Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
File:                     HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json)
Hash identifier:          msPVcgC1mf/DNFqF3O3u1ROThbkyfoy+SwAkXgTnV88=
Subject key identifier:   7A:A0:4F:40:DC:C2:9E:27:B3:44:FC:8F:28:36:E0:1F:47:1A:C4:9B
Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
Certificate issuer:       /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
Manifest number:          0134
Signing time:             Mon 01 Jun 2026 06:17:30 +0000
Manifest this update:     Mon 01 Jun 2026 06:17:29 +0000
Manifest next update:     Mon 08 Jun 2026 06:17:29 +0000
Files and hashes:         1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: KadjZWnmGpY6HH9r3Lbrsj/ccKhsJrLhAMN50t11JVo=)
                          2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: wRT9sM0qBqJTw3W+Zz9nGxaklW3kwpSgScv5I5RXTWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
                          rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
        Validity
            Not Before: Jun  1 06:17:29 2026 GMT
            Not After : Jun  8 06:17:29 2026 GMT
        Subject: CN=6a1d23fa-eae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:08:34:3f:7b:04:5a:1c:67:c8:60:8c:f2:
                    93:75:d2:96:95:0b:ce:4e:27:90:82:3c:e3:9f:ab:
                    32:00:37:ed:60:6b:15:59:0a:7c:1f:44:9f:79:7b:
                    52:f6:49:86:c1:76:79:60:c0:19:2e:2c:f7:c2:6a:
                    97:c2:42:07:3f:6d:9a:8a:8f:3a:a8:29:bb:2f:47:
                    3f:3e:32:af:3b:21:7b:77:73:3f:ee:18:25:38:ce:
                    40:4c:37:25:83:bb:ab:bc:61:af:2f:89:a1:66:c9:
                    32:1f:5c:7e:cb:5f:5b:b6:29:05:4d:b2:7a:2e:ae:
                    03:ff:de:15:ef:dd:2e:d5:d1:9b:2d:cc:6a:35:1d:
                    16:81:1c:59:c5:54:41:99:08:18:8c:e9:fc:74:e4:
                    d2:aa:f9:d1:aa:60:18:e8:11:aa:7d:00:e6:ae:2b:
                    52:ec:4e:ba:16:43:c8:fe:7b:31:b7:10:f2:d0:42:
                    28:6d:63:57:2f:dc:d6:78:17:59:93:92:61:41:9c:
                    f7:51:33:17:a9:c9:02:08:10:07:57:2c:2d:d3:f5:
                    3c:40:b0:13:79:d4:e7:78:f3:a9:e6:1d:78:20:67:
                    8a:28:2a:67:f9:4f:15:83:6a:d4:51:37:37:2d:ff:
                    78:97:46:f3:e0:39:1e:6f:84:bd:9f:a7:7f:4e:0e:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A0:4F:40:DC:C2:9E:27:B3:44:FC:8F:28:36:E0:1F:47:1A:C4:9B
            X509v3 Authority Key Identifier:
                keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:58:c4:93:9f:5a:80:a0:73:5f:5a:db:88:94:57:32:74:
         34:58:26:a8:60:38:72:1c:35:aa:82:df:2d:cb:dc:e0:9e:51:
         c1:38:dd:7b:01:df:c2:e7:f0:1f:c2:5c:99:86:54:41:27:66:
         15:cc:50:03:10:c2:77:2c:5f:27:46:09:d4:f3:d9:37:43:f3:
         8c:39:f8:ec:d2:5b:4f:c6:42:19:f9:fd:74:34:b1:e2:17:f2:
         ad:28:6b:38:5a:1c:e4:6e:f0:0d:79:75:c7:af:c1:5b:9b:3d:
         fd:1e:bc:a6:e5:f1:c4:27:5c:04:5d:1a:1c:c7:f5:f4:b0:16:
         d3:c9:8d:b6:40:88:6b:79:5e:62:70:b0:b4:45:a4:ab:08:09:
         b8:5f:46:8c:4a:6b:92:30:e9:0c:a6:c1:19:41:a6:3a:0e:18:
         a3:63:3a:bc:e4:85:87:af:56:18:a1:f9:cb:4d:01:c5:8d:15:
         65:71:2e:cd:e4:91:22:0e:fe:90:81:14:55:01:9e:dc:44:52:
         ec:42:6f:bb:d4:f6:4e:d6:1c:1c:5c:c2:ce:ee:d1:f8:63:de:
         71:fd:36:f0:e0:52:eb:7f:9d:30:14:7a:3c:d8:7e:7c:22:43:
         d6:b9:9c:56:9a:d1:58:ff:78:34:41:3b:c0:65:06:89:0e:e0:
         99:2e:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:24 2026 by rpki-client