Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
File:                     szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json)
Hash identifier:          rXhf/rd6TWKg/JUblqiwpI+LNHoSNc0VEuWmHkSYBS4=
Subject key identifier:   D7:08:AD:52:9D:D0:7E:B7:BC:E1:79:ED:26:F6:8F:C6:07:18:62:52
Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
Certificate issuer:       /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
Manifest number:          5B
Signing time:             Tue 23 Jun 2026 08:23:20 +0000
Manifest this update:     Tue 23 Jun 2026 08:23:19 +0000
Manifest next update:     Tue 30 Jun 2026 08:23:19 +0000
Files and hashes:         1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: SX5FgROtS2OsM94fQwK+BwgynppvW49toXYMsZxeGtY=)
                          2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
        Validity
            Not Before: Jun 23 08:23:19 2026 GMT
            Not After : Jun 30 08:23:19 2026 GMT
        Subject: CN=6a3a4278-2c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0a:e8:d1:1a:5c:ba:a1:0a:b1:02:25:d8:d7:
                    e1:28:7b:a8:4b:34:21:19:8f:92:cf:9e:58:ad:2e:
                    83:79:cf:f0:b6:b4:0b:53:46:64:96:c8:76:1e:63:
                    59:48:8a:1c:fb:8c:53:1e:96:90:d9:65:14:a6:e3:
                    02:5a:ae:73:8b:31:1a:3d:f3:6e:f8:b4:15:50:c3:
                    08:a0:9c:f0:39:ca:a8:6e:a8:cb:57:cd:78:17:af:
                    59:dc:66:7a:48:ad:c1:9b:d5:03:50:7b:7b:fa:69:
                    e4:0e:60:70:92:ca:d8:79:92:22:cf:85:63:88:93:
                    06:b6:70:ae:be:7c:00:8d:83:e0:b1:54:73:47:d0:
                    ce:52:85:25:72:6c:f7:79:93:2c:1a:bd:89:19:47:
                    d9:4e:9c:eb:79:86:17:27:68:2c:f2:04:b8:97:a4:
                    7d:c8:3e:0e:50:4f:98:8d:6f:96:8a:81:65:4a:ae:
                    24:10:22:66:55:8b:ca:84:95:d1:ea:e1:83:1c:16:
                    56:87:59:08:e9:26:2c:0d:88:77:7a:a4:81:e0:47:
                    64:d6:b0:e0:9a:c3:a1:ad:50:9a:c2:17:81:a6:79:
                    b6:30:40:87:a8:38:fd:3e:d5:73:15:b0:fb:25:2c:
                    cd:c5:b7:1c:80:d0:44:f0:6c:bf:96:3c:7b:3b:34:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:08:AD:52:9D:D0:7E:B7:BC:E1:79:ED:26:F6:8F:C6:07:18:62:52
            X509v3 Authority Key Identifier:
                keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:84:a5:1e:16:69:ac:e7:0b:d8:97:eb:bc:97:50:ac:e2:1a:
         c8:60:90:93:88:55:71:c4:8d:ad:aa:6b:e8:33:7f:d2:73:1d:
         ba:4f:c0:fa:d8:93:c0:1e:de:9d:d7:9f:c1:cd:00:aa:b8:0d:
         25:b9:8a:a5:7f:fa:91:02:ad:f0:0f:41:1e:42:3d:a7:3b:b0:
         d9:b4:be:ed:74:8d:37:30:5d:78:bc:44:36:40:da:a8:b4:7c:
         02:7c:0e:0f:3a:45:37:4f:32:0b:3f:c2:11:c1:9a:2b:53:1e:
         63:d4:b8:61:00:04:40:dd:8e:63:21:83:d8:2f:68:67:fb:cb:
         3c:0e:24:34:dd:58:4d:c0:8f:4b:57:7b:8a:2c:96:33:a0:fb:
         fe:a7:c7:f0:08:80:bb:15:27:23:b5:1c:cc:e2:b5:0d:9a:95:
         01:8c:84:75:43:ee:f6:d2:bf:39:47:a6:c4:d8:cf:05:83:70:
         19:85:0e:88:e0:e2:71:ed:c5:b8:17:9b:ca:ef:f0:2a:25:28:
         db:44:d6:e7:b8:83:65:1c:23:b1:4f:7c:a1:b3:e1:7b:d8:f5:
         e8:40:64:36:50:84:18:de:2e:d8:26:4b:a6:69:05:b6:bc:68:
         58:8c:36:0d:2a:33:25:27:7b:19:25:84:e0:52:79:1b:bb:ff:
         3a:52:5d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:49 2026 by rpki-client