Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File:                     X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier:          0yzNDj580V6Ezli3nCa+/aroZmUhciV3jCv9hFxYZKg=
Subject key identifier:   98:9D:22:00:3C:11:A3:D6:11:A7:DC:9B:28:4B:98:83:6C:3A:6B:69
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer:       /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial:       1EFB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number:          1E69
Signing time:             Fri 12 Jun 2026 16:03:14 +0000
Manifest this update:     Fri 12 Jun 2026 16:03:13 +0000
Manifest next update:     Fri 19 Jun 2026 16:03:13 +0000
Files and hashes:         1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: 89FZxsuqPPSNJ2gEHU8Rt+t1V+C5F5mVtkGC4spB7SY=)
                          2: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
                          3: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
                          4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
                          5: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7931 (0x1efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
        Validity
            Not Before: Jun 12 16:03:13 2026 GMT
            Not After : Jun 19 16:03:13 2026 GMT
        Subject: CN=6a2c2dc1-ddc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:9a:9c:ad:3d:2e:38:4b:6f:fb:0a:f9:26:
                    10:47:ee:ff:a9:06:2e:5f:03:ff:68:a9:9b:48:27:
                    25:a8:e4:44:6b:29:65:8e:1e:d1:c2:5b:16:1d:40:
                    91:45:32:56:e5:5d:ce:75:b9:d2:1d:ac:2e:4f:5f:
                    07:11:78:d4:da:a2:ca:a3:d2:51:5c:2b:0e:36:bc:
                    39:48:62:eb:75:be:28:de:8a:59:8a:f8:7a:35:11:
                    f4:70:f4:e7:1c:8f:7e:66:7f:a9:97:dd:5a:5c:95:
                    98:c5:21:af:72:f7:cc:d0:42:00:a8:b5:4e:e9:ca:
                    2d:8a:9e:31:ad:9e:9c:91:4f:00:12:9b:3a:12:60:
                    94:27:31:39:5a:51:e2:c9:26:49:d9:8f:d9:9e:9a:
                    0e:f6:65:d8:73:75:57:70:82:e6:09:99:5e:fb:c7:
                    c9:49:f3:87:25:e7:cf:86:3f:42:e4:da:0e:a0:3c:
                    b7:34:6d:bc:05:08:bd:41:7b:25:36:64:24:85:25:
                    6a:2a:f9:0c:ce:ed:4a:47:f5:ee:b8:7f:de:02:86:
                    c3:49:41:65:4a:2e:6d:d9:f2:ad:ff:60:b0:34:05:
                    4c:a1:be:1b:d1:60:92:a8:55:1d:26:43:ac:c9:86:
                    5f:30:52:a3:94:26:48:a6:a3:14:fa:1c:61:9a:36:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9D:22:00:3C:11:A3:D6:11:A7:DC:9B:28:4B:98:83:6C:3A:6B:69
            X509v3 Authority Key Identifier:
                keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:50:1a:9e:e8:81:1e:07:11:24:33:c0:e5:5f:3d:84:46:78:
         ed:ba:5e:5c:9d:d7:88:91:af:ea:32:8f:fa:98:84:87:99:42:
         fd:91:c9:33:1f:20:f4:2a:61:3a:be:28:3c:2f:4b:25:e4:6f:
         23:e5:70:05:84:74:4d:cd:b2:36:74:da:9b:8e:1b:cd:6a:81:
         2d:78:79:5c:2d:a3:af:af:82:e1:3c:a3:94:6d:22:29:f6:9a:
         54:f2:6a:56:ac:0b:8b:7c:d8:3d:9a:28:e1:53:ae:5b:14:e7:
         9c:5a:22:6e:b4:87:f8:39:2f:e4:1f:80:8b:39:67:38:3a:df:
         06:49:e1:2f:7c:95:66:c9:c4:19:fc:0c:cb:ad:c4:9d:1d:e7:
         21:30:2d:fd:b9:d4:6c:8e:24:25:b7:23:97:36:d7:c0:49:2f:
         ea:91:ea:7d:03:86:93:28:60:05:dc:4e:a5:7a:ae:43:13:4a:
         84:f3:3e:d6:08:b2:a4:4a:af:cd:ad:6e:49:d9:3b:cb:fa:70:
         bb:6f:73:9d:12:66:48:a8:39:5f:ed:e2:e3:23:f4:13:4a:29:
         17:91:7e:59:d4:25:b1:95:47:e5:7a:ee:e2:b1:3d:cc:34:52:
         e5:d3:c4:f5:f6:94:e8:c9:ec:76:9f:6d:68:2f:54:5f:97:2f:
         04:34:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:48 2026 by rpki-client