Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
File:                     M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json)
Hash identifier:          seoMcNfWb2kvqYymUPxwk8Hg9n3fqPQt+hp96BdKAMQ=
Subject key identifier:   9F:0E:5A:42:BC:D4:F9:9D:41:8D:72:45:EC:A1:D5:A6:0E:58:B9:2C
Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
Certificate issuer:       /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
Manifest number:          5F
Signing time:             Mon 01 Jun 2026 08:55:57 +0000
Manifest this update:     Mon 01 Jun 2026 08:55:57 +0000
Manifest next update:     Mon 08 Jun 2026 08:55:57 +0000
Files and hashes:         1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: r2PfqzueVfEW9y+NbQ01sinsfG5GobN/PKtjIdYAHiE=)
                          2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
                          rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
        Validity
            Not Before: Jun  1 08:55:57 2026 GMT
            Not After : Jun  8 08:55:57 2026 GMT
        Subject: CN=6a1d491d-e083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:74:84:ec:a3:cc:4d:cf:c9:43:16:24:a0:
                    ee:d6:9e:c8:06:39:88:1d:38:44:f0:c8:61:78:e9:
                    ec:c4:08:01:9b:f6:5a:9e:35:bc:f6:b7:13:a9:49:
                    da:13:a2:50:a4:5f:e5:ad:30:3c:3a:76:67:cf:03:
                    08:6c:bb:2f:d8:b4:34:62:3b:93:ed:b1:f4:d6:77:
                    8a:92:58:ad:01:c4:4d:f0:81:1b:85:5e:79:1b:04:
                    f4:8d:6c:5c:41:4f:b3:86:c3:81:92:df:b7:95:2e:
                    85:3a:4f:dc:b2:34:e7:5a:39:49:fc:06:b5:78:37:
                    52:df:6f:e9:ef:e9:75:d7:49:8d:db:89:a1:1e:e7:
                    3b:bb:cc:94:59:f6:bd:6b:c0:b4:d9:3a:3e:67:fd:
                    86:21:46:60:85:d2:57:22:8d:6a:02:de:14:a5:2a:
                    d6:a3:45:5f:7d:5d:ce:83:ea:ae:3c:e6:a8:c9:90:
                    f4:4b:7c:59:4d:5d:ca:43:29:1f:30:3b:97:12:9e:
                    55:cb:69:58:1e:9e:42:78:da:6c:83:94:c8:93:1b:
                    3b:8e:a1:cc:97:df:75:47:e1:41:05:7f:4c:59:b4:
                    be:56:3e:d6:81:8c:db:28:c4:b6:5c:4e:43:00:4b:
                    95:6b:c9:f1:61:8b:2f:e9:95:53:a4:6c:76:14:01:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:5A:42:BC:D4:F9:9D:41:8D:72:45:EC:A1:D5:A6:0E:58:B9:2C
            X509v3 Authority Key Identifier:
                keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d0:dc:6e:43:77:e0:e7:66:95:d1:b5:95:24:15:34:8a:f9:
         6e:45:a0:e3:2a:d8:ee:13:73:8a:a8:3c:17:9c:1f:2e:de:e9:
         ed:dc:3c:10:a8:74:73:79:b0:44:a4:f3:2c:68:6f:6e:52:aa:
         01:85:0f:fd:d1:e0:03:e9:f1:d7:78:60:a5:ea:e4:fa:2f:c2:
         7c:0c:b6:e5:ad:6d:ac:5b:5f:fd:aa:94:a9:a7:6c:e7:5b:80:
         5a:36:db:4f:42:ae:b3:12:36:ad:75:a7:e5:92:3d:c5:1e:53:
         36:7d:40:ae:00:f2:ad:89:79:8f:10:d5:be:27:e2:9b:23:fa:
         3e:34:6a:09:5f:7c:fa:d6:c9:80:71:cd:c0:3f:8d:d4:83:db:
         b5:61:46:17:bd:12:61:5e:8b:42:0a:66:4d:40:32:54:e8:22:
         39:5b:7e:44:2f:7a:fd:81:3c:37:05:03:c2:c7:8b:ba:37:23:
         2a:3c:d5:e6:fc:8a:97:19:3c:4f:9c:d5:75:6b:82:ef:2d:af:
         2b:dc:54:d7:18:d6:be:71:f0:66:5a:4d:33:9a:ca:77:d9:ee:
         23:ce:bf:e4:70:50:a9:ae:a9:46:78:e8:2a:81:af:22:9f:41:
         23:60:07:ef:cb:4c:3a:87:e3:d0:7e:49:e8:21:1a:f2:28:f1:
         d5:5b:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:38 2026 by rpki-client