Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File:                     5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier:          Okh2KDwvjtJnTzvTTSUPYbb8yRuMp4yepVeRUKPp/uw=
Subject key identifier:   42:F8:A1:A5:5F:FE:72:A5:AA:19:82:41:EA:60:14:56:5A:92:88:04
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer:       /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number:          0264
Signing time:             Tue 23 Jun 2026 03:02:01 +0000
Manifest this update:     Tue 23 Jun 2026 03:02:00 +0000
Manifest next update:     Tue 30 Jun 2026 03:02:00 +0000
Files and hashes:         1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: albbRtoXPKMXgiU+ON2792rRWJQG6E5box20rui2/oA=)
                          2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: /zrcL4nSpe3zdFYdi/0iqkSLzijJlxJzGF9A4BLkUeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
                          rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
        Validity
            Not Before: Jun 23 03:02:00 2026 GMT
            Not After : Jun 30 03:02:00 2026 GMT
        Subject: CN=6a39f729-5357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:ad:f7:d5:db:0a:d3:36:b2:2f:b1:06:e3:
                    16:91:ad:2b:6a:0a:e9:a0:cb:4c:e7:24:ed:36:cd:
                    cd:e1:e9:32:fc:c1:39:db:0f:9a:9e:5d:d2:6b:a3:
                    5d:ae:04:99:11:88:a8:92:f7:89:66:45:fa:c9:71:
                    15:52:27:45:af:dd:02:c4:61:e1:c5:0c:62:5f:bc:
                    58:3f:17:2f:3e:2d:fd:6c:fe:32:ed:be:48:7f:83:
                    d2:80:21:6a:d0:2a:e8:5b:1b:ec:e3:4f:41:08:65:
                    d3:ac:a9:b3:ad:73:30:52:dd:ab:53:be:dd:25:da:
                    0e:d1:14:69:19:e9:c7:b7:d7:bb:c5:5c:31:a8:95:
                    e4:88:4c:b2:04:08:a7:96:39:79:1a:05:f7:2d:f5:
                    97:0a:2e:c8:4a:df:dc:ec:0e:0c:93:e4:41:1c:40:
                    47:31:23:0a:03:40:eb:29:b6:c3:12:2c:4b:b3:67:
                    82:ec:e5:06:49:29:30:89:6c:89:5c:94:ba:bb:22:
                    47:70:2b:6f:c4:2b:ed:43:70:b4:be:bb:ae:49:4f:
                    f6:eb:84:01:72:45:dd:54:b8:1e:f0:6c:41:14:52:
                    f1:a8:8c:93:d8:1c:0a:61:d3:fc:86:ef:65:52:26:
                    ba:5a:45:73:56:39:08:d0:f2:98:11:cb:1f:e8:5c:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:A1:A5:5F:FE:72:A5:AA:19:82:41:EA:60:14:56:5A:92:88:04
            X509v3 Authority Key Identifier:
                keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:f4:1e:e3:64:eb:fa:57:4e:16:fa:9b:15:4b:7d:c7:1b:
         23:b6:0d:1c:82:54:70:8b:c9:06:76:21:ed:f8:57:1b:60:c2:
         38:c3:75:95:f3:9a:37:cb:56:d4:f9:d1:c7:36:34:d4:0f:46:
         7f:df:41:d2:bb:0c:e0:0b:66:09:a4:0f:5a:f4:f7:f6:6e:61:
         6d:06:05:49:91:7a:8a:6c:0d:30:ad:09:b5:c2:2e:9b:61:b4:
         67:3f:17:6e:7e:b8:b0:96:7d:2f:72:90:60:62:93:30:0d:9a:
         5a:80:76:7e:df:00:50:9f:8a:75:39:64:60:6b:13:c6:02:02:
         a0:ad:35:f3:79:9e:8d:b0:bc:2c:d3:b7:e0:83:66:ec:56:63:
         b6:b5:0e:ee:de:32:39:9f:87:98:57:b6:b1:ab:9f:ff:b4:4e:
         82:d4:c6:88:d8:0c:62:e5:1c:4e:b2:4f:47:a4:f4:67:10:b9:
         a2:7d:e9:7a:45:7a:13:9d:ab:0e:9a:a8:bb:48:76:1a:90:d4:
         a6:a0:6a:40:74:94:5d:f7:b2:db:91:92:87:c1:dd:2e:1f:4d:
         1f:38:23:10:e6:fb:19:5e:3c:3d:b2:28:5d:95:5b:63:a6:51:
         b3:70:81:18:33:e3:b0:55:6d:83:48:11:5f:5e:40:92:9d:7f:
         b8:ed:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:38 2026 by rpki-client