Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
File:                     38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json)
Hash identifier:          59gwko0uaxyjmFGcDtNIOBV34pDUcRs71yKrjgDI0VM=
Subject key identifier:   6E:A6:04:ED:05:2A:87:7A:DE:13:1C:77:81:07:83:10:2F:37:8B:68
Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99
Certificate issuer:       /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
Manifest number:          EA
Signing time:             Fri 05 Jun 2026 06:59:10 +0000
Manifest this update:     Fri 05 Jun 2026 06:59:10 +0000
Manifest next update:     Fri 12 Jun 2026 06:59:10 +0000
Files and hashes:         1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: +87muHx2ts7DMA66qL7LGS1gsGA9vJuyNcVdcI5Tlqo=)
                          2: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=)
                          3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl
                          rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 06:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
        Validity
            Not Before: Jun  5 06:59:10 2026 GMT
            Not After : Jun 12 06:59:10 2026 GMT
        Subject: CN=6a2273be-3600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:b2:10:66:ec:ec:3a:88:a3:13:4e:e0:8a:
                    72:1e:38:ad:c9:52:c9:3e:29:57:54:5a:c3:aa:1f:
                    53:85:0d:b5:e8:76:67:86:5c:1e:25:5f:60:38:42:
                    02:9e:b6:6c:ff:74:dd:bc:84:36:d4:15:32:ea:51:
                    81:6a:5b:cc:4c:b3:7d:12:5e:82:39:e1:7b:94:6b:
                    ff:03:46:8e:c5:c3:84:8f:43:5a:5b:97:7a:5d:92:
                    35:3b:0d:a5:4f:7b:f1:0b:0e:a4:bb:22:e1:e5:94:
                    3e:2f:3f:b9:89:e6:ac:d0:87:f2:05:ca:81:fa:16:
                    c1:98:d7:2b:ba:03:e7:83:ac:ac:04:f8:0c:33:c7:
                    03:7e:5e:5c:98:0a:3b:5b:3b:8e:8e:ae:df:3e:3a:
                    1d:3d:b2:48:a3:ce:d1:f5:0a:d4:0f:ad:6e:d5:ff:
                    d3:ba:6b:a3:5e:f9:9c:51:94:78:bd:69:8a:06:79:
                    60:d6:24:8f:f8:87:bf:72:ca:00:87:ae:a7:8c:38:
                    fd:d5:2a:f1:64:6b:3c:1b:37:de:51:9a:84:35:34:
                    01:39:18:63:d7:f6:e9:3a:f4:56:a7:80:3e:8b:9f:
                    d2:3b:92:c0:cb:60:20:0a:08:c1:0e:3c:f6:79:15:
                    a0:8e:d6:38:25:2e:e3:82:b5:d5:11:98:0c:75:55:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A6:04:ED:05:2A:87:7A:DE:13:1C:77:81:07:83:10:2F:37:8B:68
            X509v3 Authority Key Identifier:
                keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:da:6b:e3:7d:b2:ee:7d:2f:f7:8a:1b:29:dd:2e:fc:e8:35:
         af:3b:53:5a:c1:d6:84:a9:2a:9d:1b:63:42:40:27:2d:7a:9a:
         c5:89:f7:36:8c:57:72:d2:c2:b0:07:55:58:b2:08:b4:a6:64:
         54:6f:d1:2d:08:fa:d9:70:bf:14:a5:7b:26:c0:01:56:f3:50:
         ac:d7:94:8a:6c:80:d5:0f:e1:f6:e1:b7:3d:38:7a:fe:35:a4:
         8c:ee:d4:3e:81:cc:c4:a8:84:f0:2b:7d:18:7f:fd:7c:13:99:
         6c:f6:12:91:5b:23:31:49:02:19:41:85:df:6e:9a:3a:9f:68:
         13:af:5f:08:c1:46:e7:48:33:90:a0:86:bc:8e:26:ad:d7:55:
         2c:9a:32:fe:87:1c:d4:9a:8c:a8:8c:20:19:39:e7:c4:12:91:
         41:2f:bc:b1:e4:bf:10:c9:51:71:0d:66:82:c9:7e:94:92:74:
         9a:2d:41:32:29:74:8c:4c:6f:82:ab:90:6a:5e:5e:94:4f:64:
         c2:19:eb:1f:5c:e2:c1:c5:00:9b:8d:0f:46:67:4f:f7:1f:de:
         0e:e3:87:dc:81:a6:f0:6b:f3:4d:02:f1:6a:16:99:d8:38:ab:
         6e:f9:8d:7a:01:f7:8a:44:1d:12:4e:31:34:49:6d:70:12:aa:
         a9:8c:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:12 2026 by rpki-client