Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
File:                     I2o4zV7FL3Doi4BtcV63sELNfr8.mft (raw, json)
Hash identifier:          u2kSA1DaymfRNElK3NvSWbAy2A4nomhb0KNhQFdmrMo=
Subject key identifier:   D7:AC:AB:03:F5:A6:AF:28:D4:73:BC:35:3F:A2:6C:47:01:22:24:E7
Authority key identifier: 23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
Certificate issuer:       /CN=A918120B/serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
Manifest number:          5C
Signing time:             Mon 01 Jun 2026 09:00:56 +0000
Manifest this update:     Mon 01 Jun 2026 09:00:56 +0000
Manifest next update:     Mon 08 Jun 2026 09:00:56 +0000
Files and hashes:         1: I2o4zV7FL3Doi4BtcV63sELNfr8.crl (hash: PVw4qPyjlfAVDU96Tg1WK3KIphDmn6l6hVn7xALrDnw=)
                          2: 4C5380C8E0B211F084C35B824B6F56BC.roa (hash: ReH7NwBS0TVPrmwTTmCzxQPZCsV/M0H3BbFbbRjxNaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl
                          rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
        Validity
            Not Before: Jun  1 09:00:56 2026 GMT
            Not After : Jun  8 09:00:56 2026 GMT
        Subject: CN=6a1d4a48-ff67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:25:ed:75:a5:0d:b5:33:ef:f4:73:46:99:
                    ae:04:ff:29:7f:9a:31:66:df:b9:95:10:ed:78:5f:
                    fc:14:1c:aa:0a:56:fb:b5:3c:08:f1:fb:e5:76:6e:
                    34:bd:10:56:96:c6:54:f7:1b:94:49:a9:e0:80:36:
                    e1:e2:d0:88:b8:61:e7:bf:56:83:53:98:aa:68:2c:
                    62:f8:23:e6:ba:10:6e:02:7f:d9:f4:dd:1c:fc:89:
                    55:0e:f7:93:cf:dc:4a:63:ef:88:ab:e1:f8:1c:f7:
                    6a:16:b4:14:a7:5a:e5:9b:bf:89:9b:bf:d3:2b:9e:
                    ba:6f:f8:f5:a2:0a:d5:63:0a:c9:bb:c6:2f:c8:fe:
                    4b:ce:39:10:d6:b3:b2:60:a5:16:67:47:ed:dd:48:
                    4f:58:d4:a6:7e:36:f1:1b:81:49:7d:d7:13:03:b4:
                    67:1e:ed:ef:e2:d3:99:9b:58:15:89:ed:93:36:7a:
                    03:62:5c:a8:bb:2d:e1:d2:70:83:b5:64:43:d2:38:
                    93:37:df:53:82:43:26:af:29:37:c7:46:b2:cf:a5:
                    fe:42:23:59:24:e1:77:24:fa:c2:67:18:7f:ef:5e:
                    73:d5:8d:cf:4a:e6:6e:f0:e0:13:16:55:31:e2:f0:
                    30:15:dc:42:bd:e9:75:5c:8e:a0:4d:84:a7:29:eb:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AC:AB:03:F5:A6:AF:28:D4:73:BC:35:3F:A2:6C:47:01:22:24:E7
            X509v3 Authority Key Identifier:
                keyid:23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:a2:09:84:1b:6d:d4:b3:48:a2:f5:48:fc:15:1c:ab:78:
         7d:5c:fa:1e:cf:40:29:c7:b6:8d:15:48:7a:94:bc:8d:e7:92:
         9c:7b:fe:ff:f0:d3:2a:fd:3f:7c:83:92:f1:ad:74:83:e8:92:
         69:e3:9c:da:92:9f:ed:cf:49:c9:80:94:b9:0c:5c:fa:25:0e:
         87:b0:4b:61:77:23:3d:00:24:b8:a3:7a:1d:a1:ab:cf:59:cf:
         4c:0a:2e:37:30:b5:55:77:d1:8f:15:4f:be:21:34:4d:35:bf:
         a4:72:5c:6e:98:39:87:04:e2:df:40:4f:82:96:80:ff:0a:82:
         c7:aa:d5:ff:02:17:d1:c4:09:04:ac:4d:81:02:2a:31:53:ac:
         cc:51:93:eb:01:ba:84:bb:92:6b:bc:90:ef:82:e3:0f:e6:9e:
         b6:a8:55:cd:6a:49:62:bb:c4:ce:c7:56:e7:10:cf:5f:14:9e:
         47:ef:31:8f:6d:d9:77:7a:1b:ab:a1:fd:57:c1:32:f6:04:1c:
         b3:d2:f3:bf:c9:33:34:d4:ff:21:54:89:81:e3:ee:11:4a:4a:
         2d:48:c5:e2:ec:5f:4f:cc:44:7f:24:ed:8a:3c:e8:3d:92:53:
         f0:41:5b:59:45:ca:d1:cd:42:c2:6f:24:e4:79:2f:6e:ef:b0:
         91:bb:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:01 2026 by rpki-client