Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
File:                     huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft (raw, json)
Hash identifier:          zASNLPV8mq/Ah2TYyoSTh4xfn89mUBNyfzzWVZY51n8=
Subject key identifier:   94:E2:B2:31:31:0B:66:8D:F4:08:8B:56:BA:50:AB:86:70:8B:15:C0
Authority key identifier: 86:E4:25:23:7B:D2:3C:E4:3D:11:98:35:18:12:60:9B:F4:05:55:F5
Certificate issuer:       /CN=A91C6A87/serialNumber=86E425237BD23CE43D1198351812609BF40555F5
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
Manifest number:          2E
Signing time:             Sat 13 Jun 2026 08:47:01 +0000
Manifest this update:     Sat 13 Jun 2026 08:47:01 +0000
Manifest next update:     Sat 20 Jun 2026 08:47:01 +0000
Files and hashes:         1: huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl (hash: vynw/Vd59fFsNPESZiY3B2ApGavDw+5UO0vDHXaaM3Y=)
                          2: 55D930E024C611F1B0EE1E69A6833773.roa (hash: Hw7ENTeCIJUN2Q7kCZRq1jtY4Qdg596dbpso11pOaj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A87, serialNumber=86E425237BD23CE43D1198351812609BF40555F5
        Validity
            Not Before: Jun 13 08:47:01 2026 GMT
            Not After : Jun 20 08:47:01 2026 GMT
        Subject: CN=6a2d1905-f778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:78:d2:6d:ac:2a:b8:11:e1:77:71:70:8c:
                    ca:1b:3e:45:d2:47:f1:03:e3:94:dc:4f:16:63:87:
                    53:6e:d1:cd:3b:f5:cc:d5:6a:1d:a5:7a:c6:ed:72:
                    e4:dc:87:f1:19:72:67:d8:68:36:ea:eb:b6:20:40:
                    9c:02:03:a2:e3:42:1c:a4:04:67:8f:9d:fa:1f:f7:
                    88:3d:0a:00:28:22:72:83:eb:98:85:f4:6d:88:96:
                    8b:f2:a5:07:09:56:f7:d2:30:ae:43:c8:a8:99:09:
                    c8:bd:e2:fc:0c:c6:95:ef:f0:a0:ea:f4:f7:10:ea:
                    68:d8:b2:5a:18:14:0b:b4:5f:52:c8:13:1d:b2:7e:
                    86:71:40:cf:6e:98:6e:29:32:b9:b5:89:92:a2:5d:
                    11:c5:ae:0a:6d:b2:9f:ab:89:38:a6:38:c8:b1:fd:
                    73:2b:2e:70:99:df:e3:ec:bf:00:5c:c5:85:8b:b7:
                    65:06:04:67:f8:05:51:4d:6e:73:6f:0e:52:0d:3a:
                    95:e8:81:40:de:ec:b2:cb:68:14:3a:8c:f8:b4:24:
                    6e:b1:44:29:ff:53:26:72:18:6d:e5:05:2d:47:7e:
                    7c:2e:20:f7:6d:57:5e:54:e5:59:67:ff:34:5e:39:
                    21:6c:5d:6a:8b:73:fa:1e:ec:75:78:6d:30:8c:f3:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E2:B2:31:31:0B:66:8D:F4:08:8B:56:BA:50:AB:86:70:8B:15:C0
            X509v3 Authority Key Identifier:
                keyid:86:E4:25:23:7B:D2:3C:E4:3D:11:98:35:18:12:60:9B:F4:05:55:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:ce:74:6c:d7:50:4a:9d:65:ff:78:39:bf:8d:8e:7f:54:
         2e:9a:cf:ea:9e:47:18:86:60:97:2c:b6:04:a6:b5:24:58:e7:
         62:81:6a:42:ff:17:b2:ef:47:ab:59:37:9b:e4:84:5a:96:89:
         24:e4:51:40:80:19:14:c9:5a:31:64:37:49:3b:23:d9:a7:52:
         b4:54:83:eb:aa:71:ca:80:30:71:fd:c4:5e:1e:60:a6:da:0d:
         3f:a8:c5:81:99:71:78:d6:ad:5f:83:32:5a:22:ba:7c:b2:18:
         81:46:a6:d5:04:ce:2b:f2:67:ba:6f:0c:c0:d8:ed:7e:6a:47:
         cd:18:a1:10:72:8a:81:4d:db:36:a8:d3:77:62:30:5d:cd:e9:
         2f:ce:a4:46:5a:5a:e9:65:89:40:46:ea:ce:48:8c:e1:10:6e:
         b8:81:ac:9f:8d:24:ed:58:d6:b9:28:9c:c1:1f:ea:1c:1b:b4:
         9f:2c:f3:42:e8:2d:a6:e7:a2:07:0b:05:45:ac:de:21:52:ae:
         9d:94:ac:84:0a:c3:12:13:ca:5b:8c:16:46:e6:3e:57:b9:4e:
         d9:1c:fd:fe:05:67:57:75:49:d1:67:2f:5f:01:9f:35:91:89:
         58:ec:35:7c:ec:0b:5e:70:a3:72:1b:a6:36:d9:29:7c:61:43:
         c1:6a:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:43 2026 by rpki-client