Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
File:                     ghbCCBg3GK6QL0P2htUqRHMUc5g.mft (raw, json)
Hash identifier:          k2mTR0NcSRUNcKTJOfVmuZb8I6Hgz4BoT+6RhfhnBgI=
Subject key identifier:   B6:3C:46:3A:9B:30:7C:17:09:33:46:25:D3:92:9E:6D:81:EE:4D:E0
Authority key identifier: 82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
Certificate issuer:       /CN=A91B85E7/serialNumber=8216C208183718AE902F43F686D52A4473147398
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
Manifest number:          05
Signing time:             Thu 11 Jun 2026 11:32:47 +0000
Manifest this update:     Thu 11 Jun 2026 11:32:47 +0000
Manifest next update:     Thu 18 Jun 2026 11:32:47 +0000
Files and hashes:         1: ghbCCBg3GK6QL0P2htUqRHMUc5g.crl (hash: AFzGeetCvAU/FFHbLoZcUn6voUaSTZpIRLwXcGSeVLA=)
                          2: CCFC8F4A608611F181B017396F47A888.roa (hash: NX7Ssb4nWxHkVFaOlDGe8x1QhapCEO7PXneQ/Q5Nq70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl
                          rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85E7, serialNumber=8216C208183718AE902F43F686D52A4473147398
        Validity
            Not Before: Jun 11 11:32:47 2026 GMT
            Not After : Jun 18 11:32:47 2026 GMT
        Subject: CN=6a2a9cdf-f1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:14:22:fb:91:60:83:ce:7a:c6:ee:ff:d1:
                    d0:b0:fa:08:e9:d2:8e:81:51:78:08:47:07:37:5c:
                    92:16:c4:97:a0:5c:5c:f6:78:07:a1:18:db:d2:06:
                    46:56:6e:e7:25:c6:45:17:df:ac:3d:82:a6:46:a7:
                    32:0d:59:80:86:9d:52:37:3a:60:82:09:94:0c:d8:
                    92:8e:52:97:e2:f0:3a:25:62:fe:74:42:78:a9:96:
                    df:48:77:0c:82:e5:81:0d:27:d4:1b:d6:8b:90:99:
                    2f:ea:98:73:10:31:3b:cf:08:27:57:2c:cd:db:b8:
                    09:a4:6a:e4:f8:0d:a4:b2:f0:7e:c8:15:dd:ba:ff:
                    6e:de:d5:95:f9:c9:19:97:68:51:43:a5:40:41:b6:
                    69:7b:1b:1d:b0:d6:38:0a:ce:50:5c:16:34:11:1a:
                    89:02:36:89:f6:d1:55:19:1a:85:e5:e4:eb:a9:18:
                    97:b7:12:c7:47:9d:48:5c:c5:5a:d9:10:33:56:7a:
                    db:fd:bf:99:e3:50:00:00:19:ea:11:cf:d6:ee:4b:
                    30:f0:f5:6f:23:47:0e:e2:0c:02:c4:b0:ce:5f:88:
                    59:91:d2:1b:54:1c:25:30:da:65:50:e6:cf:bc:1c:
                    c3:8c:31:38:08:b0:a6:ce:1f:36:cb:c4:f1:35:fc:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:46:3A:9B:30:7C:17:09:33:46:25:D3:92:9E:6D:81:EE:4D:E0
            X509v3 Authority Key Identifier:
                keyid:82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:68:21:44:d1:25:bb:4c:b7:a9:2d:d4:03:77:e4:95:87:
         58:03:00:6c:d1:ec:71:4d:59:10:53:48:dd:13:1a:f6:89:00:
         8d:3c:4c:f2:a5:2d:2a:ef:39:93:7b:9a:4f:fe:7b:bf:c8:a2:
         af:a7:8d:3a:92:03:31:a1:4c:d7:33:02:2f:eb:98:2e:39:7e:
         19:d6:83:e1:e4:6b:f8:b3:5b:ce:a3:fe:f8:71:d5:80:93:26:
         05:c3:5f:1f:21:13:9b:ba:ef:54:c2:82:e9:36:9c:50:e5:cc:
         eb:c9:04:d9:04:e9:81:40:be:79:b6:67:33:af:b3:77:78:68:
         69:ed:01:7f:fd:68:18:61:22:29:13:0f:d1:ff:30:1f:de:fb:
         9c:e6:8b:70:19:3a:f4:aa:94:6f:55:44:b1:96:44:7b:59:5b:
         8e:df:43:e2:45:4b:8b:57:16:63:7d:41:a3:5c:61:2a:1d:6a:
         e2:3b:35:56:99:ed:27:f3:1a:78:c9:86:79:59:12:6a:5d:db:
         a4:22:ba:50:48:0e:d5:49:a4:da:91:a6:24:5b:64:a2:4e:7d:
         03:20:45:9d:3a:d0:b1:04:3d:e5:f4:e2:3b:b4:4d:64:e0:45:
         b4:1d:fe:f7:ae:e4:1d:46:b1:81:54:4c:d6:5d:31:f8:ff:0a:
         e0:7c:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:18 2026 by rpki-client