Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
File:                     T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json)
Hash identifier:          iplFrgI6VQVvh4hbybKtuEx0q3O9Gpzt44CycoXuHro=
Subject key identifier:   B2:AA:3A:33:EF:E8:20:82:C5:A9:07:FB:74:7C:D5:0E:F4:2F:A3:33
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Certificate issuer:       /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial:       0283
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
Manifest number:          0274
Signing time:             Thu 11 Jun 2026 04:13:03 +0000
Manifest this update:     Thu 11 Jun 2026 04:13:02 +0000
Manifest next update:     Thu 18 Jun 2026 04:13:02 +0000
Files and hashes:         1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: lEM8R+ftx/Qko1AGCtCJu2kzs5VU+L/tlVExv52yEto=)
                          2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=)
                          3: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=)
                          4: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: BXJT+VuR/xyvQ8o0R6nT8W4UMQGcievCOsLixY+E6r4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
                          rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
        Validity
            Not Before: Jun 11 04:13:02 2026 GMT
            Not After : Jun 18 04:13:02 2026 GMT
        Subject: CN=6a2a35cf-7e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:75:3c:e9:02:49:98:b4:39:8f:b9:24:da:
                    e1:14:67:46:4b:3c:0d:f3:62:35:e1:9f:c8:cc:c1:
                    56:4a:8d:03:f8:7c:e6:ba:c3:d2:ed:ca:57:ba:41:
                    c4:fe:70:9c:e9:7f:c6:91:16:9b:77:88:16:f0:27:
                    7f:15:18:f0:8b:80:0e:f2:a2:7d:b6:48:a7:43:0a:
                    91:61:ef:42:be:3f:bc:b2:59:c7:39:83:7f:f4:70:
                    6a:07:aa:e7:6e:4a:40:82:e8:c2:79:c9:2e:3c:9b:
                    54:90:37:27:c9:2c:97:3b:aa:ed:a1:73:3c:5e:b3:
                    98:b3:f4:1c:3f:aa:a5:10:fa:26:60:68:60:0c:11:
                    c6:8d:82:b5:c3:98:46:95:d5:da:d3:fc:b1:ed:fc:
                    9b:40:de:93:54:a8:0c:ef:28:d7:09:dd:16:ff:22:
                    a4:fd:0d:f9:da:df:64:51:d7:55:16:d8:8d:5f:65:
                    77:4e:65:23:9c:e3:d4:47:78:b7:3a:b6:f7:75:07:
                    79:a1:f0:41:e3:62:17:44:42:e0:43:a6:fd:3c:4a:
                    83:f0:47:1c:82:9a:cd:29:7b:cd:42:43:4e:50:ae:
                    cc:62:5e:f1:19:e8:64:0d:ce:20:2e:dd:66:01:b3:
                    40:6c:ee:17:27:c9:14:c1:0b:ee:59:91:4b:39:46:
                    d9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AA:3A:33:EF:E8:20:82:C5:A9:07:FB:74:7C:D5:0E:F4:2F:A3:33
            X509v3 Authority Key Identifier:
                keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9e:5f:0f:14:f6:f2:ac:7f:4f:7c:ec:6a:91:e5:3f:8f:d6:
         0b:1b:2d:fe:7a:52:ac:d8:10:01:24:40:41:0d:c9:37:0e:ec:
         b0:f3:6a:c7:d0:95:ac:6e:23:b5:e1:d6:6d:93:88:27:d1:78:
         da:e2:9c:80:55:38:75:1f:33:3e:ee:5c:bb:30:cc:f3:76:a1:
         e3:26:00:4e:95:04:a6:70:bc:43:7b:b9:5d:1c:3e:2e:61:f5:
         e7:9e:55:e9:8e:d9:28:5f:e2:db:18:9e:ec:bb:4f:d7:00:74:
         f1:fa:4a:36:79:62:2d:5e:a0:e8:54:29:c1:9d:83:44:7e:91:
         cf:9f:94:04:bb:23:8a:2a:db:b2:70:bc:fe:ae:2f:18:c5:56:
         43:b5:37:fb:2b:f3:67:44:7d:4d:4a:4b:79:b4:4d:e9:05:2f:
         c3:c0:88:07:1c:bb:fb:a3:e2:94:50:42:c6:81:71:37:cd:f4:
         30:8a:74:1d:30:a5:44:29:c6:09:51:54:2b:8a:05:40:60:f6:
         0d:f7:8e:bf:a0:4f:b0:79:9f:eb:1b:43:22:21:50:cd:ee:1a:
         61:43:85:3f:16:c0:89:3f:77:03:71:52:d6:7b:7f:ec:53:29:
         2b:8b:b2:a4:7f:ca:d4:67:42:79:10:86:7d:c0:c1:19:c3:b9:
         4f:fd:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:48:42 2026 by rpki-client