Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft
File:                     CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json)
Hash identifier:          Z3Hqns6DE8fohMNr/SKAP+6CqEOvDg/HBrUKOEbqM3I=
Subject key identifier:   06:46:67:91:3B:98:80:22:D7:6A:07:FF:A5:AF:D6:0D:22:4F:A3:41
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Certificate issuer:       /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial:       0ABD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft
Manifest number:          0A83
Signing time:             Wed 10 Jun 2026 19:42:11 +0000
Manifest this update:     Wed 10 Jun 2026 19:42:10 +0000
Manifest next update:     Wed 17 Jun 2026 19:42:10 +0000
Files and hashes:         1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: ofC3la51O3Iq/dqJwE3zAET8P1k2lrIXT9QYDzrm2Ow=)
                          2: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=)
                          3: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=)
                          4: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=)
                          5: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
                          rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
        Validity
            Not Before: Jun 10 19:42:10 2026 GMT
            Not After : Jun 17 19:42:10 2026 GMT
        Subject: CN=6a29be13-5ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:3c:a4:7f:f7:68:97:f9:dc:37:82:42:4b:
                    08:1a:92:75:00:76:ce:80:62:1c:20:c7:2e:ec:02:
                    25:89:d3:f6:f1:aa:96:c8:4a:e9:22:5d:f9:8a:6d:
                    d3:e5:c0:b9:c8:40:2d:57:a0:b2:c1:fa:cd:ba:ed:
                    75:04:ba:00:69:be:5f:7b:53:f9:72:e8:0d:61:fe:
                    13:dd:8e:04:cc:3d:77:db:3d:c6:d5:94:4d:de:ca:
                    52:bd:ff:b4:6a:f0:e8:fd:0a:6c:ad:be:98:47:14:
                    a8:a2:a5:88:22:90:b7:97:74:b0:b4:a6:b1:1a:5e:
                    9c:48:16:ac:ec:bb:7a:a9:8e:8c:93:11:d5:20:1d:
                    34:b0:8a:25:72:aa:7a:ff:76:e5:23:e0:ec:63:a2:
                    29:35:20:54:d1:00:86:d3:75:a1:c8:5b:df:75:3a:
                    b6:60:0e:93:cf:66:82:cb:07:37:b7:06:32:eb:a1:
                    d1:81:3f:c9:f7:8d:9b:3c:35:37:e1:2d:80:bd:87:
                    79:3a:4d:fa:6b:1b:8a:32:a5:c1:fa:4a:be:48:bc:
                    52:3e:c8:9f:20:14:1c:e2:3a:8f:bf:81:c5:dc:0a:
                    0a:cb:31:ff:70:4f:69:de:c0:83:2a:d0:86:b0:f6:
                    bd:9b:78:4d:de:60:56:00:ae:a0:2a:f9:83:23:65:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:67:91:3B:98:80:22:D7:6A:07:FF:A5:AF:D6:0D:22:4F:A3:41
            X509v3 Authority Key Identifier:
                keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:07:0f:ed:67:53:8d:5a:80:1a:c2:52:60:fe:68:00:10:bd:
         1f:0c:23:8b:b4:85:28:21:12:ac:0e:cf:38:b5:2a:f1:c7:ab:
         3e:01:e9:95:c1:bf:53:09:0a:fb:b1:b0:73:b3:e6:5d:00:6e:
         15:8c:d7:d7:ec:6d:c2:e6:ef:ea:0a:05:96:39:9d:d3:b4:a0:
         1f:71:54:27:34:dc:51:67:0c:a5:f1:35:f1:19:b4:0e:66:22:
         cd:af:e6:84:b5:a4:82:ba:5d:4a:25:db:a9:fe:f5:a4:c7:7e:
         a2:0d:9f:72:1c:c3:e0:35:91:f5:be:51:68:82:5f:fe:42:b9:
         96:84:8e:f0:24:07:0e:92:5c:33:da:da:31:3f:87:96:f9:5f:
         a0:5a:01:e2:e6:21:3d:61:d8:b1:81:1b:89:27:0b:f0:8e:59:
         2f:73:1f:d5:b2:44:f5:a4:ba:e3:42:fd:5b:5b:55:5b:3b:d2:
         2e:6d:ea:60:55:ca:72:fb:db:2c:50:e9:3e:5e:44:7c:4b:4a:
         9e:85:ae:68:13:e4:af:54:2b:ba:ee:c5:bb:51:31:fa:61:70:
         b7:30:c5:a5:3c:66:40:21:1e:e4:fa:98:a4:15:1f:1b:c0:b5:
         f4:7a:de:d3:14:d3:77:e5:4a:5d:01:53:13:47:e2:5f:60:45:
         45:e2:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:11:49 2026 by rpki-client