Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
File:                     A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json)
Hash identifier:          Sq+PA4vKIkJsOLtCsBeFCD/P6Dewm5+ksYqpQz1BGHM=
Subject key identifier:   60:63:EF:50:14:92:54:64:D0:0D:D2:25:89:45:C5:52:B2:9E:86:F0
Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
Certificate issuer:       /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
Manifest number:          50
Signing time:             Fri 05 Jun 2026 08:42:16 +0000
Manifest this update:     Fri 05 Jun 2026 08:42:15 +0000
Manifest next update:     Fri 12 Jun 2026 08:42:15 +0000
Files and hashes:         1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: vyvlY1eQmNOT+lNSfLTiiB50xZQtaC64ySjAcB4F6jQ=)
                          2: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=)
                          3: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
                          rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
        Validity
            Not Before: Jun  5 08:42:15 2026 GMT
            Not After : Jun 12 08:42:15 2026 GMT
        Subject: CN=6a228be8-219f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:12:51:9d:e9:da:a8:86:68:fc:80:fe:2e:
                    85:6a:d6:79:43:99:a5:58:9a:bb:4c:47:d2:7c:79:
                    f3:26:3c:5c:f3:b1:49:0b:d0:ff:04:be:23:c8:75:
                    23:9d:83:65:b9:07:40:63:c1:5f:4d:c3:f3:67:a9:
                    94:e0:24:b9:fb:81:99:b2:b8:58:6e:9e:51:7e:f5:
                    ff:bf:b1:4c:76:c4:1d:ab:22:fd:18:d8:05:30:dd:
                    b6:51:64:95:0b:d0:75:84:ae:10:dc:19:3d:b6:d4:
                    6c:0d:d8:af:9c:56:72:63:79:56:88:59:10:dd:db:
                    e8:81:8d:c4:bd:72:5a:84:bb:83:07:01:c0:e0:92:
                    da:42:86:d9:0e:0a:6c:76:29:b7:9b:3f:b0:bd:05:
                    9d:f1:b5:e3:64:36:d3:31:85:2b:dc:e4:b1:33:8b:
                    c7:78:ee:4f:b8:58:e3:23:d5:31:26:60:24:60:62:
                    48:eb:b8:81:d9:bb:a2:0e:03:50:a8:ab:49:5f:1d:
                    bf:ea:aa:b9:cf:74:8d:d2:b3:25:3f:4d:0c:c6:08:
                    84:99:04:bb:26:d2:28:c4:c5:b0:fb:06:2f:bf:ae:
                    34:a9:bc:5a:51:98:12:a5:59:bb:50:96:b0:1f:77:
                    d0:a9:ed:07:eb:87:63:b1:25:08:46:92:e9:3d:b4:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:63:EF:50:14:92:54:64:D0:0D:D2:25:89:45:C5:52:B2:9E:86:F0
            X509v3 Authority Key Identifier:
                keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:76:b8:a8:b4:dc:8b:07:1b:da:60:46:9b:00:c8:43:45:
         18:94:69:d3:1e:fd:42:3b:ba:0b:25:04:37:7f:3e:0a:ea:3e:
         d8:17:e3:0f:ab:cb:f4:c0:92:28:f9:c2:d3:29:1b:71:28:46:
         35:8c:76:47:61:f3:e8:a8:23:5e:00:88:5c:68:2e:85:0a:d0:
         eb:5a:1e:c8:f1:8f:c4:44:91:f6:11:8c:e0:30:5d:d9:e5:45:
         25:2d:18:22:40:a4:14:88:32:ed:ca:88:65:0e:c8:4d:a9:92:
         74:8a:22:9c:0f:6a:b3:b0:de:eb:e7:d7:94:7b:02:55:37:0f:
         1b:ac:7c:16:96:1c:77:f2:04:32:6e:61:17:af:9d:78:cc:47:
         24:ca:5a:4f:d5:3b:94:77:ab:e5:1a:48:67:44:0f:1c:65:ea:
         6f:70:9c:91:05:0c:9f:8d:aa:0d:74:68:a5:db:f6:a6:16:61:
         ba:28:4b:bd:7b:ed:14:ca:06:45:00:e0:f3:5b:fb:18:67:9f:
         3d:14:f0:85:8f:35:83:e5:7d:f1:33:1e:db:9d:50:3d:18:ac:
         36:b7:79:6f:10:4f:11:fb:ae:e2:33:27:47:3b:0f:60:69:63:
         5e:21:a1:30:15:ee:c0:24:d5:f3:98:f2:fd:ab:5d:e7:47:fe:
         7e:af:26:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:45:02 2026 by rpki-client