Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
File:                     Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json)
Hash identifier:          cJfUR6EPSV2fCSwMt587ojbInb33AevBa0swFtxD9Lo=
Subject key identifier:   8A:0B:F6:A4:7A:44:E2:0C:A6:CA:ED:65:DE:40:4A:AC:D9:F0:09:F2
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Certificate issuer:       /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial:       058B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
Manifest number:          0555
Signing time:             Tue 16 Jun 2026 23:40:50 +0000
Manifest this update:     Tue 16 Jun 2026 23:40:49 +0000
Manifest next update:     Tue 23 Jun 2026 23:40:49 +0000
Files and hashes:         1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: T1G4mN/lz2pDGWzpX2NX3o45rdox9seaQx6JtBYsbmg=)
                          2: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: 4s7irTp5YZt4t4JUuvpt1hajQ6RV33feyUo5ylQX8mc=)
                          3: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: UtLN9LK6PXWEEFxc1KoSs2w5t7H8ccMsoGEgQElh3YE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
        Validity
            Not Before: Jun 16 23:40:49 2026 GMT
            Not After : Jun 23 23:40:49 2026 GMT
        Subject: CN=6a31df02-e18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:f9:2d:b4:53:d8:2e:c9:4a:8e:97:79:f1:
                    da:c9:cc:01:1d:63:94:b6:6e:c0:18:63:58:97:09:
                    5c:08:fc:2d:5b:e2:c5:fd:ac:f9:fc:2b:54:03:f1:
                    3e:9a:74:8a:a9:c3:f1:16:ad:6e:e4:46:1a:e8:cc:
                    f1:c6:bc:bd:8b:fb:5f:1f:40:58:c7:f0:bd:4b:c6:
                    f2:9f:7f:6f:98:f0:d0:a3:66:6a:40:a9:60:7d:fe:
                    b8:94:1c:97:15:6e:2c:7c:29:0d:a6:e3:18:bd:76:
                    dc:ea:50:7c:1e:9f:70:30:62:43:98:04:21:16:53:
                    40:92:58:23:19:a6:46:66:84:f6:85:5c:fe:92:e8:
                    64:27:f7:7d:dd:9f:4d:ef:0a:a5:4b:89:ec:45:e1:
                    12:e1:b0:75:14:75:de:1e:dd:65:9e:2c:cf:9b:37:
                    41:af:64:56:e7:7a:0d:1f:05:68:f8:ff:26:9b:c5:
                    da:a6:59:98:ca:8c:9b:c3:96:0f:83:0a:9a:d2:9b:
                    b0:6b:f7:b6:60:c2:d6:ee:74:a4:92:ee:67:61:d3:
                    80:a7:33:f3:cb:27:8c:a4:7b:0a:c9:40:f3:41:fb:
                    c0:77:e0:9e:fa:e8:96:a2:3a:04:c2:f0:88:83:f7:
                    71:fa:0e:44:f1:78:b6:7a:84:81:37:79:96:01:2f:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:F6:A4:7A:44:E2:0C:A6:CA:ED:65:DE:40:4A:AC:D9:F0:09:F2
            X509v3 Authority Key Identifier:
                keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ac:7f:65:24:c0:75:81:0d:1c:4e:d6:62:7f:9a:e1:c9:a9:
         35:b9:bb:81:c2:c9:33:ae:26:b8:f4:e1:2f:b8:90:db:04:03:
         1d:78:d1:59:d7:5b:f8:30:12:d3:a2:ff:02:ed:4a:8b:06:ad:
         cd:69:db:17:a6:73:93:c4:57:86:5d:aa:0a:cf:b6:e8:1c:30:
         92:d5:76:15:96:79:9a:7a:70:3b:fa:7d:75:af:ff:ff:d2:2c:
         d6:3c:56:04:6b:97:c4:28:67:60:c6:5c:10:dc:a3:2a:17:d5:
         04:c7:59:7c:ce:4e:9c:ff:fa:22:d2:f6:f2:7c:e7:af:02:1f:
         a7:3f:70:ee:d7:42:cd:16:fb:8f:f8:93:84:57:bc:7b:40:96:
         ee:0f:b6:8e:d0:4f:2f:3f:fb:32:28:bb:c4:29:d0:65:86:3f:
         ed:d8:58:57:9c:32:07:05:23:f6:fe:25:01:d5:c0:89:05:9c:
         0e:3e:c4:80:2e:52:4e:79:73:9e:b9:ea:69:69:9e:14:3f:30:
         cb:46:6f:c7:b7:6c:1d:b4:db:61:c5:e8:62:97:9f:4c:cf:aa:
         96:f8:5e:4e:21:5b:eb:ac:e5:74:4f:2a:ba:7f:a1:b9:82:7a:
         2c:f6:b4:49:97:4f:8a:c2:76:f7:9e:f3:d6:ab:55:ac:6b:87:
         7b:d4:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:36:46 2026 by rpki-client