Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
File:                     4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json)
Hash identifier:          rLBXMqiXTohgOqw225bUUVV6cYwd1hZbcBCsqwrDtKs=
Subject key identifier:   3F:CA:48:73:B7:C0:8D:B6:C9:0C:DE:30:8D:7B:DA:86:82:10:DC:64
Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
Certificate issuer:       /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Certificate serial:       0DB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
Manifest number:          0DAA
Signing time:             Fri 12 Jun 2026 17:54:40 +0000
Manifest this update:     Fri 12 Jun 2026 17:54:40 +0000
Manifest next update:     Fri 19 Jun 2026 17:54:40 +0000
Files and hashes:         1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: CQeiOZ7acePaZce1vo7hfIJPvPvLYn10SSsTf7LL27A=)
                          2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 4+Ac/qmp1PMvnSJouQnIg3+M0ch95gCYSQtb1scOlcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3513 (0xdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
        Validity
            Not Before: Jun 12 17:54:40 2026 GMT
            Not After : Jun 19 17:54:40 2026 GMT
        Subject: CN=6a2c47e0-2cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:7f:cd:cf:68:34:c6:31:7d:3f:ec:7d:de:
                    7c:17:d0:32:76:b1:0c:a8:a0:92:34:6b:bc:fa:1b:
                    8e:8b:08:78:58:63:1f:ff:fd:bc:f0:7e:e4:68:f2:
                    5b:9f:9b:dd:67:81:9c:5f:42:3c:f6:ec:92:35:31:
                    0b:ba:51:3b:e0:4a:76:d8:07:11:7d:29:b1:f5:c4:
                    ed:3f:ed:eb:09:a6:57:48:fe:d3:ca:55:07:96:d0:
                    4f:4e:50:ef:1e:4f:03:1b:48:5e:a6:2b:1f:10:b0:
                    dc:ae:34:3b:32:85:42:f0:f5:f3:dd:ea:c7:69:b9:
                    8a:b1:ff:cb:e8:7a:a8:70:1b:9e:ec:89:5a:fe:44:
                    d2:4d:7d:d0:fe:bd:ee:a9:7a:34:e5:8d:be:2b:ba:
                    12:e6:dd:19:0b:b6:4f:48:56:18:32:58:2e:b2:28:
                    64:82:5e:1a:86:db:a7:ce:40:8a:e0:6e:19:c4:76:
                    7d:68:c6:03:e0:a4:d6:82:5b:8e:25:8b:f8:18:cf:
                    8d:ad:d4:b2:68:6f:ad:2e:36:71:c3:bc:cd:31:f0:
                    15:0d:74:15:47:c4:1d:f6:a1:a5:12:5e:9a:d7:af:
                    b4:3f:5f:92:ee:ee:37:0c:50:e6:e5:f2:74:0d:8c:
                    ae:d2:97:11:9f:56:0d:84:4a:a9:ff:e7:5c:14:a1:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:48:73:B7:C0:8D:B6:C9:0C:DE:30:8D:7B:DA:86:82:10:DC:64
            X509v3 Authority Key Identifier:
                keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:07:e7:0d:59:17:e5:4b:9f:1a:ed:de:63:b1:ea:b9:ef:f9:
         bc:14:54:d4:3b:c5:c4:74:88:d7:66:2f:7f:a3:e9:5a:69:19:
         15:b7:35:6d:65:bd:4a:e1:49:61:5a:bb:ab:35:c9:36:1b:18:
         e3:a0:1d:a0:8b:ee:9a:6a:63:6f:a0:d0:b0:f7:4b:1b:f9:0c:
         06:b0:b0:86:2b:32:98:7d:02:10:ce:88:6b:c7:f1:31:96:2c:
         e7:70:c4:63:1c:77:de:62:55:80:7d:4b:ee:3a:34:88:25:e4:
         08:27:c1:92:de:76:57:d3:34:52:2f:5d:89:91:21:52:7c:54:
         43:0d:f9:6f:b8:f1:bd:ca:eb:23:5c:83:d1:1d:a6:65:fd:73:
         42:ab:8d:34:3a:a9:3c:ff:80:3c:b3:a6:4b:2f:d8:2a:22:7a:
         35:65:e5:65:ed:c5:56:b7:d1:8f:06:00:b6:79:6e:ff:9a:f8:
         07:55:d2:f4:38:74:64:26:01:52:ae:db:3e:58:25:f1:ba:fb:
         20:f9:34:16:e1:5e:fc:f5:98:7c:c3:45:df:5d:eb:6f:ff:53:
         b6:87:0b:58:f4:c7:51:3f:22:f3:11:f8:a3:7f:47:8a:f0:9a:
         2b:5a:e5:02:38:0b:ab:29:c2:05:60:37:e5:9b:86:a6:81:bf:
         58:ed:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:04 2026 by rpki-client