Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File:                     ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier:          KUzk/FmYvOhjDRbo+B3sxCO3pvT9YXyJucLgHla4pUk=
Subject key identifier:   39:B1:D9:E9:E8:60:7F:DB:C7:FC:C4:6B:DF:AF:70:9C:C5:39:82:B5
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer:       /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number:          0164
Signing time:             Mon 01 Jun 2026 05:41:47 +0000
Manifest this update:     Mon 01 Jun 2026 05:41:47 +0000
Manifest next update:     Mon 08 Jun 2026 05:41:47 +0000
Files and hashes:         1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: zsSfas5BlWoTuUwV0pN0gP+Ej45YurV8VeYyoSxsOBY=)
                          2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: RzM5XYHpAe7uWEPFy0Uicf76LJbJuN++zhp1wy8rKjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
        Validity
            Not Before: Jun  1 05:41:47 2026 GMT
            Not After : Jun  8 05:41:47 2026 GMT
        Subject: CN=6a1d1b9b-4f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:ac:a4:4d:dd:54:a7:7b:24:b2:98:2c:9d:
                    e5:c4:5f:ec:d3:58:d5:bb:52:78:f3:ed:1a:1c:90:
                    53:c3:8b:96:92:9e:b9:6b:10:bc:86:30:4b:2e:07:
                    14:e9:b7:2e:6f:43:d4:49:34:93:df:35:b6:cd:72:
                    b5:e7:e4:8e:ae:ff:1f:d9:50:3e:a8:6e:67:72:20:
                    da:cd:7e:2e:3e:e0:d6:f5:13:de:6a:8b:26:97:96:
                    f8:af:94:6a:2c:be:97:9c:4d:1f:9c:c5:bb:c0:bd:
                    59:96:be:4c:7d:91:ed:c7:78:07:fe:be:2a:e5:b3:
                    5d:18:5c:0d:2e:27:42:2d:71:55:cb:79:1b:02:0f:
                    68:8c:ec:10:cf:5c:2f:32:08:3a:4e:a0:bd:ce:bd:
                    12:96:12:2c:66:4a:9f:52:18:b0:5b:f4:d6:2c:89:
                    be:83:24:a8:01:28:0d:10:8a:f6:61:1f:21:b6:21:
                    ad:6c:2e:72:09:69:ee:7d:61:f6:53:2b:ad:25:d7:
                    bf:95:9c:4a:89:ee:e0:3f:0f:62:ab:cd:09:9e:00:
                    4d:00:a4:ac:68:b6:8d:8b:6a:22:39:1c:da:05:3b:
                    c5:3f:8b:f2:66:03:03:48:46:a3:69:4e:ca:55:b2:
                    86:79:45:7c:ee:34:94:80:31:ac:80:2c:47:a1:96:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:D9:E9:E8:60:7F:DB:C7:FC:C4:6B:DF:AF:70:9C:C5:39:82:B5
            X509v3 Authority Key Identifier:
                keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:54:01:a3:07:0d:c6:3e:39:53:f1:18:b7:2a:95:15:70:80:
         33:b1:72:28:4f:c5:f5:dc:53:3d:9d:8a:5e:20:8f:b3:27:71:
         bc:3b:7a:22:e9:59:68:5c:8f:8d:04:67:ea:e2:54:b2:70:07:
         36:a4:74:93:84:b4:ce:a4:ec:11:72:07:42:80:c5:3b:11:20:
         8f:ca:43:e8:92:82:89:34:81:b1:49:1c:b5:48:12:94:b1:cc:
         2c:f1:0a:58:1e:4b:c0:45:2a:fc:8e:b0:74:32:25:1d:06:36:
         a0:22:31:75:df:da:aa:6f:96:81:53:b3:a7:54:40:cd:53:18:
         b0:28:22:c7:52:22:fb:20:df:64:fb:96:c7:9d:f3:01:34:1d:
         9a:36:12:09:43:ef:44:61:51:a0:a4:ba:56:41:cb:7b:65:92:
         6c:60:9d:2f:5b:3f:e7:75:d5:e4:b1:f3:3f:5b:87:7d:4f:8c:
         d8:c5:ee:ef:eb:40:e8:e1:8a:cd:b3:07:f3:4f:77:e2:fc:c5:
         b2:c5:ca:fd:03:7a:1a:73:56:3d:64:76:40:cd:a1:01:74:82:
         11:77:b2:24:d4:0e:16:05:95:fb:37:ee:41:a9:8c:54:a1:19:
         c9:2b:6f:75:5d:65:cb:1d:f4:c6:7b:54:3f:55:89:7d:05:f0:
         23:db:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:27 2026 by rpki-client