Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
File:                     h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json)
Hash identifier:          skBNNBC8YsdvIjEiSjXcPzMXA/Opt3wgt7+UJ+LzhUg=
Subject key identifier:   42:A3:45:AC:70:50:22:BD:6F:24:60:6C:F8:DF:6D:E8:D9:6A:12:61
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Certificate issuer:       /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
Manifest number:          015F
Signing time:             Fri 19 Jun 2026 05:07:42 +0000
Manifest this update:     Fri 19 Jun 2026 05:07:42 +0000
Manifest next update:     Fri 26 Jun 2026 05:07:42 +0000
Files and hashes:         1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: nkZ6lWH2zaBntBc/Q0ZloE7+CxdD1XHKO0vG1T5Yg4o=)
                          2: 2FAD450250E411F0A6B4892AC4F9AE02.roa (hash: 5FVZeeMmHHgD5LWgKUCAHIiyRLhCr4xloYA6n+HE21g=)
                          3: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (hash: LRGLmwGa2a/I5gvOrv+UPiIF3N2WlDmpx8kIsDZcKzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jun 2026 05:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
        Validity
            Not Before: Jun 19 05:07:42 2026 GMT
            Not After : Jun 26 05:07:42 2026 GMT
        Subject: CN=6a34ce9e-9bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:a3:e9:4a:8f:c9:79:1a:d2:f0:ee:7c:6a:
                    5a:69:91:75:1d:bb:d8:92:05:0c:2a:60:07:76:8c:
                    c9:35:e6:01:aa:e8:b9:d2:68:1f:59:2f:0b:8b:61:
                    a0:31:de:5e:31:2c:bd:4b:a2:42:9e:99:25:c7:4c:
                    a9:fe:b3:8e:5d:35:4c:3d:ff:f0:61:05:dd:18:7c:
                    54:f2:52:ac:99:58:ef:f2:3f:af:b5:a9:90:ff:b0:
                    ad:10:a4:b9:2d:a3:06:19:ae:56:36:bd:06:f5:94:
                    d7:3d:1e:65:35:4d:b9:23:ff:d5:1c:ff:8e:a1:d3:
                    61:6c:ea:0a:a9:e5:bd:3c:6f:f8:d7:b7:d5:f0:87:
                    9a:b2:de:6d:e7:aa:0d:84:c2:b8:76:59:79:47:eb:
                    46:d0:b5:b5:1b:b6:06:9a:37:5c:66:1c:85:bb:23:
                    60:57:6f:20:67:89:d2:c5:6f:00:14:1f:8d:41:33:
                    f9:f5:e0:16:dd:ea:ea:7b:45:cd:17:8f:6b:09:87:
                    cc:fa:c7:eb:2b:84:ba:46:24:c6:ae:87:29:b6:27:
                    e8:45:b3:2d:a5:50:1f:72:94:ab:37:37:36:e2:ec:
                    b8:1d:66:78:bf:de:20:84:44:cc:6d:0d:dd:7e:c9:
                    9e:08:f0:c5:d4:a1:97:03:a8:26:78:fe:9d:ff:48:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A3:45:AC:70:50:22:BD:6F:24:60:6C:F8:DF:6D:E8:D9:6A:12:61
            X509v3 Authority Key Identifier:
                keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ca:f0:00:a0:aa:0b:c6:f4:2a:85:41:06:6f:97:4e:ff:72:
         3b:58:e2:54:38:2c:bb:1e:44:de:d1:7e:19:09:dd:f1:4d:e0:
         e0:c7:1f:2e:00:fd:d0:d7:38:c4:96:34:f4:db:3a:04:a1:38:
         0f:0e:e6:8d:51:32:9c:ec:65:85:39:0d:18:17:91:ee:39:e5:
         33:d2:38:6c:f2:d7:22:09:8e:31:b2:73:70:a3:ca:fd:e6:73:
         0b:ef:81:f4:17:f6:19:23:e4:c8:bb:85:d2:ad:75:9c:f9:42:
         a9:82:74:44:2a:2e:33:47:6e:b6:77:13:e4:c3:a9:f8:fe:50:
         e9:cb:6d:56:9f:1b:01:1f:3d:de:d7:98:6f:d2:5f:fd:27:b1:
         8e:dc:63:be:05:0b:d2:76:17:67:4c:43:29:18:c8:1c:c9:de:
         e6:e3:62:b3:3e:c9:cf:ee:0e:a7:3b:dc:8d:e3:04:29:2a:7c:
         ad:be:66:45:c2:80:e8:9c:9e:18:93:46:4c:59:19:e8:a0:8e:
         a6:94:be:1b:cc:03:f9:b2:b6:6b:ea:cd:fc:aa:60:02:f5:40:
         65:c4:d1:e6:ee:04:bd:8a:de:2d:ae:ad:10:3e:bc:78:82:80:
         8a:12:af:78:ea:b4:34:d2:98:0a:90:dd:78:48:0a:9a:c9:f8:
         6c:74:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 05:12:38 2026 by rpki-client