Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
File:                     aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json)
Hash identifier:          7JrqaWAI5OIqhowvJqRxdq9+zTTG2PmtYaG8WPo/2vE=
Subject key identifier:   5B:78:C1:1F:D5:79:3B:55:EA:81:3B:BF:23:CE:7C:17:6B:DF:CA:5F
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Certificate issuer:       /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial:       07FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
Manifest number:          07F2
Signing time:             Thu 04 Jun 2026 21:20:32 +0000
Manifest this update:     Thu 04 Jun 2026 21:20:31 +0000
Manifest next update:     Thu 11 Jun 2026 21:20:31 +0000
Files and hashes:         1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: QFdfylgTSN0Yr7cDGlL+COwusOtMaWnfgA0nT5ak6Wc=)
                          2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: +dqj5dUwvw+xC7YK9g1ktDdByBUDI++m9TD2lt9C0Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
                          rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 21:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Validity
            Not Before: Jun  4 21:20:31 2026 GMT
            Not After : Jun 11 21:20:31 2026 GMT
        Subject: CN=6a21ec20-f672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:bc:0a:ca:fe:d5:eb:7b:d4:ac:10:df:a6:
                    ad:7a:bf:f0:5f:3a:f0:30:f9:8f:ea:35:00:ca:48:
                    b5:eb:9d:56:c0:6b:c4:aa:4d:e8:a6:22:ca:81:4b:
                    f5:57:5d:4f:85:8f:9b:8f:fa:6d:d4:d4:11:78:db:
                    f6:08:aa:f6:bd:c4:02:fc:dc:ee:b7:59:69:8a:04:
                    d9:f6:f9:01:a4:38:32:84:4d:c3:6f:e6:0f:6f:00:
                    cf:76:eb:f5:26:e2:ff:90:cd:6f:e0:6c:5b:51:f9:
                    ce:48:13:01:82:c2:6e:63:48:f1:a8:55:1c:5b:35:
                    23:04:01:6d:26:fa:7e:c3:5e:19:ff:ff:5b:f5:bf:
                    ab:73:89:b7:38:41:b8:6f:9d:02:b9:19:05:cf:b6:
                    56:67:33:2d:93:09:34:87:71:ce:42:c4:f5:f0:0b:
                    8a:1f:ab:ed:eb:8a:83:f7:7a:a2:f0:1a:b1:98:0e:
                    3d:23:cd:6a:41:f9:e7:96:22:47:5f:75:ea:0e:27:
                    75:df:ea:2b:93:9b:28:ff:d8:20:c0:57:59:6b:61:
                    75:9e:71:00:2d:9b:26:f8:17:bf:f1:f8:84:cf:b6:
                    93:d4:b6:a1:f4:c3:f9:33:d3:72:7b:9e:bc:2f:29:
                    c6:8e:5e:97:7e:80:d3:d3:df:4f:2d:d7:89:54:3f:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:78:C1:1F:D5:79:3B:55:EA:81:3B:BF:23:CE:7C:17:6B:DF:CA:5F
            X509v3 Authority Key Identifier:
                keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:f9:0b:f8:f5:fe:ad:35:05:4a:09:a1:5c:b7:e3:e6:fc:
         8e:ea:f6:d1:37:47:b3:2d:9c:7a:9e:a7:99:8c:8c:f0:d2:d7:
         12:a1:a9:61:86:57:e8:9a:ea:22:d9:35:40:b5:3d:ae:9c:c0:
         30:16:18:9c:70:6f:9e:4d:32:63:29:68:06:96:ee:92:d0:fb:
         d7:e5:f5:75:5c:b2:2a:e6:bc:50:a3:dc:7b:fa:e3:69:75:9b:
         f5:49:2b:a2:ca:11:aa:98:1d:a3:8d:77:ee:4e:39:bf:69:28:
         6c:40:60:5b:aa:75:65:f9:07:b1:7d:0a:b3:be:7d:45:6d:89:
         37:25:98:8d:62:61:34:42:51:d2:af:ab:1a:5c:b9:65:14:f0:
         41:6d:75:30:96:39:40:b1:a5:59:4a:45:8c:a5:b3:76:7e:c6:
         8a:6c:9f:27:f6:c5:e0:9c:83:0a:28:fd:69:eb:ef:e2:03:75:
         45:79:e9:d0:5c:b2:73:8d:45:3c:7a:40:29:c5:e0:02:33:a3:
         41:de:c8:09:01:25:00:cd:d0:5b:f3:64:ae:03:91:15:03:db:
         fa:3f:7f:9e:f4:9b:29:a4:af:d1:93:34:43:39:ac:ea:e3:d2:
         21:5d:3f:68:2c:5a:e4:e9:c1:e8:35:1e:05:63:05:c1:52:10:
         26:ae:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:17:15 2026 by rpki-client