Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          0a00XqQ7evTaByMjxkwtWgQqvUzm41ACn9AOGNvActo=
Subject key identifier:   72:E8:08:12:AD:CC:DE:E4:01:80:4E:34:1B:D5:35:2B:00:A7:79:FF
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          0102
Signing time:             Thu 11 Jun 2026 08:32:01 +0000
Manifest this update:     Thu 11 Jun 2026 08:32:00 +0000
Manifest next update:     Thu 18 Jun 2026 08:32:00 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: YKjSmWXu+3v3kouPR3otOkUcZqnKAEY/qPQWU6EX6D0=)
                          2: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
                          3: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
                          4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Jun 11 08:32:00 2026 GMT
            Not After : Jun 18 08:32:00 2026 GMT
        Subject: CN=6a2a7281-7bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:c3:53:e2:ad:06:b6:47:d9:17:1e:3f:8b:
                    6e:a2:69:b1:5d:fd:00:bf:6e:bc:64:45:36:60:c7:
                    35:10:fb:a3:85:d2:c1:13:26:47:e3:e2:d6:02:94:
                    0f:2b:95:5c:a7:9e:af:24:87:7e:8a:c2:1f:63:18:
                    19:c8:ed:56:28:91:e4:2a:5e:86:9e:49:1a:f8:89:
                    b4:c4:a8:b3:e2:5b:80:36:d7:b6:7d:23:fa:c5:2c:
                    d0:e7:28:86:43:23:87:c4:df:b9:58:82:2b:b9:16:
                    d3:4c:af:b7:aa:71:5c:ab:22:6f:ba:70:36:fb:6e:
                    8b:6c:ff:cb:1c:be:44:90:bb:5e:bd:3a:31:0c:95:
                    79:c9:ae:12:e1:76:80:dc:08:00:d7:2e:5f:38:a3:
                    a8:cb:e2:25:d7:68:23:27:d3:82:3f:4a:9a:fe:9e:
                    1c:f0:16:f4:3b:37:9a:db:b3:02:1c:fa:ca:ad:e9:
                    67:c9:c2:ae:78:57:49:f7:07:af:90:cf:be:de:00:
                    3e:10:7d:39:ec:6a:11:15:7e:32:52:4b:1c:9e:b8:
                    20:50:63:c3:a8:64:ff:10:35:a7:9e:46:14:5e:a2:
                    4b:9d:31:b0:ec:5d:fa:57:12:5d:aa:ac:b5:1e:f1:
                    2b:5f:36:22:a6:11:52:af:eb:50:99:df:0d:83:8b:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E8:08:12:AD:CC:DE:E4:01:80:4E:34:1B:D5:35:2B:00:A7:79:FF
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:01:f6:ca:88:ad:a1:8d:6c:90:3b:7b:b2:26:6e:20:d0:65:
         9a:21:2a:40:dd:4c:6d:97:b5:16:57:42:70:f8:f5:64:0d:45:
         1e:46:68:48:fe:64:1a:47:b4:7f:bd:fc:23:a7:b2:46:5b:a7:
         5b:c8:be:5b:b2:18:96:a5:7c:73:aa:9b:e2:e3:2e:b6:56:71:
         2b:35:1d:43:23:fd:57:3b:7e:0d:dd:e4:37:de:fc:01:20:3d:
         5a:89:79:e1:96:2f:97:85:4f:69:6d:6a:83:8a:35:d7:27:47:
         84:98:c0:6a:53:7c:1a:59:5d:f1:2b:2f:9a:bb:3e:32:22:72:
         a3:a5:ea:ea:57:23:79:bc:0e:a1:87:fc:6a:4f:45:d9:c2:ca:
         33:5f:50:c1:5d:aa:3e:91:7a:63:f6:a3:d8:04:0d:d3:9e:4a:
         6c:c5:63:46:dc:35:fc:cd:cd:a3:16:2e:ea:c8:5d:92:5a:b1:
         4e:c3:bb:df:0c:9f:bf:2c:61:4c:0a:40:93:87:51:94:ca:09:
         57:87:63:14:94:98:fe:bc:28:53:b8:46:7f:c3:1c:62:b6:d0:
         46:12:4c:55:53:eb:ec:32:64:3e:f6:5e:6f:0f:26:8d:89:4b:
         cc:77:58:37:67:50:12:df:cc:f7:7e:a6:e9:55:50:00:13:3f:
         5b:a7:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:27 2026 by rpki-client