Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          g8dXok/MQpGaYwHvVrFS1u3NgPX+DwLpU4UgyW/bLoo=
Subject key identifier:   66:30:11:4C:DA:EC:28:6B:82:5C:AF:39:88:CF:D3:45:2C:FB:79:90
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       0611
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          05F7
Signing time:             Thu 28 May 2026 22:52:31 +0000
Manifest this update:     Thu 28 May 2026 22:52:30 +0000
Manifest next update:     Thu 04 Jun 2026 22:52:30 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: sv6dP+wD+JrYh6/71MdkgJOF82wTHrTMGmADIUBbzL0=)
                          2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=)
                          3: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: qTi+k35z0mHRZj7qMe2beLJhL5VMNrzBjZFMcygcHSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 22:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: May 28 22:52:30 2026 GMT
            Not After : Jun  4 22:52:30 2026 GMT
        Subject: CN=6a18c72f-a5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:c5:98:d5:94:fa:e6:2f:f2:93:41:f3:c6:
                    ee:a2:d6:c3:ba:18:55:e3:10:38:61:7c:e9:da:b2:
                    7f:73:52:da:6c:37:67:f3:dd:69:46:d6:09:4c:72:
                    14:34:09:ad:37:de:f4:7f:8b:85:46:5a:7f:b8:38:
                    23:8d:ea:67:32:02:20:3c:03:c5:5f:90:2d:ef:e6:
                    1b:6c:54:9c:f8:89:37:d3:e2:7f:b6:b4:b0:2c:5d:
                    5c:d4:b3:d7:e0:e6:13:db:21:95:1e:11:b7:34:c4:
                    4f:b5:fd:b3:7c:31:c2:2a:58:80:2e:cb:ab:39:73:
                    02:42:5e:3a:ad:45:d1:e6:cb:c5:70:ab:dd:a9:4c:
                    fc:90:23:6f:7b:59:c9:a8:46:9f:01:9f:09:da:fb:
                    ee:19:9a:e9:a5:03:05:5a:24:5e:57:3b:97:c7:ab:
                    c4:f3:72:ae:04:79:7d:1a:f7:83:28:a7:bc:8f:11:
                    e8:b8:e9:3b:c8:32:8b:61:c0:49:e3:3b:96:e5:43:
                    1b:4b:c1:0c:17:70:8d:16:a6:76:7f:06:36:20:c3:
                    9e:a0:20:de:dc:1e:3c:8f:f9:58:92:12:dc:30:f7:
                    29:c2:58:72:37:7d:d7:83:47:de:4b:61:87:5e:9e:
                    53:56:d8:73:f4:42:1c:50:74:6f:9e:83:e0:b8:3f:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:30:11:4C:DA:EC:28:6B:82:5C:AF:39:88:CF:D3:45:2C:FB:79:90
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:9a:0f:9a:d8:14:4a:6f:4d:32:76:b7:c4:00:19:27:a0:
         d2:9b:7d:8d:0d:59:a1:a5:ca:cb:ab:19:44:32:4e:60:1e:e9:
         f7:ad:20:c8:7d:e7:ec:7f:f0:ec:4a:07:fc:58:8b:9d:a8:0a:
         70:fb:e3:bb:4f:8a:f9:8e:2f:c6:89:b4:20:52:ef:ed:88:02:
         5b:da:4d:66:fa:cc:65:9f:06:f7:26:13:bf:85:3d:f2:ed:54:
         c4:ac:c1:6c:1c:45:4f:09:f7:ee:67:9a:67:35:2b:cb:13:63:
         c0:e5:8f:ef:62:d5:72:ff:c2:47:41:ef:a8:09:ca:a4:a7:92:
         a3:7a:a2:de:90:12:23:70:30:be:e0:32:8e:f7:56:ea:c6:c6:
         c4:80:ec:0a:c4:83:c1:5c:b6:91:97:63:53:16:5e:37:63:59:
         60:69:6f:83:ec:7c:a6:68:de:7d:97:dc:2f:da:31:9f:e8:cd:
         75:a1:8f:a1:0d:fa:03:8c:d4:f2:23:2d:20:00:28:8b:f2:60:
         eb:de:78:7a:fa:ed:c9:77:84:ff:2e:41:7c:1f:59:a2:49:09:
         a4:aa:95:fb:fe:ee:4e:81:ba:dc:45:1c:6e:20:ce:3b:60:f1:
         97:fd:02:36:c5:1b:e5:65:e9:d2:90:ca:91:73:05:18:98:47:
         39:ba:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 15:56:11 2026 by rpki-client