Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File:                     kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier:          ORJgEklDZ8baDVeGG9qkB6gbqNZG5Sx76j1Vsv7O7Qo=
Subject key identifier:   84:4D:32:27:33:39:D2:89:68:8E:0B:96:C8:3D:94:A5:5F:18:54:A3
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer:       /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial:       0514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number:          0506
Signing time:             Fri 12 Jun 2026 23:44:22 +0000
Manifest this update:     Fri 12 Jun 2026 23:44:22 +0000
Manifest next update:     Fri 19 Jun 2026 23:44:22 +0000
Files and hashes:         1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: 2kPbXf4bbmeHFb+oL0I0zYokqayiV8CXFjHztycS0IE=)
                          2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=)
                          3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
                          rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300 (0x514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
        Validity
            Not Before: Jun 12 23:44:22 2026 GMT
            Not After : Jun 19 23:44:22 2026 GMT
        Subject: CN=6a2c99d6-0dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:d9:12:1f:d6:4a:01:ff:70:bc:ad:68:9c:
                    fb:ac:76:94:64:d3:a5:47:ee:3b:5a:ef:78:ad:d9:
                    2b:a0:0a:73:8c:be:9f:3a:02:ea:1c:71:b9:4c:46:
                    ab:7f:25:ed:26:97:53:52:7e:09:d9:c3:3d:87:fc:
                    17:e4:47:00:4f:4d:24:df:66:82:55:5f:6d:f7:27:
                    87:db:4a:f2:4e:4d:87:b0:8c:c2:67:0f:9f:fb:72:
                    32:82:31:46:34:73:ba:64:5b:30:f3:03:22:81:83:
                    48:48:d3:8a:4a:dd:80:57:e2:36:e6:13:98:4a:ea:
                    be:a4:63:39:64:ec:9b:90:f8:fb:df:95:7c:63:14:
                    71:9a:f2:02:eb:6a:48:59:5d:9a:48:fd:ac:01:d2:
                    c3:2d:15:25:de:7a:a9:a4:e8:82:53:46:87:67:d4:
                    3b:71:bd:31:55:ee:14:73:7a:f3:11:79:22:6c:22:
                    b4:b1:34:38:75:66:a8:23:b9:fb:08:08:ef:11:31:
                    71:9d:92:12:b6:28:50:d8:37:a1:1a:4e:16:05:30:
                    a2:02:67:4b:2e:98:a2:ca:c7:04:2f:54:1d:aa:b4:
                    0e:b3:e8:3f:d8:13:5f:f7:f7:11:58:52:89:dd:49:
                    47:4e:99:32:a5:0d:ad:a7:71:93:75:ab:4b:ae:fd:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4D:32:27:33:39:D2:89:68:8E:0B:96:C8:3D:94:A5:5F:18:54:A3
            X509v3 Authority Key Identifier:
                keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:29:f8:72:9b:44:08:80:05:b4:ac:57:d7:7d:b2:2b:cb:ed:
         b2:ca:f8:c8:49:ff:35:b4:3c:09:57:0c:eb:90:3d:d8:c7:6d:
         ab:12:b0:3b:dc:ef:b3:5c:82:11:f1:b7:e0:47:ec:67:ce:20:
         a4:93:bd:ee:fc:0c:14:7e:fe:34:aa:66:d5:75:cc:f5:c6:60:
         86:a2:ab:b6:c1:ae:8b:c9:2c:5e:78:55:f9:de:13:0e:84:61:
         67:31:23:b4:62:89:2b:02:c3:eb:78:25:7b:ed:18:ea:ff:25:
         a8:9c:3c:49:e8:47:03:36:98:6c:de:73:0d:de:35:e3:c2:e7:
         23:e6:6a:d5:5c:2c:73:dc:3e:3e:be:8d:fb:5f:ff:69:65:bf:
         0c:3a:1f:b4:30:98:a9:9f:09:89:da:9b:be:bb:b4:24:c6:e9:
         54:ac:20:32:80:61:6d:0b:53:5d:c9:ef:dc:3d:3f:eb:29:f4:
         17:86:a4:1e:12:b8:0d:29:c5:f2:35:1d:a1:3e:34:3c:37:87:
         06:03:47:40:d3:ed:0b:25:32:0e:81:e6:a2:24:8c:c0:f8:00:
         34:a6:49:55:65:31:2c:d8:7c:cf:ee:61:19:0c:bb:48:65:42:
         d5:9e:b0:e5:b1:e3:44:8a:6d:84:62:26:59:ed:93:e6:54:b6:
         df:c1:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:00 2026 by rpki-client