Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
File:                     U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json)
Hash identifier:          5i5GMT1BZIpoWtc1pwPJzbbPiTt2fhDrpHdlslcB91g=
Subject key identifier:   F4:0B:FD:6D:9B:59:80:DE:15:27:E1:EC:33:9C:DA:B7:80:EE:6F:BD
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Certificate issuer:       /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial:       0615
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
Manifest number:          05F9
Signing time:             Thu 11 Jun 2026 01:02:31 +0000
Manifest this update:     Thu 11 Jun 2026 01:02:31 +0000
Manifest next update:     Thu 18 Jun 2026 01:02:31 +0000
Files and hashes:         1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: unGVRG6XPCFd4sBpTbG74I3+ZXonDD+0b0aPbxsS7BI=)
                          2: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: NXzX7R7NLEazsVeUoaLWbp54rjvi9QQud2skYKW4OZQ=)
                          3: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: O5HnlLR1hWWyTNRUt4LdbaUFp1yGwksal5ksV0pwNV4=)
                          4: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: +8k4rfDonzqcIXzrPnc9G+NWKEIwjetXPPpI12xDWO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
        Validity
            Not Before: Jun 11 01:02:31 2026 GMT
            Not After : Jun 18 01:02:31 2026 GMT
        Subject: CN=6a2a0927-8416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:32:01:6e:75:d5:1b:7b:94:bb:4b:8b:7e:
                    7f:1d:17:0f:88:a3:e0:54:50:3d:8a:10:56:84:54:
                    cf:6b:f8:92:3e:2c:0d:d4:99:36:72:2b:b4:43:eb:
                    26:f4:cf:49:d1:b7:4e:fa:0f:3f:93:88:be:89:6d:
                    74:13:26:06:ec:ac:43:6b:d0:04:05:b1:5b:f6:15:
                    88:a1:01:0e:9e:ff:91:95:51:68:8d:57:7a:fa:f0:
                    26:ee:e6:02:6c:be:a3:e9:ba:72:b3:78:ac:3e:15:
                    ae:1f:b8:02:47:37:86:e4:cf:fd:ba:20:b5:e0:8a:
                    b1:aa:30:3a:ea:ac:6c:b3:86:39:ff:fd:8d:bb:3c:
                    a0:20:cb:cd:be:3a:b4:9d:cb:6b:1e:29:16:12:03:
                    3d:b5:94:b0:3c:9a:14:91:c3:53:d7:34:cb:f6:47:
                    7f:1e:98:c2:cc:ea:7c:85:2a:60:6c:4d:54:56:90:
                    c0:2b:45:bd:98:f0:72:99:cc:b2:96:2b:a0:22:0a:
                    46:34:8c:84:97:c0:95:da:86:98:37:92:16:58:88:
                    e0:8b:bc:3a:c9:d7:83:0c:b2:08:86:fd:2e:22:db:
                    4d:61:f0:c6:c0:0d:be:0f:6c:e3:e1:2a:ba:ff:8d:
                    2c:22:5c:cf:61:0d:1b:58:31:3a:07:4b:3e:ea:93:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0B:FD:6D:9B:59:80:DE:15:27:E1:EC:33:9C:DA:B7:80:EE:6F:BD
            X509v3 Authority Key Identifier:
                keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:64:4b:9a:ee:63:ce:30:92:5c:a9:3c:28:bc:58:3e:79:
         9a:46:2b:f4:e2:5d:9d:d0:91:c1:15:51:c2:ad:9c:dc:e5:74:
         64:8a:4f:1f:ec:ef:72:69:22:fa:bd:09:7b:3c:a5:28:f9:91:
         2d:2f:20:e6:d3:59:f9:d8:3b:51:99:c1:2c:e7:af:ad:dc:93:
         d5:b0:1f:0b:5c:65:cb:d5:69:67:e0:93:7f:56:1f:e3:06:6b:
         9a:11:5c:c7:a2:26:60:eb:55:73:3e:41:e2:7f:ce:1e:84:5a:
         52:4f:42:3a:9a:5c:48:07:af:7d:d3:dc:b8:3b:71:30:39:cf:
         dc:a8:b8:45:87:c7:1e:16:b6:a5:71:3e:ae:5d:8b:57:53:9d:
         4e:a8:03:6f:48:fd:e4:36:4c:6e:9d:61:0d:8c:1d:e2:40:64:
         7c:72:38:1d:b2:e1:83:4c:62:0d:17:a4:9b:1d:2d:5a:f9:be:
         34:c1:ef:6b:4a:d7:44:7b:b9:bf:2f:a0:a8:e5:83:9f:f3:28:
         ed:74:b0:c1:14:81:3e:c2:f0:bc:e4:97:fa:6d:19:81:47:bd:
         b8:5c:8d:04:20:3a:b7:7c:b1:48:25:ae:98:db:e0:f8:c6:54:
         24:0c:4e:8c:77:58:cc:81:2c:2a:d2:88:f6:96:04:df:e4:26:
         f8:4f:c7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:58:11 2026 by rpki-client