Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File:                     AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier:          pm9X77GkdyB4V4LneaCXpdXktqnjAevzbwcYkHI/cmY=
Subject key identifier:   F8:AA:B3:E3:13:B4:42:5F:7B:66:AA:5D:73:E7:A7:59:00:78:10:B5
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer:       /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial:       05D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number:          05C0
Signing time:             Sun 31 May 2026 23:48:04 +0000
Manifest this update:     Sun 31 May 2026 23:48:04 +0000
Manifest next update:     Sun 07 Jun 2026 23:48:04 +0000
Files and hashes:         1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: 3vjd7VcEf+fJYfGGCoxT+PgcLCl+PP5U8q58hPZZx3M=)
                          2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: faousUY0JgE8iIy2l7ylas9vT1kvEU/RrBUjclwr8EM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
                          rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 23:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
        Validity
            Not Before: May 31 23:48:04 2026 GMT
            Not After : Jun  7 23:48:04 2026 GMT
        Subject: CN=6a1cc8b4-4462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8f:ee:25:f7:39:a4:1b:59:91:b0:55:1a:6b:
                    e2:1e:47:f6:eb:14:96:df:88:3d:da:d9:91:3f:31:
                    2b:b7:73:f6:2f:7b:1b:e9:0d:3a:7b:2a:ab:71:35:
                    5c:68:6d:79:d9:75:16:9c:80:43:15:61:4b:f3:68:
                    30:fd:be:d5:d8:b6:0c:51:b9:2a:47:28:33:1c:bf:
                    c8:3d:eb:ef:8c:c3:97:39:b9:f7:78:9d:5e:7c:18:
                    bf:04:2e:17:3d:32:1b:5c:e2:2f:2f:0f:be:e7:f1:
                    7c:d0:d2:67:f9:db:e4:29:f2:d3:e9:30:b1:60:e1:
                    68:fe:c0:8a:df:35:f5:55:de:08:ee:33:bb:89:03:
                    70:30:81:fa:98:db:1d:93:e9:45:6f:c6:25:44:ee:
                    aa:e4:ee:a6:a7:7c:4b:20:41:16:29:46:26:db:18:
                    77:56:24:8f:f4:eb:2e:c4:4f:12:5f:9b:e1:52:6b:
                    5e:ae:12:73:5d:e1:15:10:0a:1a:b0:0f:4e:5c:5a:
                    40:7c:12:38:1d:2d:a4:b5:47:a6:c8:5b:96:af:44:
                    59:bd:a2:af:e4:d7:a0:ce:40:7a:ea:f8:93:76:e3:
                    65:cd:0f:aa:02:30:71:37:6d:79:6a:9b:4f:d6:77:
                    78:3e:b0:a6:6c:b9:10:b3:3c:6d:cc:1e:7a:76:60:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AA:B3:E3:13:B4:42:5F:7B:66:AA:5D:73:E7:A7:59:00:78:10:B5
            X509v3 Authority Key Identifier:
                keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f2:de:f3:e7:89:23:63:1a:ff:35:c1:48:55:9c:2b:f0:a1:
         53:55:6a:1f:76:07:a0:c5:c6:df:09:25:ba:ba:d5:77:d1:ab:
         e4:57:e6:49:7a:e5:9d:64:00:4b:08:09:08:af:3b:6a:bc:aa:
         55:6a:49:e6:af:11:dd:23:30:11:11:65:7b:9f:e0:3b:a3:a1:
         0d:5a:be:b5:f3:64:d1:d9:29:4e:b9:d6:d1:e6:e4:b8:75:77:
         52:5c:b6:e0:55:26:52:fb:14:ea:f2:c3:cf:c4:56:6d:3b:35:
         37:41:d5:dd:7e:5b:96:fe:b0:4b:c7:8c:5e:9a:f5:44:76:20:
         7c:e3:78:f1:29:05:16:3b:e4:9f:37:c1:ae:73:a5:97:58:0c:
         b1:7b:a3:93:bd:a6:79:52:91:50:c6:37:8d:9d:23:0f:85:8c:
         1d:65:49:4b:3e:b5:29:c3:31:0b:c9:5b:22:68:c1:27:65:4f:
         d3:42:99:17:e2:8a:55:c3:4a:8b:92:06:11:f5:8c:02:82:7b:
         38:f9:73:43:80:7d:d1:89:69:cc:28:e1:90:7b:90:d5:59:1d:
         be:55:f0:ba:87:dc:be:54:f1:c1:4e:6f:33:98:a9:b9:b6:b4:
         d4:c2:73:70:86:fa:08:14:d2:e3:c1:4c:74:26:7a:be:26:97:
         c9:d7:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:24 2026 by rpki-client