Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
File:                     JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json)
Hash identifier:          xppWcLTkL41m+fyhU+uoDe2dYU1tKYpIR7Fu/MEoBz4=
Subject key identifier:   7B:DA:50:81:7B:66:9A:6A:D3:A5:95:10:2A:99:FD:43:86:4C:2B:69
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Certificate issuer:       /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
Manifest number:          01D1
Signing time:             Mon 01 Jun 2026 04:27:19 +0000
Manifest this update:     Mon 01 Jun 2026 04:27:19 +0000
Manifest next update:     Mon 08 Jun 2026 04:27:19 +0000
Files and hashes:         1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: wByGoQHUl9IqNA96il0jalBPIKKN97spNzokGq1vB+A=)
                          2: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: UpXQLmw7cYNYgQoy2FdAYqD1shDQWt+tw0L6PWQgH4Y=)
                          3: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: 4YSK+iaPKx3acIazhk09lsImhU6+yUHomcj+4pCQSC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
                          rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
        Validity
            Not Before: Jun  1 04:27:19 2026 GMT
            Not After : Jun  8 04:27:19 2026 GMT
        Subject: CN=6a1d0a27-3f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:c4:f6:e4:3c:df:d3:d6:48:15:f5:af:09:
                    6e:99:24:72:62:a3:f3:56:2c:67:8c:d0:e4:9b:82:
                    25:7f:60:e8:dc:30:3c:97:0f:c6:c0:27:3d:04:f6:
                    3a:58:8c:f3:46:3a:7a:38:45:78:5c:36:64:3d:b1:
                    e5:b8:43:07:dd:37:44:5b:a9:5e:09:0a:4d:14:a8:
                    16:9d:bb:32:57:2d:1a:52:c0:fc:1c:bb:17:a4:e9:
                    84:e7:dd:c5:18:81:68:0b:ac:35:e8:cb:5d:ab:62:
                    9a:e8:8c:98:44:b1:91:cd:9d:ba:16:26:0d:26:de:
                    8c:ab:fb:86:2a:d6:c8:c6:c8:b0:53:d4:7c:74:c8:
                    f9:2d:97:a0:b3:ed:74:9c:10:bb:fb:dc:03:58:63:
                    ce:ff:dd:01:f4:05:51:05:90:3b:12:8a:46:8a:9a:
                    ba:8a:bb:5b:a9:f0:d7:6e:a4:9e:f6:fd:6f:1b:3d:
                    1d:cb:ff:bf:c5:1e:96:17:36:ca:03:a3:8b:a0:80:
                    f2:36:98:71:10:fe:34:28:2d:f1:28:2e:61:7e:e5:
                    9a:e9:44:49:ef:da:58:7b:64:25:5e:f2:cd:35:54:
                    cc:c9:10:93:5f:5c:35:0a:3a:2a:ea:b6:63:b3:ff:
                    df:15:68:e8:8e:6f:00:5b:dc:32:11:8a:45:1b:ec:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DA:50:81:7B:66:9A:6A:D3:A5:95:10:2A:99:FD:43:86:4C:2B:69
            X509v3 Authority Key Identifier:
                keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:67:1d:70:0d:4f:91:b4:2b:76:7e:47:5c:69:ce:86:51:
         fe:8e:9b:eb:0b:17:ed:a8:86:a6:29:07:d2:0a:b3:96:fb:3f:
         c2:e2:0c:9b:f8:84:bd:4f:1e:5c:ba:dd:bc:2b:47:d9:df:19:
         5a:59:48:47:71:0e:31:53:c6:74:e3:56:7a:10:9e:96:28:5b:
         27:1e:a9:dd:52:9e:0e:01:e1:92:aa:0e:d8:74:cc:12:04:c3:
         d8:ba:72:14:d0:f3:aa:f1:57:00:a2:0f:25:e3:12:34:92:08:
         93:aa:8b:a5:06:89:3c:15:17:5c:aa:4d:ae:6a:eb:fa:7b:b4:
         cb:1d:11:80:2a:80:af:b1:6a:02:ec:3a:34:2d:6b:cc:09:fa:
         1d:c6:dd:74:67:8e:6a:0b:a8:f1:be:fb:da:fd:73:61:bb:a5:
         fc:cb:f8:ab:5c:31:70:18:9c:b8:51:68:e8:59:f5:3e:aa:f1:
         68:05:7f:1e:21:b7:fd:90:41:6c:23:79:07:98:dd:82:58:6f:
         81:dd:32:35:72:f3:01:f1:16:ca:ab:d2:e4:c0:83:6c:18:db:
         e4:c8:d8:c4:9e:9a:cb:c0:42:1e:03:01:9d:d4:23:3f:9b:c3:
         c4:d0:61:90:d9:42:8f:7b:d7:e3:7e:ca:33:e9:68:84:0a:aa:
         e7:73:02:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:54 2026 by rpki-client