29:06:cf:9b:09:52:20:07:a8:ac:ef:e7:71:a8:c4:f9:4e:84:
         41:3c:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:21:45 2026 by rpki-client