Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
File:                     ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json)
Hash identifier:          IqpJbJgmto0xMnYE3G7ubSy+C/ZYcUB0tbhXvQGs9L4=
Subject key identifier:   56:6C:F1:9A:CF:74:D8:49:72:A8:F0:77:F7:CF:5D:FD:87:8B:00:92
Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
Certificate issuer:       /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Certificate serial:       0AAB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
Manifest number:          0AA1
Signing time:             Fri 12 Jun 2026 19:33:20 +0000
Manifest this update:     Fri 12 Jun 2026 19:33:20 +0000
Manifest next update:     Fri 19 Jun 2026 19:33:20 +0000
Files and hashes:         1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: DQm8yei4Zq7MC5wjOFYEhbf1+vhm7K04aO0rVB9uUyo=)
                          2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: 098hzOTQEG7rKej9MkL1y58VBOlZQyKy67WnC1L/ZIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
                          rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2731 (0xaab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
        Validity
            Not Before: Jun 12 19:33:20 2026 GMT
            Not After : Jun 19 19:33:20 2026 GMT
        Subject: CN=6a2c5f00-d766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:d9:c8:8a:39:2a:fb:3d:8c:b5:3f:65:52:
                    a2:65:ba:96:bb:1f:ba:7d:b6:ba:84:e9:06:4f:b7:
                    df:78:b9:a0:e5:c4:37:5b:69:4e:92:e0:ab:f0:25:
                    1c:12:cf:7a:05:16:b7:ae:40:e8:09:9b:b3:bf:18:
                    52:d4:02:76:60:a0:6b:77:1d:10:41:fb:d2:49:57:
                    06:2a:18:3d:76:64:84:76:ed:b6:17:9c:99:80:4d:
                    1e:91:01:1f:93:7a:e1:08:78:64:ba:fb:9f:1c:bf:
                    44:be:cf:91:e9:fe:e5:0a:b3:28:42:f0:8c:e1:d3:
                    53:4d:21:53:80:15:e5:91:00:37:8b:fc:3b:a0:6a:
                    a1:41:51:70:84:47:1f:64:77:85:43:6f:a9:b4:35:
                    71:1f:67:c3:cc:60:1c:b2:10:00:08:5b:cf:57:23:
                    68:a1:be:ab:00:e6:3f:1a:be:b0:a2:d3:6d:e1:51:
                    eb:e3:82:12:a0:8f:40:db:5f:ef:22:23:8a:93:3e:
                    08:e3:5c:f2:91:a9:71:a1:e5:47:11:9c:50:9f:e4:
                    9a:5d:b2:e6:7b:11:c1:6e:52:4f:40:01:1f:f5:d4:
                    29:02:33:8b:c7:db:8f:d9:05:bd:63:48:9f:c5:a3:
                    6f:22:d2:2b:19:11:81:4b:c6:b3:7f:f8:6b:a8:c3:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6C:F1:9A:CF:74:D8:49:72:A8:F0:77:F7:CF:5D:FD:87:8B:00:92
            X509v3 Authority Key Identifier:
                keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7c:62:13:5f:45:09:65:a7:b6:2b:14:52:c5:4c:d0:f0:a9:
         6a:fb:a3:ad:23:0d:2e:77:6f:2e:3b:12:ec:39:cc:b1:ff:d1:
         77:55:d6:03:32:c9:05:12:d0:01:2b:7b:40:9c:e7:3e:6e:28:
         74:84:f2:79:ef:00:41:1e:8a:35:81:4e:d4:7c:d2:8c:89:db:
         50:cc:9e:cb:07:6e:3a:2e:e2:f4:61:42:3f:ed:8f:5c:cd:bd:
         c2:fd:f0:9e:d0:a8:54:82:06:1c:24:a1:c3:9e:bd:e5:9c:91:
         f9:36:a7:6c:18:96:3f:67:88:e1:2e:82:ec:ae:2a:22:72:f4:
         6e:4a:9a:36:18:4c:06:b5:53:9a:2f:77:c3:16:97:2d:33:c1:
         45:d1:35:0f:8e:e4:28:f6:b4:6e:37:4c:28:c0:e5:b9:eb:29:
         13:92:cb:d9:94:ea:93:2b:26:01:1d:91:55:81:a3:8f:92:6b:
         04:ae:42:88:da:80:0d:3c:fb:f3:be:14:87:d4:88:68:d4:aa:
         3c:c7:0d:59:88:da:68:87:a4:4a:6a:1d:26:c5:56:59:70:07:
         4a:58:c9:2e:72:7a:10:44:04:f9:1f:df:f6:8e:90:b1:b2:cc:
         c7:c8:f5:00:30:de:b1:a1:f6:1b:dd:63:38:26:3c:6e:c9:ea:
         48:76:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:20 2026 by rpki-client