Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
File:                     dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json)
Hash identifier:          pIybsZi5haV4+vU+TYI38f1ELrveeItfS4R3Fnd7cfc=
Subject key identifier:   7B:CF:00:66:93:70:F4:78:98:CE:F0:42:61:F3:50:A5:1C:22:AD:85
Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
Certificate issuer:       /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
Manifest number:          C5
Signing time:             Tue 23 Jun 2026 07:09:44 +0000
Manifest this update:     Tue 23 Jun 2026 07:09:44 +0000
Manifest next update:     Tue 30 Jun 2026 07:09:44 +0000
Files and hashes:         1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: hsbEW6yIhKqAuPa5XCNLkAuMa/EWHoMqguRM0Tlk3Uk=)
                          2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
                          rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
        Validity
            Not Before: Jun 23 07:09:44 2026 GMT
            Not After : Jun 30 07:09:44 2026 GMT
        Subject: CN=6a3a3138-1968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:d8:99:6e:53:f9:ac:45:b6:aa:0f:9a:9b:
                    18:24:a1:26:c4:87:c1:95:89:ed:6c:ee:02:22:38:
                    08:43:a6:02:fa:3f:75:71:18:72:3a:e7:56:5a:be:
                    77:9d:53:df:ea:7f:df:73:bf:0f:87:1d:c1:f4:6c:
                    de:6e:15:39:c2:44:e1:4f:98:53:6c:e4:6f:22:bd:
                    72:7d:e7:da:0e:cd:04:e8:0b:cf:97:5a:ae:b9:d9:
                    6c:81:c1:7b:1a:13:db:db:94:25:0c:c3:90:a0:25:
                    67:e0:ec:9a:5e:5c:5c:cd:2f:70:dd:50:55:f4:50:
                    78:a5:7a:3f:63:c8:e2:12:3a:7d:09:1f:27:d5:5f:
                    7d:c6:4f:c6:3f:b9:7e:22:3d:1d:14:98:19:d4:11:
                    eb:5f:e4:2d:dc:74:5e:43:ea:64:77:2c:19:ca:70:
                    d9:18:32:f1:4e:ca:fc:05:5b:e6:1c:2f:bc:42:7b:
                    55:5b:83:94:f3:8f:3c:03:11:3d:28:0b:81:eb:5e:
                    5d:6e:79:65:4f:40:c8:8c:f9:45:b3:84:b1:db:1d:
                    7e:93:09:78:4a:63:78:2a:8f:d2:68:9d:3a:4a:91:
                    8a:56:b7:a9:97:34:95:7a:51:e9:c3:34:f9:55:b7:
                    65:2d:b8:6b:59:65:d7:f5:bf:53:94:63:09:37:4d:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:00:66:93:70:F4:78:98:CE:F0:42:61:F3:50:A5:1C:22:AD:85
            X509v3 Authority Key Identifier:
                keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:04:69:a2:0b:ac:e6:11:0d:92:99:fc:00:4c:d4:63:21:8a:
         b5:ae:5f:df:92:67:5c:2d:df:8b:ad:4b:8b:5c:ee:cf:66:fa:
         51:17:48:f8:36:ed:d5:07:5d:29:91:23:c1:7c:4f:e4:69:eb:
         06:90:4a:77:e5:ce:73:da:0a:90:c8:d8:94:2a:e1:3c:bf:ec:
         77:88:58:4d:7f:fa:e8:08:da:1b:4c:75:68:dc:83:52:4e:84:
         42:02:46:48:e9:7f:1b:d1:ce:bd:3c:43:8e:aa:34:56:4b:c3:
         bd:44:ef:92:71:11:56:68:65:63:06:ef:d6:cc:6a:da:25:bf:
         e5:ff:b6:5e:ea:a5:4f:2e:e5:5d:ea:1d:1e:51:d4:01:a8:f1:
         9b:08:b3:3f:89:4f:6c:06:e2:2c:07:bb:74:a4:d5:ab:9c:a4:
         f5:97:d8:9d:f9:c0:5c:e7:63:77:8b:59:fc:26:f1:64:1a:cc:
         08:0c:70:cb:8f:e9:e3:8b:ca:e0:e3:40:85:bd:a2:1a:a8:79:
         48:4a:6b:a1:2b:82:29:1d:ee:8d:3d:44:7f:ec:68:f5:e4:99:
         87:1f:58:a9:08:15:a3:3e:6f:19:ea:c5:35:6f:e5:7a:33:67:
         50:e9:9a:08:2d:04:d1:20:0a:de:b6:df:7c:13:2b:21:66:10:
         25:20:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:08 2026 by rpki-client