Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
File:                     5x-HDnK9Im57-jqrGpGKtGIybF8.mft (raw, json)
Hash identifier:          0RdnRfzaxdbd+G2xjUU7NbumsQWAZB/LoPQv1axwezQ=
Subject key identifier:   22:8B:50:C4:8A:AF:C3:80:51:CA:AD:B6:27:27:A1:90:04:23:81:CE
Authority key identifier: E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Certificate issuer:       /CN=A91964B3/serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
Manifest number:          1E
Signing time:             Wed 10 Jun 2026 14:25:09 +0000
Manifest this update:     Wed 10 Jun 2026 14:25:08 +0000
Manifest next update:     Wed 17 Jun 2026 14:25:08 +0000
Files and hashes:         1: 5x-HDnK9Im57-jqrGpGKtGIybF8.crl (hash: llw8J3daSzFfmgu/aZTbKiTx3Ih+YZkq4g1Jlai3xvU=)
                          2: 86ED876641FA11F1981D4479BF833773.roa (hash: I9P9Zja/wzTodju+PZpxgtcdIbcxcs2bbGhuD/szdOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 14:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
        Validity
            Not Before: Jun 10 14:25:08 2026 GMT
            Not After : Jun 17 14:25:08 2026 GMT
        Subject: CN=6a2973c5-4a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:a9:27:fd:52:0d:69:d2:de:c7:92:3d:57:
                    fd:93:43:00:b1:fe:bc:58:09:b8:70:76:f4:6c:39:
                    6e:19:7c:1d:9a:ae:b3:11:2f:9b:b4:4d:bb:a9:7b:
                    aa:1d:b5:cb:21:16:a5:93:64:a1:e5:ed:38:ac:b6:
                    ce:12:32:08:b3:38:8e:15:9e:25:6b:09:79:a8:0f:
                    2d:69:cf:f4:40:9d:f9:df:89:f3:d2:9e:e3:8f:c4:
                    95:d4:36:13:4f:4b:9e:14:1b:be:a4:ce:7c:8f:b1:
                    20:19:29:aa:88:7b:22:95:a5:73:16:cb:5e:06:b1:
                    43:f8:13:a3:6f:34:eb:88:47:3e:76:38:eb:96:d8:
                    6e:53:a1:f7:23:97:f5:18:68:00:22:3b:bc:12:e0:
                    18:9e:d0:da:d3:f0:32:bc:75:80:49:16:71:d5:f5:
                    e5:7c:94:8f:ca:24:7f:e1:ac:bb:d4:c7:1e:e2:f2:
                    1e:05:7f:f5:fe:fa:59:3c:7d:46:2d:7b:95:4e:c9:
                    52:a0:f7:d3:ad:b9:53:56:3d:1e:24:10:23:de:a7:
                    a2:cc:04:9b:6c:09:bb:60:d4:80:84:8e:e9:73:54:
                    84:96:0f:5b:e9:5c:a0:5e:e7:9a:ee:40:92:d4:0b:
                    8f:ab:85:17:04:73:f1:be:b6:41:f4:d9:89:1a:81:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:50:C4:8A:AF:C3:80:51:CA:AD:B6:27:27:A1:90:04:23:81:CE
            X509v3 Authority Key Identifier:
                keyid:E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e5:bb:db:aa:8b:28:7e:9a:f0:7f:d3:0c:c4:01:83:53:e4:
         cc:a6:2a:f2:40:f9:73:b2:92:8b:91:da:60:58:81:71:9d:3e:
         4f:c3:a0:0c:06:d8:a8:36:f6:0b:44:52:46:6a:4e:db:94:b2:
         67:83:b0:03:86:49:6d:6b:78:ba:14:12:6e:bc:91:e2:cb:74:
         3e:b5:22:44:fd:f9:00:a0:d0:30:03:2d:05:d4:a1:4d:21:1d:
         9f:2b:01:24:a1:f1:dd:0b:10:bd:71:76:d0:a5:a2:9d:0e:db:
         f6:ce:1c:1b:6d:b1:5b:97:63:2a:0f:e0:f0:c2:0c:6b:e8:de:
         24:a9:81:5a:61:ae:61:cf:69:4e:df:31:33:9d:02:1c:5b:d3:
         92:96:bf:f1:fc:c9:6a:eb:f3:cf:55:ee:ad:94:36:70:13:23:
         4e:8f:60:cf:63:d5:77:39:19:4a:4c:ae:cb:68:cd:09:84:fe:
         04:cd:c1:fe:ce:ca:37:bb:e9:82:c5:d4:64:53:bf:46:cc:f3:
         da:a7:f6:95:0a:fd:63:9d:04:c1:80:ba:ca:cc:5a:bf:7a:8a:
         f7:62:9d:7b:a0:0e:5e:4f:ef:db:3e:d7:41:53:c2:3c:fe:fc:
         3e:ac:0d:ae:79:f1:fc:48:a2:1c:78:77:05:cc:fd:85:35:c9:
         a8:17:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:35 2026 by rpki-client