Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
File:                     5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json)
Hash identifier:          ckgL1PBkGVoqaznkpexk/wxGDF1SsKh1LUnLm2kWjh8=
Subject key identifier:   10:C4:F7:CB:C1:29:56:96:C6:5C:F0:E5:A4:97:BD:64:FA:17:9C:C7
Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
Certificate issuer:       /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
Manifest number:          011F
Signing time:             Mon 01 Jun 2026 06:38:35 +0000
Manifest this update:     Mon 01 Jun 2026 06:38:34 +0000
Manifest next update:     Mon 08 Jun 2026 06:38:34 +0000
Files and hashes:         1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: 9AYLsgIvXEM+k5ssvtQq+HMQix3ryqxw0lJZo7YEIa8=)
                          2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: WmeiamuyqIiXqThgaQ7WjBlL81T70JeikrMmaNzPLPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
        Validity
            Not Before: Jun  1 06:38:34 2026 GMT
            Not After : Jun  8 06:38:34 2026 GMT
        Subject: CN=6a1d28eb-06b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:be:79:51:7b:d2:92:25:46:27:72:a3:c1:
                    58:75:57:87:15:36:52:cc:be:48:19:73:9e:8f:31:
                    99:23:06:1d:ad:d0:9c:64:9e:1c:f2:09:55:13:22:
                    84:0c:ab:5d:fe:fc:c4:8d:4f:37:02:8a:fa:e2:ac:
                    ec:20:20:d9:08:19:44:42:1d:e1:3e:bf:0a:9c:05:
                    bc:a2:e7:ef:6d:f2:b5:03:b1:c4:9b:7c:ef:ed:e6:
                    07:53:18:44:87:fb:5c:c7:52:ce:00:9f:18:64:c7:
                    9d:7e:20:fd:60:61:e7:65:35:1b:3e:5f:9a:84:b3:
                    d9:b5:21:97:ef:38:8c:57:05:f1:a9:55:de:dd:c8:
                    d1:5a:52:c2:60:01:e2:ee:3f:31:d1:f7:59:42:2b:
                    f3:b7:20:5b:54:be:a0:f1:32:d7:c6:db:7f:d6:1f:
                    7a:ff:e5:25:ed:90:b7:61:43:cd:84:d5:60:fc:4d:
                    0b:fe:41:be:ba:30:f3:2f:59:76:9d:c6:bd:b3:26:
                    b9:02:e7:37:14:3a:77:3c:f3:a8:63:0d:1a:3b:35:
                    0c:7a:95:59:74:72:35:f0:9b:60:76:1c:51:fd:3e:
                    bd:33:55:9c:b5:b9:cf:de:aa:17:0d:44:12:5e:0e:
                    97:a0:8c:0d:16:96:fc:3f:b6:18:70:cf:ac:a0:17:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C4:F7:CB:C1:29:56:96:C6:5C:F0:E5:A4:97:BD:64:FA:17:9C:C7
            X509v3 Authority Key Identifier:
                keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:c9:3a:39:48:8e:2c:26:32:84:51:72:00:3c:c4:31:77:
         a7:9f:f7:03:a5:75:63:39:e7:98:90:99:59:fa:98:2a:d1:b6:
         44:11:92:d5:3e:85:17:c8:1b:dc:74:ce:a0:95:5c:2a:7e:3c:
         e3:7d:64:be:fd:63:93:02:73:4b:ee:0d:55:04:22:53:11:0c:
         dc:4e:03:b0:3d:f8:b0:34:4b:1b:b0:77:c0:d9:d0:9a:25:23:
         d6:96:94:e9:2e:2b:3a:f5:a8:01:c7:06:36:80:06:4d:50:a4:
         78:8e:98:89:34:34:07:e2:78:9a:61:bb:26:36:d8:ac:b7:9e:
         61:bb:a6:d2:53:05:f7:0a:40:ac:63:b7:36:fd:fb:b8:4a:f4:
         81:1b:40:59:51:12:be:8c:fb:78:2d:12:51:26:b4:d1:4d:be:
         53:09:9c:39:27:ea:ab:51:fa:8d:26:15:85:5b:df:9e:a3:cc:
         a9:fa:f8:20:40:36:b8:39:69:4a:09:a3:17:c2:6a:9c:5b:ed:
         89:f8:c5:01:54:3d:4d:41:a2:e3:71:e2:98:c9:67:c0:04:06:
         68:74:53:e4:34:b6:dc:6d:0d:e3:2f:20:e8:86:da:d0:d7:85:
         4b:70:20:32:68:2c:2a:32:f0:f4:9a:c9:db:d7:e7:23:2c:1c:
         e9:4f:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:13 2026 by rpki-client