Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          1nJY1El6lVvLqPixPSw23ukVciAZ/dslIDdFEESLPD4=
Subject key identifier:   31:16:07:AF:BF:2D:C5:4A:4D:D7:B5:FA:03:6B:72:7D:D5:32:6D:F1
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       06C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          06BB
Signing time:             Sun 31 May 2026 22:59:19 +0000
Manifest this update:     Sun 31 May 2026 22:59:19 +0000
Manifest next update:     Sun 07 Jun 2026 22:59:19 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: QTIhPOBDWdkn7RhTVAu8vmkTlGKfeGMD9VOBxNVPi34=)
                          2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 22:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1733 (0x6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
        Validity
            Not Before: May 31 22:59:19 2026 GMT
            Not After : Jun  7 22:59:19 2026 GMT
        Subject: CN=6a1cbd47-92ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:fe:5f:4e:b6:0d:92:78:69:35:3b:00:ec:
                    21:f2:99:ee:40:ed:32:8c:fc:4f:ce:1c:bb:6a:d0:
                    65:32:d9:03:72:31:06:77:fb:96:5a:e4:6b:e8:4e:
                    27:99:54:0d:4b:d8:46:c7:37:9f:07:b9:6f:8d:7e:
                    d7:be:12:0e:9c:e4:d9:74:6d:a0:2f:18:1e:cc:d3:
                    ea:6b:c5:e6:8f:09:40:16:bd:b6:f3:8f:f0:4a:c8:
                    2f:11:76:40:96:b3:fa:e9:41:4d:61:6c:db:60:49:
                    47:a5:2a:dd:9a:b0:c3:45:2c:35:d5:c0:ae:d9:ef:
                    4b:0c:22:5a:76:9a:dc:5e:bf:34:ca:06:ef:65:53:
                    fe:3a:77:52:a9:45:eb:e0:51:80:80:b4:f6:2f:d2:
                    a6:95:ee:a8:3f:d9:93:b9:e4:51:0f:11:0e:55:95:
                    dd:7a:4e:53:7f:ff:5b:e2:3e:08:38:ed:37:1e:af:
                    57:f2:42:fa:8f:30:20:42:c2:3e:90:b3:91:8b:21:
                    ca:f3:5b:41:9b:03:61:a9:ff:83:9e:92:e2:b3:3e:
                    c0:5e:c1:d0:86:50:5e:59:19:79:47:9f:ef:e9:aa:
                    2a:4b:4b:ad:fc:31:92:e4:d8:8a:e2:8c:8c:a4:a5:
                    4e:d4:89:97:1c:95:81:27:4b:67:76:95:e6:23:da:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:16:07:AF:BF:2D:C5:4A:4D:D7:B5:FA:03:6B:72:7D:D5:32:6D:F1
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6c:12:70:77:17:ee:ef:de:b0:32:06:8e:ab:81:ce:a9:fd:
         cf:c2:d1:50:17:ad:91:fa:a3:94:11:cf:4a:82:4c:e2:93:6b:
         7b:a7:fe:e5:b6:a7:fb:f1:08:df:f7:06:d7:eb:66:08:45:07:
         97:fa:99:49:23:f1:52:4c:7b:39:37:ac:1d:3c:e0:11:12:04:
         91:3b:8c:55:e7:3e:9e:08:da:ab:fb:ae:27:cc:72:82:ca:e2:
         7a:ea:c3:5c:3b:9e:6e:d8:23:8e:75:e5:f6:40:b9:59:24:73:
         93:09:70:4f:c0:16:a2:2b:61:4e:44:f1:fc:d8:3a:29:e8:87:
         8a:12:4b:d7:8c:6e:05:2f:9a:42:26:58:f4:f7:30:ee:91:e5:
         45:96:ba:33:55:26:56:ed:bd:d5:7b:38:26:34:c7:50:7e:c1:
         b5:a7:e0:49:16:07:a3:af:5b:b7:c1:56:bb:ee:bd:d9:6f:df:
         74:c3:8c:94:45:fa:ca:35:b1:3e:13:78:1a:70:56:7e:9a:29:
         69:74:3a:da:17:d7:df:17:fb:e2:41:17:80:6d:75:8a:ba:6b:
         bc:ea:eb:6a:3f:6b:cb:e8:66:63:65:af:3b:d3:eb:b4:de:87:
         ce:2c:bb:53:2d:51:ee:26:e8:c5:59:96:d6:83:11:1a:e1:dc:
         fa:c8:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:37:34 2026 by rpki-client