Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
File:                     sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json)
Hash identifier:          b4LkrVlWq5jLZOIN2zw7IehBVAU08PSuVzVW23oKc3Y=
Subject key identifier:   E9:3A:10:A6:34:19:8B:3C:1F:33:D4:D0:9F:2F:84:72:C7:D1:03:F5
Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
Certificate issuer:       /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
Manifest number:          0222
Signing time:             Sat 13 Jun 2026 02:50:23 +0000
Manifest this update:     Sat 13 Jun 2026 02:50:22 +0000
Manifest next update:     Sat 20 Jun 2026 02:50:22 +0000
Files and hashes:         1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: 5exkyefkbzX0swx4UPgKLvHsMOe/RrN/G9nA2/0VwWc=)
                          2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 8y7hfK3jGDMBr1f4yhw0XCvK5AAMWqEEBB2+0ezh2M4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
        Validity
            Not Before: Jun 13 02:50:22 2026 GMT
            Not After : Jun 20 02:50:22 2026 GMT
        Subject: CN=6a2cc56f-bb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:91:88:d2:b8:c7:95:21:28:85:81:a3:a6:
                    7b:dc:88:47:d4:26:ae:21:fc:65:fb:19:e5:83:41:
                    ba:88:58:2b:e3:d8:f5:58:5e:ff:ad:e1:3a:1d:fe:
                    c7:24:d7:1d:24:2e:fe:69:64:19:35:b3:2c:2a:f7:
                    e8:66:15:4d:30:0b:31:5a:e2:6e:ee:67:ba:39:aa:
                    8b:bc:3f:eb:28:72:cd:fb:02:67:c8:97:11:c6:5f:
                    b8:8c:cc:db:42:fd:5f:19:fe:47:3a:54:92:53:da:
                    6c:f4:5f:4d:68:77:c7:3b:1f:f9:6a:68:2a:c7:b0:
                    82:3e:87:e6:d4:e3:cf:d6:2d:0d:ed:80:e3:8b:8b:
                    33:6f:24:cf:74:70:93:c4:8e:f7:10:a0:fd:a2:71:
                    e1:2b:12:39:9e:e5:6a:dc:54:79:a8:47:ae:d8:6f:
                    e8:1f:d1:97:66:cb:d2:73:6e:f0:5a:a2:38:82:f9:
                    ff:64:93:ef:61:7f:49:e0:b6:fb:d0:c9:f4:c3:5c:
                    2d:18:4a:e3:e3:10:12:56:e8:6e:2a:41:33:f9:0f:
                    69:53:c7:da:42:2a:83:2c:6f:f8:8a:9c:88:e5:2c:
                    df:1e:27:19:87:04:00:27:5b:b3:86:8b:d7:26:31:
                    68:46:88:3d:a2:e1:8f:f4:ee:db:1d:4b:0a:87:6f:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3A:10:A6:34:19:8B:3C:1F:33:D4:D0:9F:2F:84:72:C7:D1:03:F5
            X509v3 Authority Key Identifier:
                keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bc:bb:fa:b9:61:a7:00:1c:2f:cb:64:7e:66:40:3a:7c:b2:
         e8:af:80:70:6c:0d:89:53:24:48:b5:c2:9e:63:b3:7c:ec:50:
         db:81:8f:98:47:43:26:8d:d4:81:be:c9:ff:0b:90:52:ea:f1:
         5b:c6:da:d7:5d:e5:55:52:e9:b3:51:88:a3:2d:d2:ea:19:00:
         83:6d:34:b9:f6:65:22:ff:35:14:16:6e:44:60:d3:be:24:4e:
         15:f1:60:ae:a4:2e:0b:87:e3:2d:c7:de:87:90:b6:4f:bf:2f:
         c6:e2:ab:39:b0:17:da:ed:df:59:d8:9a:9f:d7:ad:4e:a2:ca:
         f2:40:d1:77:f5:c4:47:0f:5f:94:3e:f8:ca:64:6f:c2:35:bb:
         6e:c7:d4:32:c7:73:90:f6:8f:c9:36:04:29:85:f8:88:0a:1b:
         3f:c4:1b:1c:44:9d:6b:62:ea:7f:7e:37:6d:bb:f2:dd:33:57:
         77:7e:f4:4b:cf:99:af:a1:b3:ab:1f:dd:a6:b7:e0:46:b1:85:
         07:c7:54:8b:fb:2e:3f:1d:06:2c:ec:14:17:98:73:cc:d8:f4:
         ec:93:06:ef:47:17:90:72:78:94:ca:81:c0:c5:e8:07:39:ff:
         d0:b7:6c:05:50:1c:5e:59:99:5d:3a:47:b9:8a:a8:84:7b:40:
         c5:80:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:51 2026 by rpki-client