Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
File:                     mG5BZ9azgH9J98JgDWD5wmCacJY.mft (raw, json)
Hash identifier:          ThTwibGXNunlZJyQxNdroECNMBusCP8Nv6SosYNZjck=
Subject key identifier:   9B:94:97:61:5F:B2:E9:FD:A1:16:89:3C:D5:5F:CD:EE:2D:12:C7:C6
Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96
Certificate issuer:       /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096
Certificate serial:       0CEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
Manifest number:          0CE3
Signing time:             Fri 12 Jun 2026 18:21:52 +0000
Manifest this update:     Fri 12 Jun 2026 18:21:51 +0000
Manifest next update:     Fri 19 Jun 2026 18:21:51 +0000
Files and hashes:         1: mG5BZ9azgH9J98JgDWD5wmCacJY.crl (hash: S8bKWDlTzZFIuimeRgOVICKpvmlaGyELMAnO5azWJWQ=)
                          2: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (hash: NdHvCz04ygMhEdy3te9H+OifuIBwvEnTvTRWLq7jQEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl
                          rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3806, serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096
        Validity
            Not Before: Jun 12 18:21:51 2026 GMT
            Not After : Jun 19 18:21:51 2026 GMT
        Subject: CN=6a2c4e40-2059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:5b:b5:86:36:67:b1:1a:69:06:d4:c5:75:
                    03:6c:66:95:32:14:87:bc:a4:e4:5f:d7:ee:d4:ac:
                    7f:4d:a5:3d:ab:4d:06:ca:12:b2:96:50:d0:db:e8:
                    62:7e:ab:3f:ba:d8:be:24:62:ee:fd:d1:ca:bd:43:
                    a8:37:01:9a:f7:86:3f:0e:96:65:d8:b3:66:28:16:
                    12:24:03:b1:72:0c:b0:83:71:fb:f1:df:1b:33:f7:
                    b5:8b:9b:06:66:29:f5:33:9d:02:5e:2f:03:67:fb:
                    0d:74:60:71:ad:5c:a5:ab:f7:10:39:8b:c3:e7:88:
                    12:bc:a2:2a:26:39:1a:f2:8c:7b:ad:23:44:b7:b5:
                    a0:4c:18:60:95:23:4c:01:09:c9:df:b1:ce:7d:3d:
                    f8:46:77:94:0b:38:e8:30:09:8d:29:29:bb:a4:13:
                    af:66:55:bd:dc:cb:24:61:24:c9:8e:d5:8d:59:ed:
                    b5:03:d3:1c:5f:25:7f:55:00:8e:6b:c4:0b:47:45:
                    57:34:5e:a4:3c:40:b4:8d:f9:c8:1a:6c:2e:3d:05:
                    28:06:e2:b8:7d:ed:67:7e:56:c4:49:80:2e:0d:d8:
                    19:3e:44:3f:aa:44:c5:9f:49:65:30:1d:f4:49:46:
                    0b:63:f5:a8:4b:d5:f2:d0:7d:23:ff:72:94:53:64:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:97:61:5F:B2:E9:FD:A1:16:89:3C:D5:5F:CD:EE:2D:12:C7:C6
            X509v3 Authority Key Identifier:
                keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:14:ba:50:1e:23:0e:91:de:02:32:e9:a7:c7:19:fc:0a:d7:
         d9:cc:0d:2a:c4:95:f3:26:7d:25:54:34:b3:24:e0:2f:cb:9b:
         8c:cb:38:c5:47:20:e2:fd:b7:ad:ce:99:65:09:72:7a:4e:6f:
         26:bb:b7:28:b7:83:83:07:e1:e8:a4:88:9c:8e:ee:b1:a6:a5:
         e7:c7:60:08:6f:ef:f3:b7:3c:3a:22:b7:04:b7:f5:a5:97:7b:
         47:52:2e:5a:f0:00:cf:c2:8f:bc:5a:85:7e:de:85:ee:a8:ff:
         1e:22:4f:ef:35:ae:b0:f4:ab:cc:b4:d4:1b:f3:1a:51:2f:1f:
         a5:ad:a1:ff:0f:f6:81:16:b3:7e:72:44:00:f6:aa:ab:77:b0:
         d1:05:ef:3f:9b:c4:85:a1:84:f5:e7:f0:79:bb:5c:34:29:f3:
         fc:80:c8:e3:42:4f:9a:78:77:73:24:9e:44:2b:9d:87:92:44:
         ac:7c:26:b0:bf:7b:c6:f8:6b:d3:a4:9e:19:b5:a4:c9:7c:cd:
         58:db:db:15:0f:97:2b:2d:8e:53:34:72:97:34:e8:31:cb:1d:
         d0:f1:4f:d5:5f:22:62:ae:9e:c8:56:64:0c:5e:50:8d:a2:e7:
         3d:60:45:be:ff:1c:e4:b0:99:06:f2:88:2e:00:f9:ba:47:89:
         1b:84:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:10 2026 by rpki-client