Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          dc2wKitFOOKk485Hrwh8j2vulQdUj5V4I0Snvkux9JE=
Subject key identifier:   C5:17:CB:1E:D8:34:D8:AD:E9:57:7F:11:73:2F:10:B7:49:03:F6:9A
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2827
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          27C0
Signing time:             Thu 04 Jun 2026 15:39:21 +0000
Manifest this update:     Thu 04 Jun 2026 15:39:21 +0000
Manifest next update:     Thu 11 Jun 2026 15:39:21 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: sKiYD3Xm8PSQSBlI4j8rZXq/NX3I9TtJ21HyC/LYZ5s=)
                          2: 79393030926D11F0B792FC45C4F9AE02.roa (hash: 07Icjoj8iLRrJ5/SEZPl5le+/ZtfvVB8fKvyn7okhMA=)
                          3: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
                          4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
                          5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10279 (0x2827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Jun  4 15:39:21 2026 GMT
            Not After : Jun 11 15:39:21 2026 GMT
        Subject: CN=6a219c29-3cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:2a:da:61:7d:f5:fa:e5:92:d6:43:aa:36:
                    f6:78:c9:53:35:18:7e:ea:cf:3c:f6:3e:a3:cf:6b:
                    10:1d:db:16:c7:a2:45:0f:ae:ce:00:4d:27:f5:2d:
                    69:27:ce:17:94:b2:1e:80:a5:e6:a2:fc:f5:be:13:
                    47:a5:59:6a:d3:3c:89:4f:3e:46:44:d0:cf:93:44:
                    65:11:a3:6e:6f:f9:f4:ea:fd:c4:5a:3f:81:ed:66:
                    a9:07:e2:56:0b:d9:80:0d:47:04:02:57:ab:79:45:
                    91:09:6c:41:82:c4:77:4d:90:e2:45:1a:61:fa:b6:
                    ba:6b:b8:b7:c2:b5:5f:27:87:83:d3:74:fa:21:b0:
                    54:cc:d4:67:6b:2d:4a:20:8c:5f:12:cc:52:bd:a1:
                    3d:42:f7:d1:94:ab:7a:24:a6:f9:6f:c0:4a:2a:eb:
                    5d:63:80:59:3d:de:f9:25:9a:bd:f2:16:40:5c:3a:
                    ea:3e:e9:31:d1:bd:58:57:19:a4:22:ad:69:fc:f4:
                    73:89:63:a1:9b:1d:dd:7d:9a:45:c0:75:a5:42:f5:
                    60:c8:63:79:40:df:64:ce:9c:1f:b7:51:60:e4:8e:
                    36:f2:1e:c5:69:fd:bc:96:ac:12:fa:ad:6c:bf:f6:
                    3b:78:22:d4:c5:cf:8f:be:62:ff:0b:e1:2d:48:13:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:17:CB:1E:D8:34:D8:AD:E9:57:7F:11:73:2F:10:B7:49:03:F6:9A
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:ef:fd:71:c2:7e:dd:f0:95:66:77:8c:7c:7e:87:8c:17:
         55:fe:9f:73:7d:4a:8d:06:48:b2:8b:da:da:e4:b0:51:2c:c1:
         f8:c1:4d:36:1b:d0:12:61:5f:e9:fb:c6:ed:92:62:05:0c:58:
         ce:bd:5a:b1:28:2b:2a:23:d3:7d:90:f0:43:13:9b:5d:1a:8d:
         f1:ed:fd:f9:2a:73:8a:75:5d:9f:ef:27:9d:01:00:e7:cd:93:
         ee:1b:9e:34:1c:b9:c2:a3:00:59:b5:c5:17:4c:1c:07:ba:31:
         8d:24:95:da:e9:b8:42:fb:b4:b2:ab:51:2e:74:20:27:eb:ae:
         2e:88:01:02:dd:59:8a:1f:35:3d:f6:26:6a:c9:42:0e:fe:88:
         d3:f3:05:32:c6:3c:f7:e3:8f:5c:62:83:76:7c:78:e1:ec:94:
         84:9a:d1:7a:84:7d:fe:16:70:43:8e:d8:8b:bd:74:41:0a:e2:
         dd:a5:de:ad:ae:a4:c0:30:ab:ed:99:2c:25:fd:c3:43:a0:b3:
         a0:f4:34:15:62:f3:d3:09:84:ed:a1:5d:69:52:bd:c7:15:9b:
         ca:b7:ac:4e:65:47:3a:5f:07:2b:3d:41:f0:9c:83:8b:61:bd:
         23:73:27:fe:08:f9:3a:72:f3:18:3f:e5:f7:73:24:2a:3b:dd:
         fe:42:47:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:27:57 2026 by rpki-client