Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
File:                     V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json)
Hash identifier:          jpxVwLcWaVlCMEbwasFPbt5QyzG+k/D3iDdVi0McPTQ=
Subject key identifier:   C5:27:94:05:51:45:A2:E7:1B:57:3C:10:7F:44:75:95:25:CD:14:73
Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7
Certificate issuer:       /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
Certificate serial:       2865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
Manifest number:          285A
Signing time:             Mon 22 Jun 2026 15:35:44 +0000
Manifest this update:     Mon 22 Jun 2026 15:35:43 +0000
Manifest next update:     Mon 29 Jun 2026 15:35:43 +0000
Files and hashes:         1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: OCR2Lr2XXG5bk5ibKfyAbJ0MQSE+5LSikDFPIf6hD+M=)
                          2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: H2W7FUFHmZ8Q0NnMSEGYzmhsdnQ1yfavtemrLs6lXMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl
                          rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10341 (0x2865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
        Validity
            Not Before: Jun 22 15:35:43 2026 GMT
            Not After : Jun 29 15:35:43 2026 GMT
        Subject: CN=6a395650-96c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:cd:94:38:97:4a:c7:09:c6:4e:57:c1:fc:
                    ae:73:4e:21:14:1d:ca:79:35:a8:41:6b:37:4f:6a:
                    5c:69:ed:eb:37:64:b6:ad:0f:57:fb:76:82:c7:72:
                    2e:f3:ea:04:34:4f:c8:a6:ac:69:3f:ae:2d:ec:d4:
                    9f:be:a8:99:45:00:b7:17:ba:ea:62:5e:ec:c6:1a:
                    82:48:46:5b:49:9c:fb:29:ee:c8:18:c5:8f:83:04:
                    e8:ae:01:98:fd:b5:30:bb:cb:8c:8f:78:8f:a5:e4:
                    d3:08:6f:1d:c2:3d:d8:d3:f9:d5:20:9e:34:8d:58:
                    24:ad:0b:99:28:41:0e:f4:6b:2c:b0:1d:2f:78:77:
                    dc:0d:41:53:ec:dd:43:3b:a4:63:41:33:90:27:3d:
                    07:cc:ca:d6:9f:11:b7:ea:66:32:38:58:2f:9b:40:
                    c0:ec:bc:80:e7:5c:e8:34:78:bd:30:50:cd:c7:14:
                    26:f1:21:c9:10:af:1b:b3:bf:ca:dc:25:aa:32:18:
                    ce:77:e6:8c:fd:eb:5e:e6:74:3c:9c:cc:fa:3e:9e:
                    fa:02:98:00:4f:49:1c:53:f9:f8:74:27:b3:f4:ff:
                    11:cb:ef:4e:e8:f4:d0:ed:e4:f9:8b:d8:31:06:5a:
                    ab:8b:ee:83:a0:29:5e:6e:74:8f:34:d6:ac:76:ba:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:94:05:51:45:A2:E7:1B:57:3C:10:7F:44:75:95:25:CD:14:73
            X509v3 Authority Key Identifier:
                keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:45:27:d4:63:53:fd:22:76:33:a9:f6:fc:e0:8d:40:5b:
         29:d6:ce:d4:da:2f:33:04:cb:00:51:4d:cd:7b:cc:ab:0e:18:
         bb:99:54:1f:ad:55:31:54:22:12:f0:dc:68:c9:6f:d6:87:8a:
         82:8d:c0:0d:ca:63:d2:f1:a4:de:a4:99:45:63:35:e6:56:79:
         a8:df:e1:17:0e:aa:2d:30:b7:03:8e:15:5d:d3:30:a3:f4:10:
         00:88:bf:48:13:44:ba:23:f1:b4:5c:7c:e2:4e:d3:b9:09:bd:
         25:72:3f:71:5b:6e:71:9d:85:6f:7b:e8:60:3d:5c:14:8c:60:
         ca:84:10:3f:11:96:32:53:e4:86:bd:86:a2:a1:c5:6b:17:7f:
         c1:15:f3:b1:b0:2d:87:cc:fd:8a:78:63:28:64:d1:10:b5:f2:
         a3:2d:9c:92:bf:a1:15:de:91:c5:60:ad:d2:b5:b6:26:b1:3e:
         4b:03:f5:fa:44:2c:ef:8a:ce:a2:45:29:41:d0:9b:ea:75:99:
         83:1e:ad:5a:69:c9:36:5b:8e:40:87:0e:c3:f9:a9:eb:c0:32:
         8f:46:03:47:5f:c1:75:43:60:99:db:b2:8e:f2:f0:8b:ce:c9:
         4b:d2:65:36:a9:95:2c:ea:a2:2e:06:35:7f:9f:b7:7a:16:a2:
         80:6f:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:04 2026 by rpki-client