Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
File:                     5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft (raw, json)
Hash identifier:          hfMCop9a2f6XltgeUjiwqkJUjPreyGrYXykubtiPn8U=
Subject key identifier:   68:4D:82:2A:2C:A1:39:EC:46:70:99:B3:C0:6B:11:53:9D:DF:77:98
Authority key identifier: E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
Certificate issuer:       /CN=A91E0727/serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
Manifest number:          16
Signing time:             Sat 13 Jun 2026 09:06:05 +0000
Manifest this update:     Sat 13 Jun 2026 09:06:05 +0000
Manifest next update:     Sat 20 Jun 2026 09:06:05 +0000
Files and hashes:         1: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl (hash: sAmm6nZPz9Un0AZQ9tewCnjytrOj2vYUa2TelPB/7Y4=)
                          2: 36ACD53E49FE11F1B48580CBBD833773.roa (hash: 2h8Ac5NQWyyJjC325JvGwENZEWd/12mzHWYCD7GMM3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
                          rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0727, serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
        Validity
            Not Before: Jun 13 09:06:05 2026 GMT
            Not After : Jun 20 09:06:05 2026 GMT
        Subject: CN=6a2d1d7d-47d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:11:1c:5f:fb:04:47:c0:8a:7e:48:90:ac:
                    a2:88:a9:94:b1:9a:ba:7e:63:9d:94:e7:05:9f:dc:
                    32:8c:ee:5d:93:31:cc:11:89:18:e0:15:39:bd:3f:
                    96:ee:a4:87:5c:cb:fe:ee:8c:57:14:59:43:f3:84:
                    b1:ba:4d:44:23:20:37:94:60:c0:a1:d0:7f:30:1f:
                    da:8f:8b:f0:bf:5f:b9:cc:0c:9a:04:a9:db:46:48:
                    38:81:55:9c:40:56:f5:ad:c7:61:ac:35:08:3b:8b:
                    45:af:bf:96:33:da:18:3a:f2:5f:3b:17:6a:ae:14:
                    5f:40:c4:d3:59:88:d7:89:37:91:eb:ef:56:7e:f2:
                    3a:45:dc:98:8d:78:e1:99:19:21:c5:08:4f:76:24:
                    2c:13:45:54:11:19:3c:d1:2c:55:02:98:a4:32:de:
                    87:4a:c4:6c:f2:cc:09:dc:36:ba:48:10:c0:67:be:
                    1f:39:66:aa:cf:97:a4:6b:3e:b9:3b:8e:b5:d4:ac:
                    9c:b2:01:1e:f8:19:4d:1e:20:11:4c:01:3d:a7:bb:
                    a3:0c:36:85:67:53:db:e5:05:b0:c2:7e:10:d4:ad:
                    54:dd:55:44:23:dc:27:23:a4:d2:2b:3e:97:2d:9b:
                    49:09:55:19:70:f9:6b:70:79:43:52:dd:75:c8:02:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:82:2A:2C:A1:39:EC:46:70:99:B3:C0:6B:11:53:9D:DF:77:98
            X509v3 Authority Key Identifier:
                keyid:E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:2e:2e:ec:20:03:9c:06:56:38:b1:96:71:aa:92:8b:a6:
         46:ed:32:c0:31:84:b5:72:10:d1:f4:a0:bd:d1:c6:52:63:87:
         c4:a6:1e:67:0c:66:b5:68:43:93:a4:50:17:17:3b:d8:d2:59:
         49:4e:28:8c:7b:8a:e4:80:cf:10:b4:42:cc:37:83:da:b5:f6:
         ba:3a:4d:14:64:b5:8b:15:21:d1:d7:ce:e3:b1:5b:a8:da:e9:
         dc:02:0e:a9:52:ce:da:c9:cd:0f:5b:9c:8b:9d:61:b3:e0:7a:
         e7:87:bf:26:92:73:04:57:39:27:5e:41:1f:53:09:5c:bf:dd:
         44:1f:66:6b:33:9b:63:74:dc:81:71:23:78:40:03:71:8e:31:
         17:15:73:40:36:ca:d4:50:78:c5:84:b2:2a:79:8a:02:22:4e:
         2f:14:9c:23:e3:b3:67:20:9d:43:6d:b0:83:9b:eb:a9:33:06:
         14:f4:ab:a1:0e:5a:36:93:f5:e6:10:ac:15:74:74:b8:7b:64:
         b3:7e:7e:03:7d:e6:0a:53:75:5e:4e:28:b4:d4:1b:fb:4d:ab:
         70:cc:cf:1c:ec:f2:bc:44:09:ad:fb:82:45:55:81:15:7b:f1:
         f2:1a:11:c2:45:89:b2:3d:1a:4c:6e:0c:37:b9:66:69:ea:6a:
         cb:f5:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:52:11 2026 by rpki-client