Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
File:                     kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft (raw, json)
Hash identifier:          zf3ZWRgJy/Oev8vIkiY9f1dp1TkVbBmss0cVrdTLJfQ=
Subject key identifier:   25:49:0F:B8:FB:36:2D:85:D3:8B:DD:CB:2E:D5:F4:84:47:A3:C6:E3
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Certificate issuer:       /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
Manifest number:          121C
Signing time:             Thu 04 Jun 2026 17:08:44 +0000
Manifest this update:     Thu 04 Jun 2026 17:08:44 +0000
Manifest next update:     Thu 11 Jun 2026 17:08:44 +0000
Files and hashes:         1: kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl (hash: gsMUEfrG2vM3Z8Ze84ncCzUSxoz+kGO0wRWpaE2THXE=)
                          2: 5ACD46A25B5011F1A484689580EE528E.roa (hash: /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=)
                          3: 59142EC05B5011F1A484689580EE528E.roa (hash: /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=)
                          4: 59ACBA1E5B5011F1A484689580EE528E.roa (hash: zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=)
                          5: 5A3D22165B5011F1A484689580EE528E.roa (hash: e03XnEPO3o2zr+89RCtKmVF1UA9g/w/QMsdb9CferY4=)
                          6: 58722CCE5B5011F1A484689580EE528E.roa (hash: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
        Validity
            Not Before: Jun  4 17:08:44 2026 GMT
            Not After : Jun 11 17:08:44 2026 GMT
        Subject: CN=6a21b11c-bed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:d5:7a:5e:b6:2d:d5:2b:00:b0:68:3d:3e:
                    66:b8:0e:09:66:0c:fd:45:5d:04:b6:21:fe:5a:93:
                    8d:03:54:d6:a9:30:c4:22:62:ff:94:ab:a2:ef:cb:
                    50:6f:65:65:dc:da:5d:68:31:39:7a:50:6e:d3:f5:
                    a3:dd:ab:bb:35:cd:53:14:ff:73:a2:a7:e2:11:d3:
                    e8:12:49:9b:9a:35:37:a1:ee:d1:0c:d9:0b:3a:55:
                    29:76:46:d3:b6:66:4b:8f:4f:27:27:e0:25:9c:c8:
                    ca:db:3f:24:94:95:79:df:40:0c:c8:39:65:ce:99:
                    7e:a6:34:d5:1f:aa:cf:79:65:da:ee:d7:ac:c5:fb:
                    45:b0:fd:36:1e:be:97:8a:e1:89:c3:6d:1b:ec:ed:
                    24:8d:93:82:9b:18:c1:96:71:22:26:c5:db:9d:38:
                    1a:0c:bf:e8:ce:6f:3b:bb:37:ea:a7:27:d5:18:97:
                    56:59:43:8b:84:03:db:6f:ef:51:ef:4b:33:3f:07:
                    da:07:be:0a:68:b7:c8:c4:41:46:37:bc:89:7e:35:
                    e0:fd:db:ff:24:06:9d:f8:63:a8:55:af:06:4b:ce:
                    83:a4:f8:58:ec:17:b2:78:36:16:dd:68:bc:d5:96:
                    df:97:7c:ba:f8:9e:b6:0d:1d:e1:68:d1:60:73:00:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:49:0F:B8:FB:36:2D:85:D3:8B:DD:CB:2E:D5:F4:84:47:A3:C6:E3
            X509v3 Authority Key Identifier:
                keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4a:b5:fd:b4:e3:36:d6:98:b4:a4:28:e1:4c:81:d3:aa:7a:
         73:ae:70:85:0b:29:94:03:e5:3e:98:24:54:f6:9d:eb:dd:a1:
         3c:2b:16:97:6b:28:aa:96:23:81:50:08:e9:bd:ac:db:37:6b:
         ef:89:18:6f:56:0f:cb:47:ae:e5:4d:7a:ba:a6:00:bf:fd:08:
         c2:6e:dc:48:3a:95:aa:c1:f5:b8:cc:7b:aa:a3:34:f9:66:06:
         e5:f9:2c:44:6a:10:51:c5:0c:5a:ab:f0:b5:8f:c0:58:de:87:
         3b:9f:26:e5:a1:0a:7a:17:8e:69:6d:d5:a4:ec:69:6d:06:bc:
         4e:49:50:fd:f9:44:04:96:0d:39:14:c5:b2:92:3f:84:8d:b8:
         b3:ea:44:83:d2:2c:00:25:1e:b9:55:79:41:38:52:00:5b:11:
         68:e2:b7:16:75:0f:1d:97:4c:72:39:5f:f0:06:69:fd:d4:46:
         12:82:3f:3d:ce:44:b4:5d:21:08:df:b2:a0:1e:d4:6b:79:4f:
         50:3d:ba:06:89:9f:6d:dd:fc:fb:da:a1:1d:bd:50:6f:ae:b2:
         f2:73:77:82:98:68:82:61:e1:dd:2d:e0:15:e0:90:b1:43:9f:
         a9:40:e6:9c:70:c1:f6:38:9a:26:bb:6b:c6:58:fd:97:06:8a:
         ae:5f:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:56:20 2026 by rpki-client