Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
File:                     RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json)
Hash identifier:          w2fmzA+lHNnDpqdC/Oq4VWcVVAQAiB46VLvtO2SLtKg=
Subject key identifier:   6B:AF:1B:D9:11:02:A8:9C:0D:48:C5:BB:82:EA:8A:FD:1F:7A:5F:AF
Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
Certificate issuer:       /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
Manifest number:          01C5
Signing time:             Tue 02 Jun 2026 14:52:34 +0000
Manifest this update:     Tue 02 Jun 2026 14:52:34 +0000
Manifest next update:     Tue 09 Jun 2026 14:52:34 +0000
Files and hashes:         1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: s0YX22oOsW0glMCGselhnCIMfLXT9Rn6ZUf7bgCUP+o=)
                          2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: QreKN0Rd5UfNyWwEd5SMYjaTfZ6J0wKhOlda79WX3co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 14:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
        Validity
            Not Before: Jun  2 14:52:34 2026 GMT
            Not After : Jun  9 14:52:34 2026 GMT
        Subject: CN=6a1eee32-89a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:ab:d9:9f:88:84:43:91:7d:c5:d6:12:38:
                    0d:c1:93:ed:c0:f3:4e:e2:cf:a2:27:07:73:54:52:
                    dd:b0:c9:ba:f3:a2:f7:b6:3d:ca:25:ba:9f:ab:c6:
                    91:14:fb:f9:8a:45:be:b3:af:f7:03:f2:cf:ef:ab:
                    3e:a7:2a:2f:58:f6:fe:19:15:04:20:00:77:2a:c6:
                    54:b0:38:bd:1f:cc:d1:d2:e2:43:92:c4:e7:5e:cf:
                    40:82:16:9a:25:7d:21:ee:2d:7c:8a:91:d4:80:a7:
                    1f:1b:fe:63:96:9c:bd:00:32:d5:e4:af:0a:d7:c9:
                    fb:34:6a:05:d5:4d:a6:ad:29:6e:25:76:d8:3d:70:
                    33:50:6b:0d:6e:3e:a9:85:42:1b:09:8a:9f:32:54:
                    27:63:45:b6:37:2b:6e:86:3c:60:2f:b8:88:d1:42:
                    5e:78:29:05:ae:08:22:61:07:b1:e1:dd:50:bd:35:
                    ac:a7:f4:1d:68:01:1b:a8:d8:ea:b8:29:fe:ac:b5:
                    50:47:a8:14:96:d5:ae:37:b4:28:8b:68:b9:2d:19:
                    a8:82:0f:e1:43:37:61:b8:ed:e5:03:c4:1d:4a:a2:
                    e8:9f:95:d9:fb:29:de:e6:23:28:ec:15:4d:ae:e0:
                    98:a1:cf:c5:66:8f:4d:80:41:48:50:3d:2e:8e:d0:
                    ba:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AF:1B:D9:11:02:A8:9C:0D:48:C5:BB:82:EA:8A:FD:1F:7A:5F:AF
            X509v3 Authority Key Identifier:
                keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:db:aa:40:a2:17:d1:ad:39:da:f2:0d:14:51:b0:f3:97:
         22:b5:63:5c:4f:f6:cc:d2:02:de:cb:47:83:60:72:38:7f:90:
         7c:2c:97:b9:58:fd:81:70:97:e9:3d:7c:eb:c2:f1:4b:62:43:
         b2:f8:4a:b1:2a:c2:11:ea:2a:ad:ce:f4:af:dd:36:8f:44:f0:
         64:92:e3:46:53:11:bc:2f:41:06:a1:a4:8e:bb:34:73:9a:61:
         4e:5e:d8:71:7a:5b:cc:92:4f:4c:fb:eb:06:07:0d:a9:e5:fb:
         4c:0b:8b:c8:f1:2d:2a:b2:a5:15:6d:64:2d:30:33:b6:55:f6:
         5e:6a:1f:5e:33:8c:f6:bc:55:21:88:d4:7c:01:62:5e:0a:55:
         57:b5:20:7e:07:b4:41:c4:24:ba:88:0c:6b:d0:e4:c7:6d:3f:
         f9:4c:90:71:89:b3:17:f1:93:53:e3:25:24:9c:56:5c:d5:30:
         25:66:e6:1f:51:c0:36:59:ae:cd:c1:24:03:86:cd:f7:c2:f2:
         13:76:cb:67:87:4d:5e:ef:30:04:83:47:df:dc:ff:bb:63:7f:
         dc:c4:15:b5:db:4d:ab:50:da:bf:96:ed:08:da:8e:3f:36:35:
         f7:e5:3e:bd:ec:fc:24:6f:50:39:fe:c0:04:6a:b8:d7:48:39:
         0e:23:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:45 2026 by rpki-client