Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File:                     Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier:          F2ooIQ2ckCG7FG6/aW8yQwqeBXmzZ1N31B13IdICc2o=
Subject key identifier:   E6:39:00:AB:B1:56:A9:DB:B2:10:6C:A7:7A:10:07:64:72:A0:18:E5
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       0674
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number:          0651
Signing time:             Sat 20 Jun 2026 22:39:13 +0000
Manifest this update:     Sat 20 Jun 2026 22:39:13 +0000
Manifest next update:     Sat 27 Jun 2026 22:39:13 +0000
Files and hashes:         1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: jK+NUECepl5P87QOsAIosXtammqZH6Xt26Gyjo/4wus=)
                          2: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: KQTVz0e1Zb1iLnhg7VrsR+eEdauEprxEm/t9De3WuEM=)
                          3: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: lxgbG6pkkYFXzxOLVtY4sU1vaYpcUs17yViYyAj/L48=)
                          4: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: ebYT6JMp2+FGCLF90hH2BoNKGZH2g9kCtxGailuH/cQ=)
                          5: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: fWQraDGwJwPV67yFDAv4Z9YVrJg/aZyI/SUeFYf35jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Jun 2026 22:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Jun 20 22:39:13 2026 GMT
            Not After : Jun 27 22:39:13 2026 GMT
        Subject: CN=6a371691-d6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:cb:d4:69:19:8f:e0:48:ac:d8:5b:49:35:
                    11:26:9b:5b:b9:c5:0b:ae:d9:50:3d:7e:6a:d5:af:
                    f0:45:8d:83:52:5f:c3:af:19:bf:db:7f:ff:cf:5c:
                    7d:98:71:14:56:4b:2d:43:fc:fa:4e:cf:d3:23:73:
                    01:0c:3c:e3:0c:b5:7d:91:a7:34:64:1e:b3:b4:1e:
                    80:57:d3:d3:bd:fb:93:b1:b5:69:f8:af:1c:ea:2e:
                    42:46:14:21:7a:a1:62:88:b3:2b:88:38:5e:7d:00:
                    c1:3d:2d:b9:9b:f3:c8:bb:db:38:b4:d9:46:67:b2:
                    59:76:6a:63:6e:89:56:25:b3:02:92:c3:af:ba:b3:
                    4d:1e:58:ba:0b:d5:cf:71:67:54:dd:b7:47:5d:1c:
                    04:e5:d3:ad:3f:a8:f9:96:1c:8e:58:dd:24:6f:0a:
                    e9:20:14:54:48:2b:64:7e:a2:00:fa:19:69:b4:cf:
                    8d:3b:57:32:19:0b:69:41:ee:60:6f:be:0d:f4:94:
                    21:71:90:ec:af:a8:e4:fb:42:3f:40:22:dd:52:e9:
                    d1:74:11:a9:c9:b7:08:bd:57:e5:13:5e:5b:b8:b3:
                    e8:8e:f1:33:a0:a6:90:25:47:50:6e:a4:94:dd:83:
                    c1:15:e1:70:42:49:c3:c0:a3:02:90:55:76:d5:af:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:00:AB:B1:56:A9:DB:B2:10:6C:A7:7A:10:07:64:72:A0:18:E5
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8e:39:84:5b:40:96:c2:14:3a:17:80:1a:c8:80:56:19:67:
         a0:f3:1e:b0:46:8c:83:63:4a:bb:b9:1d:63:09:6f:2b:da:ea:
         fc:76:bd:cb:5b:62:89:8e:80:48:aa:0c:da:3e:ee:8e:09:99:
         ba:74:f6:12:11:d9:e4:65:8e:7d:ef:5b:be:6c:84:74:87:34:
         9e:99:7d:d7:ef:1c:34:96:8f:7a:46:b0:e7:f1:cf:66:0b:c6:
         40:95:44:d4:75:c4:b6:14:e5:5b:9c:31:46:a5:e8:18:2b:19:
         57:25:4c:83:20:de:f4:8f:19:d5:a5:3b:ab:83:16:3e:19:fd:
         59:6e:c4:17:b6:c6:14:08:8e:7b:de:54:3e:0c:08:53:2f:a0:
         2c:f7:f0:c1:79:c8:e9:d0:63:6f:ec:c1:19:d9:98:79:57:fb:
         a9:68:d5:3c:0d:10:eb:42:52:d7:96:3a:26:66:09:4c:40:db:
         8f:f5:d9:46:57:e5:65:20:94:f7:56:77:2e:4d:37:86:3c:91:
         74:c1:4c:5e:93:0d:65:4a:ca:a7:1b:e8:98:42:83:65:b5:ae:
         d5:78:f7:02:f7:ba:ae:97:e8:11:f4:6f:c4:0a:05:0c:88:ad:
         87:53:cc:81:8e:7c:be:b2:7e:23:bd:fc:bb:e0:7a:c9:93:1f:
         4a:f0:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 11:45:32 2026 by rpki-client