Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File:                     gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier:          BJyAF5ac1nQq5v3mN4HXOqSXdL8ccV6Qz8jVFrtVzRI=
Subject key identifier:   77:60:04:B9:5E:43:B8:78:95:8E:D8:C5:51:6B:37:33:5B:79:8A:8F
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer:       /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number:          0161
Signing time:             Mon 01 Jun 2026 05:43:53 +0000
Manifest this update:     Mon 01 Jun 2026 05:43:52 +0000
Manifest next update:     Mon 08 Jun 2026 05:43:52 +0000
Files and hashes:         1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: T/EEfqo24UgQS6TdvKoseN0GW6yDpVu0IASaRMKzD2w=)
                          2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: K4s4bQ+AZEMbINRSOhh8kAqaJQUKtCHKATxaJcI+fSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
        Validity
            Not Before: Jun  1 05:43:52 2026 GMT
            Not After : Jun  8 05:43:52 2026 GMT
        Subject: CN=6a1d1c19-b471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:27:4c:96:1c:a6:15:2a:ee:76:7e:95:cd:
                    c1:79:0f:ec:e6:d0:cf:47:23:34:52:db:37:08:9d:
                    a1:c8:fc:51:d2:c6:1d:e5:c2:c3:f9:57:18:16:c0:
                    80:89:df:d2:9f:ab:b7:13:25:10:01:c9:7c:3d:a7:
                    50:78:0a:57:80:b5:e8:8b:85:a3:a8:05:50:1e:81:
                    93:8e:e9:7c:b1:dc:c2:eb:d7:8b:6e:22:00:5b:ae:
                    34:13:fd:6b:97:5a:1b:54:97:de:f7:e3:a5:5f:32:
                    f0:a7:33:09:8c:1b:f4:52:59:6e:34:8e:aa:c4:ab:
                    1c:74:b4:75:9b:88:e3:d0:6d:5b:0c:57:da:74:92:
                    60:17:cc:59:b9:0a:78:a2:d4:cf:a1:51:05:9a:2d:
                    b8:c7:f8:0c:7f:d1:36:75:98:5a:46:24:d6:30:30:
                    68:5f:b2:f8:e2:ed:31:47:8d:1b:26:2b:7a:6c:2a:
                    dd:d6:cb:a8:56:90:03:fd:87:fe:00:ab:d5:21:33:
                    61:6c:e6:4f:44:a5:bd:78:5c:c2:20:9e:3f:93:b4:
                    fa:4d:53:90:8c:d5:95:46:35:48:00:e1:1b:7d:a5:
                    f7:29:74:5c:5e:bf:a5:0e:f2:b7:d6:25:33:2f:ce:
                    72:56:e4:8d:06:67:0f:ed:bc:ce:ae:61:b1:28:0d:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:60:04:B9:5E:43:B8:78:95:8E:D8:C5:51:6B:37:33:5B:79:8A:8F
            X509v3 Authority Key Identifier:
                keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:14:ba:df:1e:6a:9b:e4:0d:13:78:bf:3f:f0:a2:61:08:cb:
         c6:6e:32:27:f8:5d:7b:c8:ab:7e:7c:07:ad:4a:94:48:f8:47:
         62:67:d6:53:59:b4:15:ee:6e:ac:bc:1e:da:d5:0a:a3:23:a0:
         8b:08:dc:7d:d2:4a:bd:41:8f:bb:36:54:b0:6d:c2:73:68:03:
         96:46:84:d2:54:a5:a0:5a:bb:c5:e6:a6:78:5c:16:7f:7c:93:
         05:07:c3:b2:49:6e:5a:c5:46:f2:83:e9:9f:bf:78:9c:ce:b8:
         54:9f:1c:ac:79:43:6e:65:bb:62:25:a7:34:8d:c9:84:cd:b2:
         fd:5c:c0:1b:7a:94:78:ff:70:1c:62:40:66:d1:b3:09:2a:0b:
         1f:21:c7:0a:3e:2c:4c:e1:99:91:3e:62:0f:8f:07:34:28:b7:
         b0:eb:42:cf:3b:e7:c8:7f:9b:aa:47:77:c8:88:f9:71:a1:6b:
         ff:49:e6:c4:a0:3f:f4:3c:c2:65:98:39:a2:b6:72:a0:e2:a5:
         03:95:e2:93:4c:df:d8:f8:06:4e:0c:4a:1c:3f:97:f6:87:61:
         3b:b9:1c:80:d3:8e:4b:2b:e9:96:66:2b:26:f7:cd:b9:11:d7:
         ad:30:19:9e:92:39:d5:01:d5:aa:2d:5e:ef:d9:fa:6b:48:28:
         81:2a:d2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:23 2026 by rpki-client