Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File:                     U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier:          1Lez8oJUEQI6j4HM1/uwJNlI8KxHptjnlrHkOSfyHLQ=
Subject key identifier:   65:4E:BD:8A:1F:06:32:38:EE:3C:A9:CE:46:E5:98:1E:95:C7:92:09
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer:       /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial:       0E20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number:          0DB4
Signing time:             Fri 12 Jun 2026 17:57:01 +0000
Manifest this update:     Fri 12 Jun 2026 17:57:00 +0000
Manifest next update:     Fri 19 Jun 2026 17:57:00 +0000
Files and hashes:         1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: pfkdEqdqEESnoX/GEE4u96TnhVB5ry52w7jag4/gcWw=)
                          2: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 42dKv4sjx0XRqkeI33DpCxr1YPHwmnsJzTMy3OeU/bA=)
                          3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
                          4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
                          5: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
                          rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3616 (0xe20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
        Validity
            Not Before: Jun 12 17:57:00 2026 GMT
            Not After : Jun 19 17:57:00 2026 GMT
        Subject: CN=6a2c486d-5448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:b4:c1:46:37:6c:3b:97:3f:d1:eb:f1:00:
                    81:8e:2a:26:85:9f:9c:0d:2b:10:20:2a:fc:01:11:
                    23:41:fb:a8:ab:43:c3:a4:a6:d6:d8:3a:18:54:2c:
                    52:a9:a8:52:fc:1b:22:2d:fa:a0:db:58:37:8d:93:
                    da:88:24:74:29:b4:8a:06:7c:6a:5b:cd:b5:87:33:
                    08:72:2a:b6:ac:76:af:58:91:34:79:f5:2b:50:b1:
                    a6:ab:79:59:8a:f6:91:c9:83:4e:8d:ca:57:c6:32:
                    54:82:f4:f8:e5:07:60:16:fa:ed:5e:c8:c2:c3:ba:
                    45:a2:87:b6:e1:e7:14:af:fb:f0:ae:89:00:8b:e2:
                    d4:ef:ff:0d:52:b0:6a:45:bb:66:7d:3d:42:eb:7b:
                    97:0e:92:9f:33:69:9d:e4:e1:8a:b6:c3:7b:42:b0:
                    ac:d1:2e:7f:91:97:11:28:10:c9:95:09:52:4c:63:
                    c5:3b:b3:34:ec:6f:83:70:16:56:df:3e:da:fd:f2:
                    8a:cd:bc:35:b7:4e:72:d0:73:c3:e0:5e:22:46:04:
                    3e:5a:d5:23:ea:1b:9b:f2:51:16:3c:6f:a6:72:92:
                    8b:bf:ab:df:eb:fd:f5:bb:0d:e6:f0:e9:c5:1f:de:
                    d7:f1:ea:ff:de:14:d0:b8:e6:bf:44:98:e5:d2:2b:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4E:BD:8A:1F:06:32:38:EE:3C:A9:CE:46:E5:98:1E:95:C7:92:09
            X509v3 Authority Key Identifier:
                keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:01:b7:92:d8:27:68:8f:37:c7:ca:10:21:96:56:3e:92:
         b4:fe:8c:37:6e:d2:61:f5:78:47:c6:70:ee:5d:f0:24:d9:be:
         fb:ba:f8:4b:15:0f:c7:52:4a:55:2b:0e:d2:9f:65:b0:c1:87:
         4c:c2:49:59:eb:a6:b0:2e:6e:e4:c9:35:51:bb:80:ec:8f:8c:
         e3:d0:f0:5e:93:24:0d:91:35:41:aa:fa:e6:5b:fc:70:14:ac:
         89:d3:ba:0f:75:80:31:e1:e2:ad:e4:9d:31:f5:42:e7:2e:08:
         4c:a6:d5:f3:8a:25:a3:a2:ee:7d:87:f4:7e:89:25:7a:66:d2:
         fd:10:3d:c1:59:ac:f8:eb:a6:82:cd:19:0e:4e:44:dd:dd:26:
         ad:99:52:d7:d6:5c:fb:e2:d3:87:a5:4e:16:d5:93:b1:b3:3e:
         9a:03:06:ad:3d:af:7a:9d:f4:58:33:bb:93:e9:e1:bc:5a:cb:
         48:25:48:d3:8d:aa:cb:85:28:59:02:89:f6:23:bd:67:12:67:
         0a:02:39:65:fd:1c:39:fd:ea:7c:70:32:6b:73:39:66:68:95:
         2d:6f:63:63:1c:55:4e:67:04:23:9b:61:bc:2d:71:ec:9d:35:
         ee:19:c5:b3:7e:36:5e:08:a8:50:b8:bc:d6:f5:83:dc:2a:12:
         89:d4:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:00:59 2026 by rpki-client