Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
File:                     53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json)
Hash identifier:          /c2RScONp5zPS+7YjgbI8zniaxUVDqLXc+A+kDmkbsM=
Subject key identifier:   C4:62:BF:70:BE:BA:B7:22:62:28:0D:76:51:76:FB:9F:14:67:96:CF
Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
Certificate issuer:       /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
Manifest number:          0119
Signing time:             Mon 01 Jun 2026 06:42:05 +0000
Manifest this update:     Mon 01 Jun 2026 06:42:05 +0000
Manifest next update:     Mon 08 Jun 2026 06:42:05 +0000
Files and hashes:         1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: WaIuR1woJt22A5Vc39n+5dk9mJOxKwQFzAEAySM0wu4=)
                          2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: QkVPChArca7p58dKOFKdeRoa2Z6OFQu0S93mu5qNgts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
        Validity
            Not Before: Jun  1 06:42:05 2026 GMT
            Not After : Jun  8 06:42:05 2026 GMT
        Subject: CN=6a1d29bd-7f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:c8:56:56:d0:35:6b:c8:a2:b3:81:55:39:
                    73:f0:59:7f:e2:bd:5d:73:9c:6a:f7:47:15:84:e1:
                    f5:1f:35:12:89:93:20:c3:91:52:fa:cf:f1:d6:6d:
                    31:96:20:3e:06:5d:9e:ec:0b:50:18:b9:34:33:40:
                    73:5e:ae:97:52:f1:90:d6:a9:2a:8a:cd:84:cc:ba:
                    86:1c:51:ad:9e:71:c9:e4:7f:64:25:2d:6d:d5:c2:
                    44:d4:63:97:d1:c9:3b:5e:d4:ea:91:c4:ad:61:b6:
                    fb:57:aa:f9:ee:47:95:8d:32:ab:24:c8:40:75:62:
                    bb:65:33:32:89:25:67:98:39:3f:33:2d:98:93:00:
                    40:47:05:3c:83:ef:05:dd:09:e5:c0:90:22:0a:f6:
                    1b:5b:79:e7:30:43:b8:bd:f4:7a:01:25:8f:d8:f1:
                    b7:14:64:a6:be:37:3b:2c:81:96:5d:97:b3:fe:8a:
                    a9:8d:5c:77:47:0a:e8:fc:1c:06:c1:fa:23:2a:7c:
                    b5:b4:4a:d4:fc:46:fa:ca:40:28:06:96:10:3f:5c:
                    dc:d5:29:1b:cd:cc:20:fe:97:42:9d:8b:29:d5:42:
                    59:83:d0:fb:5f:78:6c:ab:a6:2a:15:e7:2e:d8:bf:
                    73:00:db:9d:83:c6:fb:08:29:09:38:ea:c2:f3:79:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:62:BF:70:BE:BA:B7:22:62:28:0D:76:51:76:FB:9F:14:67:96:CF
            X509v3 Authority Key Identifier:
                keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:61:97:ae:b9:ff:eb:de:4c:6e:6a:52:14:5f:ae:a1:d4:
         7d:40:02:a3:3a:64:38:e4:62:9d:4b:1b:f0:c0:1b:6a:5d:1f:
         83:65:8c:99:0a:e3:4a:a7:86:65:4d:d0:ea:92:c0:cc:8f:bc:
         4f:89:50:f9:2e:a6:84:df:9f:37:b0:72:f2:21:4f:41:99:b3:
         84:57:ad:24:dd:a9:60:53:c2:d4:29:01:50:98:56:76:fb:7a:
         d8:3f:4a:99:73:49:53:cd:a5:a7:4f:f7:02:b0:d0:69:b3:1d:
         27:1b:bb:ab:bc:fb:e3:2c:24:9a:bd:a0:45:cc:3d:5c:85:f5:
         f7:09:ed:09:10:90:ea:8f:44:86:69:f7:4b:e3:70:e7:f0:1a:
         11:cb:d5:5c:84:5f:65:17:7f:88:ba:ba:64:27:5f:fc:53:95:
         4e:48:ad:66:04:2a:40:69:4d:bf:41:cb:d4:5a:37:68:2f:92:
         8b:a2:d7:e8:72:b0:1b:3f:4e:5f:66:d4:79:6b:db:b9:04:fe:
         a8:19:c1:d0:87:8b:66:a0:58:9a:3b:43:c6:92:68:86:63:c6:
         26:e7:28:54:6a:81:29:4e:c1:37:a7:73:ba:f5:a0:57:76:63:
         54:d9:3b:b0:3c:f2:5a:c2:72:f9:42:ca:36:bc:77:63:d5:46:
         6e:4b:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:57 2026 by rpki-client