Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File:                     bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier:          ZhzOwJQNLoMuyIxeij52zbYk64OPaeziBsT1lKSSS70=
Subject key identifier:   82:25:80:13:66:14:04:C0:BA:CD:4B:B2:E2:DA:36:49:D7:14:6B:78
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       048E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number:          044E
Signing time:             Sat 13 Jun 2026 00:24:57 +0000
Manifest this update:     Sat 13 Jun 2026 00:24:57 +0000
Manifest next update:     Sat 20 Jun 2026 00:24:57 +0000
Files and hashes:         1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: Mu+sD86wq3iFP2sP3nDLzG3Iz9FBbtFoR4OzhmfBrxY=)
                          2: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
                          3: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
                          4: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=)
                          5: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: Jun 13 00:24:57 2026 GMT
            Not After : Jun 20 00:24:57 2026 GMT
        Subject: CN=6a2ca359-da2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:71:6f:16:ce:8b:cc:99:4d:db:cd:4b:ad:
                    c2:16:97:2a:df:f2:85:7a:6b:5f:6d:33:ed:fb:b2:
                    4a:d8:15:3f:90:4b:a1:87:5f:bd:d2:de:b0:94:69:
                    28:52:4a:f3:37:e4:9f:f2:54:d5:8a:03:10:5d:66:
                    f9:af:d2:37:05:b8:a8:c9:8a:ca:83:8c:c5:9b:00:
                    b1:1d:9f:9b:49:1c:10:35:01:5a:8e:62:8a:e5:09:
                    23:1c:38:80:e2:25:b7:fb:71:b9:32:88:50:7a:b7:
                    7a:1a:ea:5f:5c:89:f9:b4:95:ff:14:6e:79:5c:ca:
                    76:93:21:45:1b:91:90:46:cd:45:82:73:ca:8b:4c:
                    a2:52:7b:7e:58:84:fd:13:dc:ab:97:33:a4:15:dc:
                    dd:8e:33:03:cd:a6:25:2a:b5:97:ed:07:6e:2b:95:
                    89:db:30:e1:e4:da:6b:2b:46:63:8c:12:5b:a0:46:
                    56:85:7a:a5:13:16:02:77:c0:92:f9:0d:0e:1c:2e:
                    ef:39:db:c9:e2:13:d4:26:f2:f1:0b:da:fe:6a:5d:
                    8c:e5:55:be:f0:cc:23:db:49:34:6c:94:49:c7:98:
                    7c:6a:d7:03:92:a3:72:78:5a:2a:0a:31:6f:1a:6d:
                    37:c2:41:4e:9c:5c:c5:ed:ed:17:9f:0c:c7:40:ff:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:80:13:66:14:04:C0:BA:CD:4B:B2:E2:DA:36:49:D7:14:6B:78
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1f:cc:0b:85:0a:2c:2e:d3:08:8d:cb:87:fb:8d:bc:d4:e6:
         1e:46:7f:c3:16:c8:b2:92:0a:38:2f:7a:74:c7:38:78:41:6f:
         ea:96:70:c4:4d:a7:8a:17:50:c5:e9:ad:19:6b:fa:98:23:5c:
         c6:5b:16:40:8e:40:6f:bc:a6:46:c5:a4:82:a8:76:31:52:6f:
         3c:74:9f:b4:a6:11:1d:ea:3d:98:f7:90:1b:a5:50:41:46:6e:
         fe:4b:1f:25:d5:b2:42:5a:15:76:79:bb:7a:1e:a7:bf:f9:cb:
         c7:bc:9b:f4:e3:56:df:c6:76:31:ec:95:70:66:3d:09:4d:c0:
         f5:b9:ad:64:1d:e7:5e:66:54:ec:c3:89:99:c8:95:2b:6c:ae:
         dd:7a:51:78:18:d7:cf:f5:c2:42:e0:9f:b7:41:a1:54:c4:9b:
         74:8d:25:a4:f4:5d:4d:ba:b5:51:a3:64:a5:4b:2d:ad:4a:38:
         8e:d4:70:23:bf:bc:82:c5:5f:a3:ae:bc:45:f9:8a:a2:80:d2:
         90:1b:24:ce:a0:d7:4d:64:00:2b:af:36:47:ac:ea:63:7a:ff:
         10:5a:5c:62:e8:9b:ec:a5:3e:c2:b9:7d:eb:c3:9b:8e:a3:59:
         b0:b6:65:78:87:7b:fc:84:48:e3:fb:b9:98:5b:9d:fc:07:65:
         a8:91:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:44 2026 by rpki-client