Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
File:                     gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft (raw, json)
Hash identifier:          YgumSc8uWhMr4Ch3otWgDLHzt5fViKkDHEwB7UOxMGM=
Subject key identifier:   74:2F:7B:90:C6:FF:A8:30:E6:0E:2D:DD:10:8E:29:34:34:5B:41:6C
Authority key identifier: 80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
Certificate issuer:       /CN=A91B3316/serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
Manifest number:          59
Signing time:             Fri 05 Jun 2026 08:45:54 +0000
Manifest this update:     Fri 05 Jun 2026 08:45:53 +0000
Manifest next update:     Fri 12 Jun 2026 08:45:53 +0000
Files and hashes:         1: gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl (hash: UOsfYIS9JED/WLAot5KjjrXmmOvhMdfMePkFhc4rkPY=)
                          2: C96483E226B111F1829C23D9C3833773.roa (hash: xDH8tBv3qmVSVr8LAJxQ8B2DT/UTFhcoFnYkcj6WUeU=)
                          3: 10B9878C243D11F1979A5CDAB9833773.roa (hash: zVqpLd7j0J+K3oi88p50tmt71zBHPtzbECf2RGbri0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl
                          rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
        Validity
            Not Before: Jun  5 08:45:53 2026 GMT
            Not After : Jun 12 08:45:53 2026 GMT
        Subject: CN=6a228cc2-48c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:80:a9:27:7c:e4:46:75:94:58:0f:48:ed:
                    5c:60:68:b1:68:85:b5:e4:a2:a8:38:97:6f:39:11:
                    97:ad:c4:9b:72:ab:26:bf:e8:33:f3:54:ff:69:9f:
                    73:da:0b:7a:4f:a0:9d:1c:e6:4b:36:89:1c:a8:25:
                    c2:eb:46:30:4f:65:b5:d5:b0:f3:a7:62:d7:e1:b3:
                    52:61:35:fe:dc:90:d6:f7:f4:9e:4c:89:72:96:fd:
                    b7:be:31:93:78:4b:d0:a4:56:ed:76:ed:13:2e:6a:
                    01:a9:16:85:75:ba:e1:ec:12:f7:1f:d7:63:9c:6c:
                    86:76:1f:56:bb:ad:12:cb:36:1e:18:8d:ad:a6:a1:
                    02:74:93:28:4b:2b:1f:7c:78:9a:d5:fb:e6:19:2e:
                    a7:dd:80:55:09:79:97:bb:00:b0:9f:1a:f9:fa:08:
                    3f:ce:04:24:b8:84:c0:a1:52:58:ac:8f:ee:d5:12:
                    ba:ce:47:a1:31:43:5b:7e:82:88:d0:f2:47:84:44:
                    c7:89:0c:d5:22:85:db:16:88:62:39:95:e0:97:39:
                    20:c6:c3:51:de:bb:f9:ec:74:49:86:d6:33:41:40:
                    9f:31:59:79:d1:6f:0f:38:8e:eb:e1:4f:7f:2d:ee:
                    35:b5:91:ce:6f:09:75:08:74:56:10:cc:ac:c5:1b:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:7B:90:C6:FF:A8:30:E6:0E:2D:DD:10:8E:29:34:34:5B:41:6C
            X509v3 Authority Key Identifier:
                keyid:80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:33:97:10:14:fc:8e:30:bd:85:e3:7c:8b:00:32:0d:1f:52:
         88:81:62:9c:c2:96:72:c2:d5:0b:81:53:e6:04:7a:ba:97:98:
         82:74:5c:26:6d:7f:1e:f8:1b:1a:98:a8:91:85:34:3f:e6:32:
         4c:f4:ed:66:33:18:9c:94:cf:81:ea:0d:f5:11:ca:ec:ef:aa:
         4b:72:93:3b:ef:62:7a:a4:50:77:a2:6f:ae:e9:a7:5b:05:46:
         6c:14:e4:6a:12:67:91:e6:8c:cc:40:ea:95:42:40:ee:34:d1:
         e9:08:29:89:0e:6b:6b:ba:e6:a2:56:48:28:ab:ef:11:27:fc:
         fd:eb:f9:f5:15:09:d5:59:08:fc:1e:79:6e:27:2c:3e:44:ee:
         a8:26:fb:29:ee:4a:1f:3c:79:6a:b4:b0:24:35:95:76:07:5a:
         4e:39:9f:23:e6:c6:37:38:1f:43:40:48:3d:5c:b9:5a:69:75:
         ae:a8:95:e6:23:f5:b0:c4:0e:d7:74:3c:84:77:a7:65:5e:73:
         cf:ac:da:70:e1:fd:cb:72:f0:6f:ac:30:5d:47:bf:5d:0c:c1:
         dd:ae:8f:c9:33:d1:32:47:80:7a:ad:13:2e:02:5b:dc:48:50:
         b4:b9:d4:b7:44:82:21:24:8f:fc:75:98:6e:28:c1:e9:05:3f:
         cb:02:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:53 2026 by rpki-client