Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
File:                     H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json)
Hash identifier:          BXa4HVjIDZbY0N0aZUmDQkM3EpQdXtJiqn4Os5A9DHY=
Subject key identifier:   8B:75:B6:3E:00:BA:06:4E:BC:24:E6:55:A6:43:94:47:21:90:68:9F
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Certificate issuer:       /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial:       05C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
Manifest number:          05B5
Signing time:             Wed 20 May 2026 23:12:18 +0000
Manifest this update:     Wed 20 May 2026 23:12:17 +0000
Manifest next update:     Wed 27 May 2026 23:12:17 +0000
Files and hashes:         1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: Zq0KOVHH/nNOTfiDbpcehL9Lgd9NRTqpk6cy7VjvprI=)
                          2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: 8WnbS97OaktE0LRamYKvOSKiZchhu0drnp75jTKrR5k=)
                          3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: 1VRYPqsZ9GzU30WQT1LpYqxv/ZQPycjhk0M72FLaMxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
                          rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
        Validity
            Not Before: May 20 23:12:17 2026 GMT
            Not After : May 27 23:12:17 2026 GMT
        Subject: CN=6a0e3fd2-2e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:83:c5:fc:07:84:bf:e8:26:27:19:74:48:
                    e8:e0:65:47:56:b7:46:0e:f2:b1:81:1c:6d:31:9a:
                    a5:72:23:6e:61:ba:dc:56:18:b1:6d:f9:42:43:b2:
                    f6:88:7e:92:c8:23:85:16:65:29:33:55:e7:e3:20:
                    1f:0b:ef:e3:77:70:80:88:71:d6:50:df:96:40:c6:
                    82:4c:9b:10:0b:9e:4d:33:ea:97:4c:e7:72:d9:8f:
                    48:bd:bd:96:b3:12:fb:5e:b8:14:6b:ad:c6:82:b5:
                    e2:86:cd:85:30:30:ea:fc:7f:43:7f:8f:9f:e8:af:
                    e8:8c:7d:37:9d:29:27:33:8c:cf:57:aa:19:94:b8:
                    66:2f:46:64:71:a0:60:83:aa:b6:8d:59:05:7c:8c:
                    2c:45:e9:b1:67:aa:18:ee:81:ed:6f:ea:0e:72:13:
                    e3:c3:21:78:19:8c:2a:63:f2:a9:89:1f:3e:3a:fa:
                    0a:51:0f:82:59:8d:f6:81:d7:73:57:03:b3:ac:f3:
                    4e:1f:4c:db:12:02:74:2f:15:ad:10:ec:a2:8a:20:
                    24:3f:c8:44:9c:12:88:c5:16:bd:2d:9e:b3:4d:b5:
                    28:29:06:65:8d:bb:96:fa:33:66:52:17:7c:7f:d5:
                    3f:fc:08:62:7a:5a:85:72:60:0e:fe:97:b0:f1:fa:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:75:B6:3E:00:BA:06:4E:BC:24:E6:55:A6:43:94:47:21:90:68:9F
            X509v3 Authority Key Identifier:
                keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:bb:ae:59:0d:15:ae:19:e9:37:50:ef:b6:09:78:db:26:8b:
         28:df:65:98:13:db:d5:b7:29:12:53:e0:f5:d1:5d:2f:b1:16:
         92:a9:b9:88:6a:1b:5f:f9:a3:62:9f:00:ee:68:58:39:0c:fc:
         ad:4b:5e:88:e4:af:fa:2b:44:4b:f5:13:ff:24:9f:d5:12:ed:
         6b:a3:c7:9c:38:cb:79:30:a9:53:bb:96:67:c6:39:43:a9:0e:
         a3:a5:68:10:cd:fc:d1:70:72:8b:a5:2e:c8:d0:9b:18:0d:81:
         e3:7c:6c:86:bc:c0:77:84:9e:8b:5b:91:ef:66:3c:ce:84:42:
         e3:bf:a0:2a:d1:47:73:e7:43:96:e6:01:b5:66:90:b0:c5:5d:
         c6:3b:b1:98:dc:c0:a1:16:bb:c5:c9:4a:fb:c8:2d:12:da:9d:
         23:ab:6d:df:93:6e:9b:37:f4:94:e4:a1:07:72:0d:60:41:10:
         13:a9:ac:b0:32:a8:96:b2:02:4b:a4:a6:e4:a5:32:ec:b8:36:
         09:8e:a7:e5:31:08:3d:ee:2e:92:ac:68:9d:b1:e2:a1:62:0f:
         63:48:ce:3f:c0:54:81:fc:29:f9:04:fe:09:3e:26:7d:d0:7d:
         d8:f0:4f:da:b8:98:5f:c7:14:a3:a0:a5:4f:a5:c7:09:c7:14:
         b3:40:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:39 2026 by rpki-client