Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File:                     0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier:          CqJpdXrMT3Ogqu8Iu4lJW1y0L8F9etrAO/1zbKy650A=
Subject key identifier:   DC:96:FF:90:E7:DD:86:C5:2A:36:95:BF:A1:F8:55:3A:41:7C:CB:96
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer:       /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number:          0166
Signing time:             Mon 01 Jun 2026 05:40:04 +0000
Manifest this update:     Mon 01 Jun 2026 05:40:03 +0000
Manifest next update:     Mon 08 Jun 2026 05:40:03 +0000
Files and hashes:         1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: mILeWh5sqBVgbAEogKMFLQ1BzKtvxylIOxZ1LoxJHlI=)
                          2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: sr4Cah733B97dhkxeL+rixTREcZ+VoyvCGgZsHawZaY=)
                          3: 863F0DD25A7111F1AAD3157ABD833773.roa (hash: XX+jIToyo9IFnK0I5bFVzqEt6Lm2ccIcYxfwAnhOJ78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
                          rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
        Validity
            Not Before: Jun  1 05:40:03 2026 GMT
            Not After : Jun  8 05:40:03 2026 GMT
        Subject: CN=6a1d1b34-e457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:4d:eb:3b:f8:f5:61:0d:a9:84:63:22:50:
                    84:b8:4e:1f:0b:e0:6c:2f:58:96:90:62:a9:44:94:
                    2f:6e:04:f8:75:fe:48:24:f2:46:02:72:64:06:39:
                    27:92:d7:2c:ff:10:e6:cf:39:8a:5a:18:d8:e4:ce:
                    f8:c1:6c:68:56:78:1b:07:71:5d:18:25:84:d8:2a:
                    77:d2:1d:6e:65:3c:01:bf:4e:0e:a1:0e:4d:44:f0:
                    d0:2d:88:31:ec:32:2b:c6:f3:4f:49:56:d8:cc:8f:
                    9f:e1:bb:a0:a2:58:8f:ea:8f:4e:ce:3f:87:12:9d:
                    fd:85:8a:ae:39:4f:d1:db:22:11:62:be:a7:c8:f9:
                    9f:95:e6:f2:5e:ab:6a:7b:6e:f2:bd:c4:7b:81:04:
                    7c:18:85:c5:68:bd:c2:1a:b9:3c:58:40:91:c9:40:
                    3d:40:5c:5a:b3:06:66:88:59:66:13:f7:7f:33:18:
                    2d:e8:59:0d:a0:ed:b3:f1:2b:5d:d5:e1:8d:41:87:
                    05:57:6a:e0:9f:9f:8c:63:49:6c:27:a7:8a:d1:a2:
                    95:30:0a:22:56:5a:15:25:78:68:42:67:97:e1:e9:
                    6f:d1:e7:0b:41:ee:9f:4b:4a:93:02:49:7f:a6:0f:
                    9f:a8:1f:91:53:86:46:ea:58:84:83:52:82:65:31:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:96:FF:90:E7:DD:86:C5:2A:36:95:BF:A1:F8:55:3A:41:7C:CB:96
            X509v3 Authority Key Identifier:
                keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5e:f6:dd:3b:1f:76:17:6c:1b:ab:a9:72:d9:3c:0a:b4:34:
         5e:a2:88:a9:9d:71:03:ff:dd:a0:18:d0:db:cd:9e:78:7e:93:
         e3:14:90:e5:82:be:da:32:8e:67:be:37:d3:ef:76:6b:e0:37:
         26:84:3b:c9:4e:c6:2b:42:8d:d5:6f:a3:df:fb:a4:6b:86:4d:
         c9:19:6b:77:1c:cd:62:92:8e:0b:19:d8:a4:41:05:27:24:94:
         90:4e:8d:bc:04:46:7a:25:63:1f:29:2d:1f:a2:47:ee:4e:9f:
         7c:c5:a3:44:2b:91:80:f3:c9:16:bd:c1:6b:a9:17:a1:ff:a5:
         db:3c:e2:ee:af:4e:b7:fd:40:53:98:37:c0:0d:99:52:f0:1c:
         74:6c:ab:68:ee:4e:eb:7a:1c:2e:60:3f:23:1b:14:85:3f:42:
         4b:6e:3f:09:e2:29:0c:9b:4f:db:7d:10:a1:bf:e5:fe:14:39:
         1f:8a:ab:43:e5:e8:30:54:b8:e5:11:e3:82:82:8e:2d:a9:9f:
         a5:e7:86:4b:d1:a7:95:bd:77:1c:c6:fa:0d:13:2a:5b:55:9f:
         91:e6:e1:43:1d:49:33:fb:06:fe:40:65:4c:b7:de:7e:0a:43:
         1b:e5:0e:e1:f6:d2:53:4f:b0:37:df:f8:16:d0:25:8d:ac:67:
         81:21:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:49:11 2026 by rpki-client