Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File:                     fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier:          wmEba5Zed+KMlFZUcFPmbTGKJ9wjdg9u6hUNvu2vltg=
Subject key identifier:   82:65:20:AC:57:3E:E1:80:9C:61:74:73:6A:28:77:07:3D:6A:6F:76
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number:          01CE
Signing time:             Fri 19 Jun 2026 03:50:20 +0000
Manifest this update:     Fri 19 Jun 2026 03:50:20 +0000
Manifest next update:     Fri 26 Jun 2026 03:50:20 +0000
Files and hashes:         1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: vO+0Wtx/vz+pJiln55Bd8sGW/HpqJVcft800jhVG25c=)
                          2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=)
                          3: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jun 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: Jun 19 03:50:20 2026 GMT
            Not After : Jun 26 03:50:20 2026 GMT
        Subject: CN=6a34bc7c-46cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:7a:6d:bb:55:e8:29:07:dc:3b:fc:be:ce:
                    7e:f8:4d:a0:0a:2f:1d:6f:9b:8f:35:b6:28:d3:2e:
                    b6:65:96:12:62:a9:0e:a2:6f:06:14:24:7a:9f:e6:
                    38:02:b9:c4:50:14:44:d5:e5:99:ef:26:f6:ed:68:
                    c5:d1:17:e4:6c:bd:5c:26:5b:7a:25:27:6e:7a:c7:
                    09:ae:62:23:c5:bb:b3:53:b1:97:46:c1:74:4b:cd:
                    59:42:03:70:74:5a:9b:c9:0d:13:a8:92:e1:33:02:
                    4f:fc:56:31:fb:3f:bb:8f:46:8d:29:39:44:61:fe:
                    0c:42:07:bf:4f:a7:a3:c9:10:43:56:a7:e3:a0:de:
                    32:25:db:ed:63:ab:b9:09:ea:a5:58:6c:61:e5:45:
                    3a:97:84:e7:25:51:02:8c:82:ea:df:65:67:61:6d:
                    f5:78:e5:0f:99:0f:da:e8:8f:3b:23:e7:6b:2c:3d:
                    ba:b8:5c:ae:e9:6a:90:ec:f8:38:80:ce:7b:dc:2a:
                    dd:19:6c:1f:ce:62:68:0f:cd:f0:54:11:42:07:dd:
                    ce:36:99:d2:39:58:be:34:b3:e8:c2:67:ae:dd:d1:
                    0d:61:6a:7f:aa:b3:93:81:49:1c:09:58:91:02:5a:
                    ef:4d:93:9f:8f:80:93:97:87:29:fd:8a:5b:a3:fe:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:65:20:AC:57:3E:E1:80:9C:61:74:73:6A:28:77:07:3D:6A:6F:76
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:c1:69:fb:10:2c:be:26:8a:be:38:7e:5b:61:9c:7d:e4:
         0f:69:6f:0c:05:b5:59:51:7c:e4:56:a2:6e:12:69:63:99:a7:
         d3:9c:b6:29:1d:1f:74:54:bd:e7:0a:d8:1e:e6:5c:71:e3:15:
         59:23:e2:3f:b2:6c:38:57:13:1c:3a:68:0e:9a:3f:40:66:60:
         4b:11:d0:5a:d4:c7:b1:c7:42:b3:03:95:1d:d2:6d:ff:79:ae:
         bc:46:d7:9d:16:6e:4b:6a:22:ec:6d:2c:c6:34:fa:fc:ad:c7:
         56:8e:7e:63:4a:b8:47:8c:ea:74:2e:09:99:51:97:e1:4f:44:
         2f:dd:9d:12:10:1c:e3:0d:fe:91:15:e2:b9:4a:f7:7b:6b:93:
         40:8b:8d:01:44:e1:24:0c:f0:fb:15:ca:e7:d2:ca:4d:8d:ec:
         3b:f5:00:87:a7:4a:fb:c1:e3:92:9d:c3:7c:db:c1:d3:a8:a2:
         a1:b6:40:01:ea:ce:c9:75:0b:8c:d7:51:f8:df:aa:af:9e:b3:
         0d:6b:ec:b1:9b:b9:17:e2:88:b1:3d:b2:14:d5:20:ef:fd:a0:
         d9:1e:d1:c6:88:31:4d:8b:94:89:c3:b0:1b:76:37:0d:1f:ba:
         6d:b1:3d:b2:76:1c:06:8f:64:fd:55:2c:31:ce:92:69:d5:72:
         a4:0e:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 16:40:41 2026 by rpki-client