Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File:                     CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier:          n8WZ3ijo8DH1/ihgGqpNudtoEfVBrHEe6tE8m6fvdNc=
Subject key identifier:   78:8A:FB:A3:8F:5E:6C:86:BE:CE:14:5B:97:3A:6D:28:40:E2:3A:8C
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer:       /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number:          D4
Signing time:             Mon 01 Jun 2026 07:35:40 +0000
Manifest this update:     Mon 01 Jun 2026 07:35:40 +0000
Manifest next update:     Mon 08 Jun 2026 07:35:40 +0000
Files and hashes:         1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: +FiXQKuk8rD3EbCJc2l3Id/Mmzs0Tn4l7/k907bSvIA=)
                          2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
        Validity
            Not Before: Jun  1 07:35:40 2026 GMT
            Not After : Jun  8 07:35:40 2026 GMT
        Subject: CN=6a1d364c-8778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:79:7c:e0:dc:66:60:58:25:1f:22:c7:88:3e:
                    77:45:43:af:a9:72:59:6b:5f:ca:44:05:6a:c0:a9:
                    11:11:00:9a:e6:1f:8b:9b:d9:7e:b6:4d:b8:eb:96:
                    ae:31:8d:5c:bd:f0:76:5c:bd:3b:43:c8:f2:19:17:
                    94:34:e4:28:db:4f:36:d5:63:c1:ca:4d:b9:76:8d:
                    b4:5c:1f:03:95:2f:c3:65:aa:1e:2b:dc:4c:60:e7:
                    5a:a1:25:63:b7:af:ab:a5:50:65:fc:78:60:09:c3:
                    a9:f9:c8:e5:b3:54:b6:19:9a:81:14:f3:0e:6c:43:
                    45:88:76:0d:cc:9f:07:73:63:cf:9a:a6:2d:0f:50:
                    88:c4:6f:31:63:8d:49:17:fe:94:c8:04:4c:d9:0a:
                    cc:25:fd:ef:eb:98:6c:d5:1c:39:3a:d3:16:6e:5a:
                    dd:de:9b:c4:ff:7a:c8:a8:40:94:5f:0b:4f:ca:b6:
                    e9:38:04:af:3b:b2:2d:47:dc:0a:6f:d2:1f:62:82:
                    f3:b2:3b:9a:93:79:40:3f:ee:3c:2e:22:1f:1c:7c:
                    5e:4c:7b:aa:58:a3:33:dc:32:41:80:d1:2f:c6:8a:
                    72:ef:2c:4f:f4:99:e5:8a:61:d1:e9:f4:d6:ec:37:
                    10:77:16:c3:42:b5:64:6a:11:f0:31:54:75:93:e8:
                    57:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8A:FB:A3:8F:5E:6C:86:BE:CE:14:5B:97:3A:6D:28:40:E2:3A:8C
            X509v3 Authority Key Identifier:
                keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:08:1e:15:99:8a:1f:fe:e1:81:36:b2:f2:95:f2:d8:3f:
         ee:c9:04:9d:04:af:d0:24:00:26:0c:37:12:6d:df:fd:8f:bf:
         6f:d9:b4:2c:1d:70:9a:86:bc:9a:44:56:36:7e:20:b9:39:44:
         4c:cd:fc:db:f2:89:d9:14:45:d9:08:b1:14:a3:1b:45:b2:16:
         67:ac:d7:84:9c:41:07:53:6e:53:d9:f8:02:da:d6:57:4c:6d:
         c1:bb:1e:35:09:d4:c0:11:98:58:6d:e9:58:db:d3:82:a7:b0:
         4d:6a:3f:85:c6:05:15:34:db:39:3f:8d:c2:9a:5a:3f:56:38:
         83:2a:4b:f9:e2:11:fe:a2:10:42:6e:b3:18:87:e8:1b:07:8e:
         88:3e:c8:0d:ff:b0:59:af:2b:d6:27:68:a3:86:ee:d7:4b:0b:
         ba:16:be:be:44:0f:00:35:c3:fa:50:a5:02:ed:7f:11:87:a4:
         11:5f:a9:0a:fa:51:92:18:49:9d:bf:cb:af:5a:ec:27:ca:c1:
         6c:9b:64:22:f8:06:c6:21:63:4b:14:ca:20:6f:31:13:68:dd:
         be:58:08:74:0a:4d:6b:53:a0:92:b6:d6:2d:ad:7e:79:74:64:
         3e:c8:a6:a7:9c:20:0e:ed:39:6d:3c:16:53:04:0e:7b:ab:d7:
         15:f9:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:27:36 2026 by rpki-client