Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
File:                     toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json)
Hash identifier:          mtwBsuOEjieUGIwhcORhf87/cldoG+03n6uAa3WxFXg=
Subject key identifier:   84:E5:64:0E:67:44:E6:49:44:FD:17:51:5A:75:4B:8C:86:FD:C6:5E
Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19
Certificate issuer:       /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
Manifest number:          6D
Signing time:             Tue 02 Jun 2026 18:12:59 +0000
Manifest this update:     Tue 02 Jun 2026 18:12:59 +0000
Manifest next update:     Tue 09 Jun 2026 18:12:59 +0000
Files and hashes:         1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: pmfz/OgOACtWc45kFqjsr7ixXIEWPCLiJI4ZhvswcSo=)
                          2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19
        Validity
            Not Before: Jun  2 18:12:59 2026 GMT
            Not After : Jun  9 18:12:59 2026 GMT
        Subject: CN=6a1f1d2b-f3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:c3:f9:c3:d2:19:cb:19:2b:5b:b1:17:1a:
                    e6:23:d3:c6:4e:f3:f6:ba:82:39:22:b3:bf:78:72:
                    49:98:bd:78:76:c4:03:de:e6:fa:39:91:8d:fe:26:
                    7e:88:ee:4b:91:c0:3e:ab:51:10:7f:32:27:3e:d8:
                    bd:6e:ce:30:ff:45:a5:54:3f:82:a5:28:7d:3a:2e:
                    84:1d:81:2a:93:41:10:a4:2e:b6:22:ac:5f:f8:4a:
                    21:e8:cb:23:39:0c:33:c7:4a:09:c0:df:36:ff:ff:
                    0b:71:11:76:59:93:a7:33:23:d3:40:3c:89:ea:ee:
                    6d:db:39:14:f6:db:7f:e0:bf:95:f3:44:0d:1a:26:
                    47:49:af:70:87:eb:77:b4:c9:5e:cc:57:ec:f0:ef:
                    11:13:35:ce:f9:ac:1b:63:77:1c:3c:72:8b:f4:20:
                    f8:c5:fd:bf:22:0e:15:3f:a6:ae:ec:e1:41:a1:6a:
                    f0:dc:1f:ee:7f:3e:82:3a:73:a2:8f:23:74:e3:cf:
                    82:67:c5:bd:88:59:da:58:4e:82:7d:90:f9:52:e7:
                    b5:b1:56:1b:7f:c5:12:16:08:96:6c:fe:74:f8:95:
                    3a:e7:fc:bc:94:ae:50:97:09:df:a3:5c:96:d2:f8:
                    8b:7f:6d:e3:3a:98:4f:3e:4c:77:6e:5a:52:02:1b:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E5:64:0E:67:44:E6:49:44:FD:17:51:5A:75:4B:8C:86:FD:C6:5E
            X509v3 Authority Key Identifier:
                keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:5e:35:33:d1:b8:20:04:06:b6:a8:b9:92:aa:30:d7:5c:
         03:bb:1b:03:e6:6e:75:6d:6c:ac:20:9a:c9:d8:1a:1b:5b:c8:
         71:33:23:19:42:c1:5c:b8:93:58:d8:b0:6b:00:a7:9f:aa:70:
         11:5e:c9:ea:df:db:0e:80:f2:78:f6:f1:6d:7e:13:fa:ca:32:
         6a:6b:8b:65:27:c7:6c:a8:bd:33:c7:d6:03:dd:e0:6c:0e:79:
         5d:ae:dd:24:4d:40:76:28:25:f7:2e:f2:59:df:e6:51:23:0c:
         40:ad:a4:f0:f6:55:23:df:cb:61:46:cd:51:31:b8:5e:f1:61:
         62:c1:fe:c8:a6:e9:aa:d6:cf:17:4c:92:33:1c:cd:c3:14:d8:
         83:33:08:63:a9:d8:d1:c4:57:25:bf:44:27:47:d4:fd:ec:67:
         ac:1c:b0:ec:e5:32:82:0e:3d:54:00:86:a0:b3:30:fd:a2:53:
         db:f5:9b:9e:2c:cd:39:70:09:7c:c8:db:27:23:7e:33:37:1f:
         09:c3:17:79:a5:64:a1:c3:b8:e0:e1:5b:c8:8a:68:bc:59:46:
         4a:99:c9:96:ba:3b:ae:c1:4a:51:d4:f6:87:0b:60:cc:09:f7:
         bc:8b:30:37:47:65:12:d9:d4:6b:c8:d9:83:83:8f:1b:73:55:
         0c:4f:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:48 2026 by rpki-client