Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
File:                     rRUDmr5-BIRna8sqkCopVqgDzs8.mft (raw, json)
Hash identifier:          +HgNIAT1dfZtlH4wH0CABmek89vHmAQr3cpc2pBkeUs=
Subject key identifier:   5F:9E:F9:88:96:66:36:6B:0D:E9:D8:09:94:22:DF:94:5F:07:3F:09
Authority key identifier: AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF
Certificate issuer:       /CN=A917C876/serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
Manifest number:          37
Signing time:             Mon 01 Jun 2026 09:24:53 +0000
Manifest this update:     Mon 01 Jun 2026 09:24:53 +0000
Manifest next update:     Mon 08 Jun 2026 09:24:53 +0000
Files and hashes:         1: rRUDmr5-BIRna8sqkCopVqgDzs8.crl (hash: Ou2Hz3uL0UhfzJriCe52eKRPSTYIRCGXG6VKxs8k6H8=)
                          2: 85126BD6109111F19502AD2A353D8C67.roa (hash: T5GMIPyPaLrmTYrRWcGwkxKhGNJdhN+jLIOEn2RD910=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.crl
                          rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C876, serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF
        Validity
            Not Before: Jun  1 09:24:53 2026 GMT
            Not After : Jun  8 09:24:53 2026 GMT
        Subject: CN=6a1d4fe5-b173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:f8:5a:8e:c2:be:34:da:d9:2a:22:1f:be:
                    3a:ce:99:62:0f:bd:47:3f:35:ef:d1:0d:21:a5:0e:
                    61:77:af:3f:68:46:53:11:16:b4:f8:d9:e1:c7:71:
                    c0:05:e8:fe:8b:71:0f:ab:2c:e1:48:b4:03:9b:b8:
                    a7:2e:fb:48:3d:93:e5:86:3c:13:1a:86:0d:bc:ef:
                    b0:ba:61:78:f0:a8:3e:57:e5:4e:4f:5c:aa:c0:b5:
                    ab:32:b7:70:5b:09:2e:df:b9:d0:58:25:d8:04:88:
                    1c:1a:f9:80:64:4b:75:84:0c:bf:ca:ee:2f:be:af:
                    f6:c3:49:87:df:c7:77:03:70:a7:bf:98:9f:bf:49:
                    20:df:87:6e:5f:3d:d5:a3:ab:29:f4:c3:8f:46:e7:
                    09:0a:3d:b9:63:e5:4b:4f:9d:99:a9:36:21:58:f4:
                    ea:eb:03:09:2a:d0:3e:a4:e9:03:47:c5:b8:e0:05:
                    bb:01:fc:b3:07:ef:4b:2a:11:9b:5e:19:ea:5c:d3:
                    05:e5:ee:58:fd:a1:7d:c6:61:53:7b:17:dd:c5:7b:
                    f2:39:3c:63:44:e9:83:8e:0a:8e:40:79:9d:2d:a3:
                    9a:d5:88:55:1d:eb:b2:a6:34:1f:c7:c2:ef:3f:6b:
                    08:75:54:88:d8:51:e4:a3:0e:8e:32:3a:d8:a2:dd:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9E:F9:88:96:66:36:6B:0D:E9:D8:09:94:22:DF:94:5F:07:3F:09
            X509v3 Authority Key Identifier:
                keyid:AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:77:c0:e5:68:58:2e:50:1c:f9:0f:46:19:8a:f1:dd:aa:
         3c:0d:a5:53:37:f8:24:61:aa:a5:55:59:90:a3:0b:7b:8b:a3:
         b1:f8:94:b2:89:51:4d:13:70:3c:9c:27:28:c8:e5:a3:3f:ea:
         41:23:97:b0:a1:ea:1b:7d:95:c1:95:58:3a:99:98:f2:f1:52:
         5a:09:bd:4d:0c:0d:41:6d:73:0d:e6:89:b9:d2:cf:9e:9e:d6:
         5a:79:f7:55:0b:53:71:da:d6:bc:b6:9b:55:af:72:44:f0:79:
         87:d6:c7:bf:cf:cf:6c:0a:5a:1f:04:a9:1b:75:04:c0:53:ca:
         81:7f:57:1f:f2:ad:ab:d3:40:62:bb:07:a4:5d:1e:b1:f8:24:
         92:d1:bd:e3:70:e3:33:df:a1:b5:b6:9c:65:62:e7:1e:43:12:
         ef:a2:f1:d8:51:d4:a0:f2:7f:72:59:6a:d7:e6:48:14:67:0d:
         7c:9a:70:5a:06:d0:03:32:1f:72:99:74:b5:50:15:b4:8e:0f:
         01:e6:fa:83:2c:15:92:a9:30:8d:a8:42:08:64:02:a0:4f:cf:
         2f:82:08:42:27:f7:b2:89:b1:1f:9e:3b:98:c2:90:05:46:62:
         73:d8:de:66:ef:50:ee:ea:39:a9:b4:9f:54:6a:bc:13:89:cd:
         f5:04:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:54 2026 by rpki-client