Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File:                     mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier:          FaHfV9k2Q5AgzxUlfDi939+VVO+ZbINXUDNUuxPEFjk=
Subject key identifier:   3B:67:31:D5:9F:7C:A3:35:E0:3C:8E:83:67:B6:20:A9:39:9A:5E:53
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer:       /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial:       079A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number:          0789
Signing time:             Thu 04 Jun 2026 21:38:35 +0000
Manifest this update:     Thu 04 Jun 2026 21:38:34 +0000
Manifest next update:     Thu 11 Jun 2026 21:38:34 +0000
Files and hashes:         1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: xJwelHMHOwFJdb1CkhhsnupAElt3c+i8y8ZgJsSu0Z4=)
                          2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
                          3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 21:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
        Validity
            Not Before: Jun  4 21:38:34 2026 GMT
            Not After : Jun 11 21:38:34 2026 GMT
        Subject: CN=6a21f05a-8925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:52:63:0e:f6:09:19:5c:cc:6b:3f:80:91:
                    d8:1e:b7:2b:50:ac:ae:71:74:e0:e0:bb:74:56:66:
                    a7:87:a3:89:9d:33:60:60:76:b4:4d:9b:85:9e:a5:
                    79:f3:82:2c:62:ad:73:3a:35:fe:a8:e3:3f:ab:9a:
                    b8:6b:03:17:50:9a:a3:ca:cf:66:c0:32:da:57:d1:
                    16:8c:a9:56:05:9a:6e:e4:15:54:0d:6e:be:f4:f3:
                    a0:6b:b3:4e:95:9e:7b:82:7f:7e:3f:a0:ef:df:80:
                    ee:f2:29:ea:88:88:f2:84:2e:76:49:d1:92:ab:28:
                    3e:1a:ac:98:2e:26:da:45:3c:59:a7:00:8c:91:f9:
                    7c:59:3b:89:97:e3:20:7c:7f:b7:38:88:bd:34:dd:
                    b5:97:01:7a:28:e9:3e:49:1d:f6:21:49:43:6a:8c:
                    ca:9c:2c:94:75:69:5b:a6:25:05:e2:b4:87:dd:a7:
                    76:d9:eb:d3:ed:aa:54:75:5d:a2:aa:06:2e:b8:72:
                    97:c5:04:6a:cd:ec:f4:9e:33:de:04:2e:15:b0:11:
                    1f:1f:fc:d4:6d:b8:81:31:9c:1b:ab:49:34:35:e3:
                    30:80:77:06:c4:28:b6:a9:fc:72:46:87:26:92:8d:
                    03:dc:94:03:32:e8:f2:7c:36:e0:0c:a3:04:59:f7:
                    46:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:67:31:D5:9F:7C:A3:35:E0:3C:8E:83:67:B6:20:A9:39:9A:5E:53
            X509v3 Authority Key Identifier:
                keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:dc:b0:cf:c3:48:9d:8b:29:c4:89:78:69:8e:bf:28:01:
         73:0a:de:ce:35:5f:b6:3c:c9:5c:6b:23:d4:5a:02:cd:28:59:
         c3:33:15:47:26:d2:75:fb:a5:90:c5:e1:01:2b:cc:fb:9c:64:
         9a:98:2e:bb:9a:f1:45:19:bf:49:6e:41:31:56:28:64:0d:52:
         d0:35:a2:93:13:50:11:9e:27:cd:bf:11:42:15:8a:07:71:f8:
         fc:61:6d:17:31:08:10:b6:a8:36:80:a8:17:81:a9:d3:2f:d9:
         13:46:3d:f3:d2:93:8c:56:19:b9:ab:5e:42:99:ef:4c:d0:11:
         3e:02:13:a4:50:a3:65:bd:7a:e6:84:d8:6d:3b:95:79:9a:78:
         84:cc:61:2b:b4:4c:90:41:cc:a9:79:1f:31:61:1c:34:ba:71:
         9f:6c:ed:0c:c0:62:8a:57:eb:a9:13:80:89:55:7d:b4:1b:46:
         c5:f5:b0:67:e3:9e:e9:d6:40:11:5f:b5:fb:4f:cf:20:06:d2:
         40:8a:56:44:34:21:84:c8:5a:a4:6f:fb:f9:80:01:81:e6:72:
         ea:5f:42:ec:a1:66:ad:bc:80:7e:a5:cd:2a:1a:59:20:df:cb:
         58:94:07:ab:49:a4:88:11:ae:7e:c2:1b:ab:d3:73:f1:b5:56:
         8e:d4:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:10 2026 by rpki-client