Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
File:                     8WJXDJs0J9iIMy8qJEOCiAfghyM.mft (raw, json)
Hash identifier:          wNSgNbe2TIotsimb1ivu+V09yAXnwmuVl9O8cxIWCrM=
Subject key identifier:   CA:59:46:62:73:B9:21:CF:1D:03:DD:72:25:AC:CC:7F:41:F1:0B:6C
Authority key identifier: F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23
Certificate issuer:       /CN=A91EA850/serialNumber=F162570C9B3427D888332F2A2443828807E08723
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
Manifest number:          59
Signing time:             Sat 13 Jun 2026 08:17:51 +0000
Manifest this update:     Sat 13 Jun 2026 08:17:50 +0000
Manifest next update:     Sat 20 Jun 2026 08:17:50 +0000
Files and hashes:         1: 8WJXDJs0J9iIMy8qJEOCiAfghyM.crl (hash: 9ZQE6OBrXQHoW2yn3H5D8N96QyiYmczt/PIY4TgXPi0=)
                          2: 59A00586ED3B11F0828F39A04B6F56BC.roa (hash: EgWrQHGbU31Uz75+qWGvTeIJzWumnz7hpQn1ooNpH0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl
                          rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA850, serialNumber=F162570C9B3427D888332F2A2443828807E08723
        Validity
            Not Before: Jun 13 08:17:50 2026 GMT
            Not After : Jun 20 08:17:50 2026 GMT
        Subject: CN=6a2d122e-33b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:c5:43:dc:ae:01:fb:61:0c:18:ee:fb:3b:
                    a9:3d:2f:5a:32:78:d1:f5:81:9d:2d:28:36:91:5a:
                    6d:97:34:2e:0b:cf:33:57:ce:9a:a5:33:37:ae:14:
                    eb:57:82:3d:5b:0e:7d:c1:2b:bf:de:bd:cb:4e:37:
                    82:a9:f5:cf:c4:4c:5a:a0:18:b3:52:22:db:05:9f:
                    13:fa:af:e2:94:2e:e2:3a:b4:81:90:06:23:7b:a4:
                    62:96:ad:ab:db:a2:63:1b:c0:1e:04:df:5c:ca:35:
                    fa:92:cb:c4:d6:21:07:c9:21:9a:9f:c0:63:a0:45:
                    17:7a:b2:5e:d8:30:fa:3c:4e:67:d3:78:05:25:1a:
                    ac:3b:0f:4e:fd:ad:09:b3:62:80:8e:29:a8:dd:07:
                    11:54:7d:ac:87:7c:d9:79:d6:9c:4b:d1:38:93:1b:
                    8c:73:9c:ed:82:42:39:45:d5:a1:a0:fe:a8:61:b2:
                    e5:49:ab:62:ba:90:32:fe:52:5d:57:3b:ea:44:d6:
                    3d:17:26:fc:a4:b4:1a:f7:8b:0e:90:0d:57:d5:f4:
                    68:73:07:a6:0b:75:28:5d:d4:de:e4:24:ca:45:5d:
                    23:8e:a6:10:c2:71:26:2f:d2:d5:9a:a4:b8:50:39:
                    5c:bf:7f:7d:64:04:f8:cb:07:83:d7:76:43:67:9e:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:46:62:73:B9:21:CF:1D:03:DD:72:25:AC:CC:7F:41:F1:0B:6C
            X509v3 Authority Key Identifier:
                keyid:F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:7a:d5:a1:4d:89:a9:df:17:4d:d9:e5:d4:a5:af:65:d6:
         7e:68:b2:7f:9d:88:63:35:55:3e:35:75:c9:8c:59:dc:e4:eb:
         91:8d:ae:e2:7e:b3:80:4a:33:5a:2f:f4:d9:87:81:e4:49:11:
         d3:6f:3e:08:dc:e3:75:cd:4c:d3:aa:d4:0a:aa:75:29:82:0d:
         8c:e3:80:ec:3a:4f:6b:c3:97:07:6c:8d:ee:4b:aa:fc:af:1f:
         eb:e6:bb:7a:2e:a8:e9:f8:b1:34:f4:b2:b0:f2:34:15:29:cd:
         a0:48:c2:31:83:e3:40:46:9e:63:a6:12:b2:a7:6a:b9:bf:5c:
         35:5b:e5:2a:7c:1e:ff:f7:1e:fa:20:7d:12:43:91:d5:61:63:
         7d:c1:e7:5a:cb:0a:90:3f:30:30:8d:6a:09:02:ad:1a:21:4f:
         44:33:ab:8d:e1:01:66:90:6a:a2:db:53:0d:b9:94:95:14:06:
         b8:bc:0a:76:99:9f:b9:ae:be:6b:54:ba:73:33:c8:f2:ed:ba:
         1e:e6:e1:bb:a5:62:db:80:2a:ab:87:61:2c:91:0c:bc:5b:18:
         6b:bd:4c:df:32:b4:a4:a4:1c:77:1b:85:f0:50:8b:fb:7a:62:
         a1:8d:82:f8:36:f1:ca:8d:90:25:f8:a4:38:e2:27:cc:67:d4:
         93:86:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:42:49 2026 by rpki-client