Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
File:                     CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json)
Hash identifier:          d7nvV3OzZHOI5ux6oiWhGww6pm5yFwHqooEIXRHFCBo=
Subject key identifier:   D9:0B:AE:E0:A7:F2:F1:3D:B6:AD:9B:14:DE:F1:43:5A:2C:4B:27:BF
Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
Certificate issuer:       /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Certificate serial:       05C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
Manifest number:          05AD
Signing time:             Mon 22 Jun 2026 23:12:19 +0000
Manifest this update:     Mon 22 Jun 2026 23:12:19 +0000
Manifest next update:     Mon 29 Jun 2026 23:12:19 +0000
Files and hashes:         1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: jjSYD5ignBOcwrrO+USF42bdMmHc6R1K5TmlJLIE7Qo=)
                          2: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 6Zu4L1ezgqlBaAtZaZeJDXKxjpiSp79xQrfuVaBXNZ8=)
                          3: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: mFoBkWfLh0LGrOinTzXA38KoXXGaCtnMvz2q3N7gfu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472 (0x5c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
        Validity
            Not Before: Jun 22 23:12:19 2026 GMT
            Not After : Jun 29 23:12:19 2026 GMT
        Subject: CN=6a39c153-a6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:f1:14:61:3f:44:2b:15:8d:1e:ce:78:2e:
                    d3:11:9b:ed:65:d4:4d:35:34:db:f2:ac:88:12:01:
                    94:81:20:4b:71:e0:a8:7a:1c:f2:e4:eb:2d:8e:21:
                    85:0a:98:2d:73:87:1f:3a:61:ea:4b:fa:d2:b9:20:
                    ab:31:75:7e:36:31:c4:2b:53:b1:9b:a0:54:6c:44:
                    00:dd:ca:83:fa:d5:6d:50:ad:30:1b:63:54:01:e4:
                    e9:46:4a:4e:3b:b4:ec:91:d5:cf:24:e7:e7:3c:42:
                    81:5b:6a:ec:f4:17:14:ab:87:76:36:6a:5c:91:e4:
                    ba:03:9d:25:5e:ba:14:6c:9a:0e:54:83:1a:e5:4f:
                    a3:5a:84:12:06:45:9d:3c:62:a4:d4:27:72:a4:96:
                    17:6b:d0:cc:f4:dd:9c:9a:34:50:38:ff:ad:d4:7f:
                    7a:a1:1e:83:01:89:9d:1f:cf:94:34:af:0a:97:70:
                    8e:d6:8b:37:d6:94:96:de:3a:e4:03:2b:0d:17:6e:
                    a5:15:d9:29:30:e0:01:7c:2f:50:3d:bf:39:56:a3:
                    4f:d8:9f:0f:4a:6b:eb:82:b6:5f:00:0f:8b:79:a4:
                    94:ff:2b:34:b7:0a:5e:e6:3a:b0:81:e4:bb:bc:35:
                    0a:d3:4f:c4:da:50:0a:d4:7b:e7:f8:78:cb:71:af:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0B:AE:E0:A7:F2:F1:3D:B6:AD:9B:14:DE:F1:43:5A:2C:4B:27:BF
            X509v3 Authority Key Identifier:
                keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:40:fb:14:64:68:de:6d:f1:4d:10:ec:57:d2:28:50:0a:3d:
         5e:c1:35:3a:d3:08:d3:98:4e:00:11:c4:a3:3a:94:88:7e:1c:
         96:2b:7a:a8:08:8b:dc:84:de:ac:a3:5a:6d:63:70:13:f6:fb:
         51:e0:bf:ea:b1:92:46:38:a7:44:ba:c6:9f:f5:89:90:2b:35:
         dc:02:1b:ab:29:d1:89:90:87:78:a3:bb:0c:de:da:03:2a:b5:
         42:54:14:22:5e:d4:6e:7f:2d:70:61:2e:be:3e:ff:f9:65:f2:
         b5:1b:3d:0f:72:8a:d0:08:27:46:63:e1:f6:e1:b8:89:29:3b:
         7e:76:e7:6a:9f:ab:db:1b:7e:2d:f2:55:07:3a:d2:ae:fb:86:
         f1:0a:4a:93:d2:a9:71:df:23:5d:51:e9:96:b4:28:29:58:ce:
         91:00:4b:e7:18:ff:2a:56:84:ea:f6:63:ef:86:3e:46:6b:b0:
         84:e9:6c:0c:18:e4:0d:34:6f:d3:29:5f:b3:c4:c4:7c:e8:39:
         da:5a:09:c5:64:07:3d:3e:3d:54:ff:31:f0:b6:2d:b4:55:e8:
         3a:0c:73:65:c5:da:00:35:f3:31:ea:68:68:70:73:46:9c:b2:
         04:df:86:c7:f7:1e:4a:26:04:eb:2b:ec:44:26:8c:66:5c:85:
         8d:a3:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:56 2026 by rpki-client