Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
File:                     Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft (raw, json)
Hash identifier:          xdiwCWEqHXNv1Ln3T0prm3xagVQJWMR6tXPATYHROaM=
Subject key identifier:   7D:53:33:7A:1E:C3:9B:86:4F:20:0C:96:88:58:AE:77:6A:63:EA:5A
Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1
Certificate issuer:       /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1
Certificate serial:       0501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
Manifest number:          04FA
Signing time:             Fri 12 Jun 2026 23:45:45 +0000
Manifest this update:     Fri 12 Jun 2026 23:45:44 +0000
Manifest next update:     Fri 19 Jun 2026 23:45:44 +0000
Files and hashes:         1: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl (hash: yPBRdfkIK2MQ7HxqgGa2LIHe0HeeouUei4mLfs4Rf0M=)
                          2: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (hash: l0NUWEUPjisvKhFGpflwXULabo5GNsblx0h91Os9bCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl
                          rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1
        Validity
            Not Before: Jun 12 23:45:44 2026 GMT
            Not After : Jun 19 23:45:44 2026 GMT
        Subject: CN=6a2c9a29-34df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:36:60:38:4a:bb:e4:f0:46:cd:cc:a1:d2:
                    95:b6:79:29:b7:07:c6:e7:02:8e:4b:3e:3c:e7:4f:
                    5c:d7:bf:e2:8c:9b:f1:b8:56:ed:68:08:21:2a:ac:
                    41:6a:21:91:d3:82:66:4c:b2:da:1a:db:08:f5:79:
                    60:70:b0:73:83:9a:2d:69:d5:eb:c8:f4:d9:a7:03:
                    07:98:8d:56:0c:b4:93:e3:92:e0:e5:86:41:32:ff:
                    0b:f7:2f:2e:dc:e2:df:19:78:44:8a:10:8e:31:c4:
                    29:51:26:56:6f:c5:5a:51:c6:14:e3:23:94:eb:10:
                    0b:76:2d:88:ca:66:42:c4:be:e7:2a:d6:a0:88:ec:
                    10:0f:50:b7:0d:b7:dd:bb:63:eb:80:64:3c:e8:29:
                    83:1f:67:cb:fb:97:24:d2:ba:40:43:7d:24:07:9d:
                    df:77:b0:d8:89:aa:57:ea:74:bf:9f:4d:1d:d1:6f:
                    6a:25:1b:1b:89:a8:2e:a0:0e:bb:36:f9:05:84:90:
                    5a:18:78:5c:03:71:8f:28:51:4f:25:49:49:ae:69:
                    06:c4:3e:c2:8a:d6:da:c0:2d:7e:d0:50:1e:90:5e:
                    27:f6:d9:ee:b2:e1:3b:21:7f:41:2e:f6:5c:48:29:
                    8a:2c:3f:a9:4e:a9:39:3f:a7:ac:85:82:2f:3e:04:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:53:33:7A:1E:C3:9B:86:4F:20:0C:96:88:58:AE:77:6A:63:EA:5A
            X509v3 Authority Key Identifier:
                keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0f:92:93:99:aa:62:50:2b:1d:ca:91:8a:fd:eb:4e:71:56:
         76:52:76:61:4d:44:16:2b:34:9c:e9:bd:52:0c:1d:f8:f8:d8:
         d4:12:b5:c5:5e:71:e3:c7:ca:76:7e:6a:20:08:de:2b:12:70:
         f0:eb:b2:74:20:9d:5b:4c:58:33:b3:c1:79:71:e2:af:e1:23:
         bb:b1:35:c9:53:44:e7:b3:c7:b6:71:da:9b:2f:57:95:70:30:
         5c:c6:72:ad:5c:22:22:ab:ac:4a:e6:dc:36:b3:33:9f:4c:a6:
         21:60:f9:de:4f:2e:92:be:c9:a9:dd:e1:d0:e1:91:2c:df:fc:
         89:98:ab:32:1e:3d:44:06:b2:3c:be:bd:5f:b7:3c:10:68:b8:
         b0:38:32:62:68:cc:82:fd:f6:cf:06:d7:cd:bb:19:0a:4c:b0:
         ed:f0:a0:fe:a2:32:7f:44:5c:33:1d:b8:cf:82:64:c2:8d:e6:
         9b:6b:40:b7:3b:da:5b:45:a1:7a:98:d7:f6:93:6c:b9:45:75:
         81:d6:8c:b4:2c:75:f5:4b:c2:1b:62:96:df:17:79:83:10:4e:
         26:93:07:7f:08:e1:e4:4c:3c:4a:e8:a6:3e:98:69:cb:f7:89:
         4e:fd:34:69:00:69:fd:80:3d:69:d7:16:3c:a4:68:94:f7:be:
         09:6f:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:49 2026 by rpki-client