Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
File:                     j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json)
Hash identifier:          f4Tr39RGshNrqHOtciP6I5Vfki1CmhHPm/xqKivvLmA=
Subject key identifier:   1B:A2:FE:BF:13:23:E7:1F:C6:B3:41:F8:4E:01:47:64:30:75:5B:53
Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83
Certificate issuer:       /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
Manifest number:          0123
Signing time:             Sat 13 Jun 2026 05:45:31 +0000
Manifest this update:     Sat 13 Jun 2026 05:45:31 +0000
Manifest next update:     Sat 20 Jun 2026 05:45:31 +0000
Files and hashes:         1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: 2tL2XwVxHhAlgHmrVffV+GfrPmBEpMuP8vyvcZEWtt8=)
                          2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: BlH8Xk0kzBiozFJjPmw7XW6Pj9SWlczSEjr5/xVVi+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
        Validity
            Not Before: Jun 13 05:45:31 2026 GMT
            Not After : Jun 20 05:45:31 2026 GMT
        Subject: CN=6a2cee7b-71db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:3e:91:ea:e7:23:9a:10:71:96:ef:69:6f:
                    ff:77:1e:cb:45:43:83:5d:e9:7e:22:8b:16:71:6b:
                    af:15:65:f6:43:89:af:c4:3d:7d:00:12:ae:a5:bc:
                    c6:90:2b:23:40:2a:af:21:59:ce:ad:a3:4f:61:4d:
                    3d:9a:1f:b5:d3:b7:25:6c:fb:20:d6:0e:25:ca:29:
                    b4:83:53:42:f1:b4:0b:d5:21:56:45:47:9c:58:e9:
                    59:3f:be:4b:6a:96:5b:82:e7:85:fa:89:7a:47:83:
                    58:3f:86:00:a1:95:46:16:64:0f:49:26:68:d8:a4:
                    e8:a6:22:ea:32:5d:f6:72:90:d3:4d:aa:01:87:c5:
                    53:53:3a:5b:3d:0b:b1:0a:9d:af:7b:ce:7f:87:a8:
                    d8:54:44:9b:aa:11:e7:23:e5:2b:f8:71:a5:8d:0a:
                    50:a6:59:4c:ac:8a:e5:30:78:86:6e:4f:00:9d:dc:
                    45:87:10:89:c1:55:ee:dc:cb:b2:1c:f8:d2:8f:d0:
                    e2:ed:f1:77:cb:17:7c:7b:ed:35:9f:7d:b5:75:c8:
                    1d:9d:01:87:a4:55:0f:e5:75:08:81:d6:ab:4f:6e:
                    5d:d9:87:70:17:c7:6a:6b:77:1f:d1:31:06:4b:13:
                    e0:76:e7:96:95:46:51:39:e7:4d:27:83:5e:21:ce:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A2:FE:BF:13:23:E7:1F:C6:B3:41:F8:4E:01:47:64:30:75:5B:53
            X509v3 Authority Key Identifier:
                keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:2b:fc:95:d2:2a:06:f3:13:54:a8:82:7a:91:b7:59:e3:
         93:8c:94:69:18:94:bb:ca:b1:2a:fd:14:0d:6c:fb:b2:b6:8b:
         ef:e5:49:95:a6:c9:70:50:9f:4f:96:9f:4c:66:af:48:72:0e:
         3e:b3:28:c5:79:5c:e2:72:e3:c3:56:61:24:bb:8a:ad:01:69:
         e3:e0:c1:86:29:be:57:af:6f:59:d6:37:56:49:36:67:6b:0c:
         d0:8c:6a:bc:d2:6c:78:b4:15:2c:bd:d7:ed:15:36:a9:8d:99:
         93:ba:a2:51:28:0f:87:80:87:ea:6a:08:26:3d:eb:27:00:54:
         84:8f:11:7b:55:f5:70:84:ab:58:09:44:dc:9f:15:8d:f2:14:
         cf:98:64:f1:40:b5:6b:c1:af:a9:3b:4b:76:eb:29:23:f2:84:
         2d:a0:79:c8:9b:97:ba:11:24:5c:64:c8:37:d3:1b:a6:6a:a7:
         8e:8f:fc:44:b1:af:02:e3:ab:fe:7d:ec:75:51:c2:ed:aa:ed:
         00:3b:b9:b0:65:c1:00:ff:83:8d:13:30:09:a1:14:81:d5:67:
         d3:90:98:ff:87:c7:39:1e:79:40:20:71:e8:9d:d6:fa:f2:08:
         2d:b9:1b:08:e1:d8:62:8e:7e:05:df:88:d9:18:35:f4:82:00:
         07:67:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:13 2026 by rpki-client