Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File:                     b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier:          Zi2111k3HL5p/Snl9TLNTLCdB9IYPN7VIEB2+V4nLs4=
Subject key identifier:   30:20:9A:D2:48:F6:90:8D:98:F7:C1:63:1B:16:72:CA:7D:67:66:10
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer:       /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial:       0C01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number:          0BF5
Signing time:             Fri 12 Jun 2026 18:53:28 +0000
Manifest this update:     Fri 12 Jun 2026 18:53:28 +0000
Manifest next update:     Fri 19 Jun 2026 18:53:28 +0000
Files and hashes:         1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: mWmDdmVf+uDqEYX2RSboRwqZavlg8O7YfghyQ8fLiAE=)
                          2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: j3+FqbIbEZA5ldhomHT9hdMFU4oqErbqw6qxTyWi9S0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3073 (0xc01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
        Validity
            Not Before: Jun 12 18:53:28 2026 GMT
            Not After : Jun 19 18:53:28 2026 GMT
        Subject: CN=6a2c55a8-defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:dd:52:c0:ac:eb:b0:6d:72:00:1e:82:f5:
                    ee:ae:a1:b6:2a:a1:4c:d5:e7:67:66:dd:e6:19:58:
                    48:56:c2:62:7f:ee:af:b7:82:ea:96:33:ff:16:fa:
                    4d:37:33:ab:67:36:9d:7e:18:7b:bb:75:19:22:2e:
                    ef:71:ce:c0:fb:c8:b4:98:bb:5e:34:ce:e4:29:3a:
                    4e:f8:f0:65:9c:8f:47:83:71:2b:1b:89:d6:47:8c:
                    d9:f3:a5:ed:50:53:50:a2:b6:7b:28:da:27:9c:56:
                    ed:1f:50:28:63:80:ac:93:fe:cf:28:dd:af:c4:12:
                    1a:4b:90:9c:98:bc:c9:06:d3:b7:1a:9f:74:cc:05:
                    80:ee:7a:8e:e0:95:14:df:9c:01:4f:6f:4b:d3:f1:
                    16:e4:19:bc:1f:84:13:76:9c:5e:ac:ce:64:82:78:
                    98:59:63:af:c3:92:b1:5e:27:d1:6c:a8:2e:fc:2d:
                    8e:85:11:c0:27:b8:f0:5a:93:c8:cd:54:0c:57:fd:
                    03:65:4f:2d:c5:79:0b:3e:0c:b0:82:52:e6:3f:2f:
                    33:a7:e4:a7:e3:9c:aa:c8:2b:0c:dd:b8:17:06:4e:
                    e1:3d:6d:79:a6:52:41:0a:e0:aa:97:bf:d6:34:03:
                    da:f4:09:81:29:de:b2:c5:9a:3c:51:3c:fd:22:9c:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:20:9A:D2:48:F6:90:8D:98:F7:C1:63:1B:16:72:CA:7D:67:66:10
            X509v3 Authority Key Identifier:
                keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c9:58:e5:a0:9b:05:7e:0e:37:76:c7:e2:be:34:a8:79:39:
         ae:c1:c6:32:2e:a4:4a:1b:af:94:0a:fd:26:11:62:b6:c8:54:
         fb:d3:31:aa:19:c9:11:33:bf:d1:68:cf:2a:32:f3:dc:f3:07:
         d3:8c:78:2a:c8:9a:5f:d6:0a:59:57:cd:21:08:3e:b8:47:88:
         02:28:26:99:a6:a7:e3:1d:53:19:ac:1e:dd:ce:39:e4:6b:c2:
         13:a9:52:4c:d5:bc:7e:df:9e:cc:58:c4:f3:b1:b4:72:39:92:
         03:86:a4:4c:23:d6:90:cf:8e:f0:8d:9e:b0:7f:7a:35:32:df:
         24:12:1a:ce:de:6b:8f:5a:6c:d8:18:0b:ad:df:7b:11:4f:71:
         3f:d5:f5:99:17:75:ce:9a:75:f2:a2:eb:d1:7b:bd:c2:9a:77:
         dd:b6:16:0f:95:20:cd:3f:c9:6e:f1:7a:fa:3e:83:2f:aa:af:
         29:86:c6:d2:85:b7:83:42:aa:59:ff:30:c0:f7:7c:35:08:1a:
         ee:1e:65:9b:ce:8d:85:44:f0:f6:08:9b:9c:70:88:40:af:76:
         9f:fd:7e:a1:d6:b3:a5:92:a4:b6:2e:90:65:d3:2c:29:36:68:
         27:8d:b6:55:7b:ec:84:0d:c1:71:83:23:7a:f8:6f:a1:90:e8:
         76:69:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:04 2026 by rpki-client