Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
File:                     CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json)
Hash identifier:          +BfXEEbMMRsq+3rfPZ9YJH1/T+HacTJdIJeLoSOCdd8=
Subject key identifier:   A4:CA:9E:26:51:48:D5:02:5C:19:8B:6C:22:3F:CB:39:F5:39:10:8A
Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
Certificate issuer:       /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
Manifest number:          014C
Signing time:             Mon 01 Jun 2026 05:57:35 +0000
Manifest this update:     Mon 01 Jun 2026 05:57:35 +0000
Manifest next update:     Mon 08 Jun 2026 05:57:35 +0000
Files and hashes:         1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: rX3/4GKS1tGuRXmXwUYnUZu/5LzLDV1agLiaonzHScw=)
                          2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: Cz53IM9XrwFo5eiOhKbMpefJ/4LPJaT0jFu6dU8OhL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
        Validity
            Not Before: Jun  1 05:57:35 2026 GMT
            Not After : Jun  8 05:57:35 2026 GMT
        Subject: CN=6a1d1f4f-0ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:f1:d6:fb:a7:e0:74:b4:a1:43:9a:2c:a0:
                    aa:2b:51:70:9f:ab:69:2b:5e:cc:09:ea:19:68:1a:
                    3d:75:d3:11:69:de:bf:7c:24:de:3e:9a:87:99:67:
                    b9:de:dc:99:e8:71:82:9b:65:38:3f:ef:5f:81:24:
                    22:c3:39:91:1c:60:bf:f2:91:ec:2b:e6:c8:b6:28:
                    c5:e6:07:e7:37:63:5b:d4:12:91:41:c3:7d:e9:8e:
                    53:0b:ed:dd:d0:7b:64:a1:43:38:46:9a:18:29:e8:
                    06:9a:65:65:e2:15:68:cd:ed:2e:98:c1:92:10:ac:
                    2c:ed:6a:9a:00:fa:cd:72:a8:73:ba:34:20:c4:32:
                    34:c8:22:5d:85:b5:88:74:0c:b7:fa:1e:13:9e:c9:
                    b4:d3:af:e5:5e:87:7d:73:8c:39:53:d3:e5:df:c4:
                    e8:94:d4:8a:14:0a:18:14:72:a2:53:0c:0d:13:e9:
                    b3:f5:38:a6:5c:b4:b1:9c:69:4c:e8:a0:3c:d9:4d:
                    da:f3:36:a5:2a:14:55:b6:fe:98:21:1b:2f:86:29:
                    57:30:ce:e3:8f:9f:47:ff:33:6c:b3:4a:f9:fc:c9:
                    e8:28:8a:85:e4:d7:1e:1a:5c:88:a8:d3:9b:5f:f0:
                    9d:bc:7b:5b:ef:12:8a:0f:c5:7a:0a:b9:e7:bc:49:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CA:9E:26:51:48:D5:02:5C:19:8B:6C:22:3F:CB:39:F5:39:10:8A
            X509v3 Authority Key Identifier:
                keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:82:03:d6:88:f8:b3:2c:bb:a3:95:9a:18:22:b0:e8:7a:3c:
         db:d5:91:e4:e8:2c:a4:31:50:0b:d1:04:49:a6:98:16:fa:01:
         21:a3:45:3b:7a:10:c4:23:55:a2:b1:c7:54:59:dd:cb:7d:9f:
         07:b8:f2:f7:03:a7:66:b7:b0:9b:e2:53:f7:f9:18:d8:29:27:
         ce:5e:91:bf:12:80:3e:e4:3a:a7:d8:a4:74:82:24:37:bd:76:
         5a:a3:b2:08:ac:bb:0b:78:d2:c4:c7:6f:e6:1a:2e:cb:c4:25:
         f0:65:5c:54:a1:40:76:4e:42:72:49:df:f3:42:09:a9:6c:3e:
         59:7a:ce:f7:2e:60:95:f2:c9:ce:29:12:df:4b:13:0f:7a:bb:
         21:20:41:7e:2e:51:e8:6c:5f:5c:b0:d7:c7:07:81:89:c7:2d:
         36:33:f9:53:2c:8b:6e:35:cf:a6:7b:78:28:8b:96:8f:5c:e2:
         19:2f:ec:59:c0:66:6e:82:01:59:47:78:8a:20:ee:5d:f8:b6:
         62:9a:b5:fd:b4:46:44:dc:7d:f4:32:d3:67:c9:db:ae:51:f9:
         65:14:37:12:b4:42:42:e3:51:b0:e9:07:9d:7f:10:be:af:81:
         d4:7f:46:22:bf:9e:f7:fe:18:95:ae:6a:a4:f0:d6:ee:13:36:
         a3:03:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:47 2026 by rpki-client