Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File:                     F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier:          Fxw/HIRWYp02ONPV6jz2xnBE2cDU008g8uXX/mSrERI=
Subject key identifier:   84:24:1A:03:6C:0F:A4:2D:DA:FE:53:18:34:BD:6A:08:7B:21:52:BF
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer:       /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number:          C6
Signing time:             Tue 02 Jun 2026 20:26:54 +0000
Manifest this update:     Tue 02 Jun 2026 20:26:54 +0000
Manifest next update:     Tue 09 Jun 2026 20:26:54 +0000
Files and hashes:         1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: il0v3SY1olvyAIgbSPDXaDrT31ahlL70vwJ2YMavago=)
                          2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: NPJSodbwWKPxaxqcL20NVvStl+UOM4gI9IHpj1XGIKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 20:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
        Validity
            Not Before: Jun  2 20:26:54 2026 GMT
            Not After : Jun  9 20:26:54 2026 GMT
        Subject: CN=6a1f3c8e-f8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b6:ac:ee:70:1c:2d:f0:01:d1:69:4a:38:b6:
                    cb:0b:a7:37:e1:d8:89:01:ad:be:67:89:cc:6b:4e:
                    a6:3c:b0:0a:d8:8d:0e:d2:0f:66:95:bf:4a:f3:87:
                    97:fd:b9:a5:12:46:25:b3:2f:e2:2b:b4:4a:b8:22:
                    c6:db:39:55:22:57:fd:5f:50:36:c9:0c:bd:d4:11:
                    fb:03:ee:cf:09:8c:8a:00:67:45:b7:cb:0e:e6:6d:
                    18:81:97:84:1f:0c:df:23:83:d7:bc:de:9c:7a:3f:
                    0f:2e:cd:0a:55:5f:c5:07:f3:0e:65:06:f1:0d:8f:
                    37:92:48:12:6b:ec:c9:40:b5:15:fb:35:1e:26:4b:
                    8a:85:56:5b:a2:e6:d8:51:e0:90:00:b3:f1:4c:6a:
                    3b:95:c7:ba:4d:57:66:3a:b0:c4:06:9f:2f:78:21:
                    96:66:01:22:76:a0:da:ef:70:67:14:8e:32:c9:62:
                    ee:a2:d9:11:56:46:f2:2f:19:a0:75:a2:55:56:35:
                    26:9b:09:a8:fe:c2:35:f5:4c:d2:97:cc:7e:72:82:
                    cb:4c:18:ea:af:ec:e5:14:0d:75:6b:d3:d8:08:b0:
                    5d:df:51:62:80:e3:fb:6a:4d:27:fc:6d:f6:c8:9a:
                    f0:c2:29:31:40:ac:8b:22:32:be:a4:b9:ce:db:02:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:24:1A:03:6C:0F:A4:2D:DA:FE:53:18:34:BD:6A:08:7B:21:52:BF
            X509v3 Authority Key Identifier:
                keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:06:10:fa:c4:9d:97:01:e2:85:d6:3d:cd:99:6a:e1:1f:78:
         d3:2b:3b:c1:49:48:98:a4:2c:e3:7f:90:da:f7:d4:9a:a4:99:
         55:29:57:4b:0b:c1:b7:89:20:c1:7b:8f:7a:38:fc:15:d7:ec:
         d9:e1:f0:1d:ef:76:af:bd:a7:d8:d5:82:ea:4c:e6:54:d5:6e:
         50:b5:8c:b5:b9:47:88:10:37:09:b6:c4:07:5c:64:52:8a:db:
         41:ea:64:1e:11:0c:90:1f:bd:20:c4:8f:11:c2:e9:4d:45:cb:
         b3:cf:66:5d:c6:1b:91:3c:c0:e3:1d:c5:32:d0:3d:26:c4:96:
         df:61:61:31:d0:e2:07:19:4d:35:76:34:23:14:8e:34:e6:f8:
         f0:3d:d5:e4:3c:dc:a5:22:ed:c3:9a:3b:9e:22:c6:63:26:91:
         39:52:4a:c4:a7:d1:6c:35:9d:57:e0:fa:80:b1:14:0f:17:a0:
         d0:d8:a9:8e:9f:4e:23:6b:1e:a4:b8:4d:b7:28:40:d2:fc:a3:
         0a:a4:f4:61:91:e4:49:79:95:97:f3:bb:13:07:a2:46:7c:bb:
         0d:db:25:56:2f:03:84:a4:06:13:d8:31:f3:90:d6:88:39:87:
         88:32:67:16:29:2e:54:9e:f2:fd:39:26:83:a8:36:3d:48:66:
         34:e0:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:58:35 2026 by rpki-client