Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
File:                     x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json)
Hash identifier:          igoR3F9+q5kZg4Lb+TfPsebe0PN4IiCIMtIjGzElt40=
Subject key identifier:   3A:E9:1E:80:A7:2D:51:4A:49:77:81:46:7D:45:91:D8:5B:F0:A7:85
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Certificate issuer:       /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial:       042C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
Manifest number:          041C
Signing time:             Sat 13 Jun 2026 00:23:42 +0000
Manifest this update:     Sat 13 Jun 2026 00:23:42 +0000
Manifest next update:     Sat 20 Jun 2026 00:23:42 +0000
Files and hashes:         1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: 4Fy+UPudEUsFWExjbXZaXz6UUn5cUg6pOw4MI5YhL3w=)
                          2: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: FKnTP9sIRlwzNOVjIzWeUAaLIjQhiB2MOeVMrVthOl0=)
                          3: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: M18r22Dfi6nMP8Zm1Hu9fqPiSXgEwNJEQtY8GIZmgdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
                          rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068 (0x42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Validity
            Not Before: Jun 13 00:23:42 2026 GMT
            Not After : Jun 20 00:23:42 2026 GMT
        Subject: CN=6a2ca30e-5b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:9c:e8:d4:c4:5e:39:f5:e1:82:94:5e:13:
                    24:24:4b:85:0d:c2:d7:f7:58:0a:b1:4b:bd:b1:70:
                    b4:b5:79:fb:73:0e:b1:a6:31:2f:f9:67:c8:68:a6:
                    c1:66:8f:9c:b7:59:14:c3:e6:43:28:1f:05:20:0e:
                    ef:8f:39:73:c1:eb:23:75:3e:ad:0a:13:65:d9:44:
                    b1:49:ec:a1:e3:35:01:22:87:52:a3:18:8a:a6:78:
                    e7:e6:f9:d9:59:39:a6:a4:17:50:10:c1:15:d4:b4:
                    ba:81:39:38:14:8c:96:49:3b:9e:5a:c8:7b:3e:4f:
                    8e:82:b4:a2:db:00:61:7f:b0:4a:1d:85:16:d8:bd:
                    b8:f0:e4:01:ee:b9:e2:25:3d:72:5e:3a:23:36:88:
                    b0:92:05:c9:26:dc:34:8a:8f:9e:9e:aa:df:2e:40:
                    b9:bc:38:c2:27:e2:56:14:9a:1b:e8:09:6c:35:3f:
                    ba:6f:66:d7:1d:61:50:0d:fd:aa:71:e3:96:d3:58:
                    5c:d3:c2:a5:6c:d9:01:65:a2:83:90:19:d0:10:46:
                    a2:a5:d5:64:1d:1d:fa:c9:94:4a:5b:46:01:8d:49:
                    25:c8:54:be:0d:71:65:d4:1a:48:10:77:28:cd:36:
                    bb:55:4f:16:e5:c2:65:61:78:54:14:44:19:29:a1:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E9:1E:80:A7:2D:51:4A:49:77:81:46:7D:45:91:D8:5B:F0:A7:85
            X509v3 Authority Key Identifier:
                keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:1e:52:6e:e0:fe:15:b2:8d:c8:7e:5d:e6:e2:76:c1:d7:
         39:3c:f9:7b:5b:4e:99:13:e4:e0:bd:ee:33:b5:ad:57:87:a8:
         e7:84:0c:18:2f:46:4d:e0:c6:4b:72:2d:17:aa:7c:3d:4a:66:
         ad:27:e9:07:14:86:98:fd:3c:30:29:34:51:2f:3e:dc:1d:6c:
         6d:1c:f5:e3:93:2c:34:79:12:b4:23:24:ce:e7:05:0a:90:5e:
         4b:39:ca:0a:29:70:27:28:36:7b:9b:5c:fd:73:51:40:6e:40:
         60:6b:aa:78:b1:8d:ca:f3:4e:34:de:3c:64:78:df:f6:15:3b:
         7a:75:0b:92:13:50:a6:6f:d7:e3:93:48:ee:55:ff:ad:ce:bc:
         73:92:55:6e:6e:2c:bf:91:37:dc:0d:60:a1:5f:5b:15:41:dd:
         15:ee:bd:fa:03:fa:86:1c:62:35:b9:c7:cb:74:c0:4a:08:63:
         e4:68:45:30:fb:6b:0c:e3:fa:41:c9:6b:0d:49:e8:0a:f9:4b:
         ed:7e:32:18:8e:a0:f9:d8:59:a0:6f:e7:52:86:6f:eb:fe:8e:
         2d:16:e5:8c:60:86:61:af:c8:f6:ee:3a:af:f6:f3:6e:fe:9c:
         53:02:8e:fb:1e:37:a1:dc:65:fa:b9:7c:2a:3b:3b:94:5e:dd:
         98:fb:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:07 2026 by rpki-client