Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File:                     77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier:          y+dPhl5mbGaisnMGDGrMLaG56qpB4sIMhTNZQOrIa8c=
Subject key identifier:   F1:A6:16:AB:C3:B4:A2:72:42:08:E4:86:B0:32:5D:2E:89:14:11:3C
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer:       /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial:       0CEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number:          0CE1
Signing time:             Mon 22 Jun 2026 18:23:59 +0000
Manifest this update:     Mon 22 Jun 2026 18:23:59 +0000
Manifest next update:     Mon 29 Jun 2026 18:23:59 +0000
Files and hashes:         1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: gmBZ1KMhClZdP1x02prClKiG2YAZJYIS+i2LhxdMNEk=)
                          2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: lK8WYlW/sGNnnRMcLOEhnAiWj1a7xDPNyjs1znIbG8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
                          rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3307 (0xceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
        Validity
            Not Before: Jun 22 18:23:59 2026 GMT
            Not After : Jun 29 18:23:59 2026 GMT
        Subject: CN=6a397dbf-3705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ee:2c:20:83:f8:1c:32:1a:42:54:47:92:1e:
                    f6:9f:60:56:22:d6:e7:cd:38:9e:c8:17:c7:79:09:
                    80:d2:41:ab:eb:22:af:10:82:57:fd:bb:31:2a:f8:
                    e5:67:76:bf:f0:a6:92:48:6f:65:55:16:52:51:42:
                    d3:b5:f4:64:5e:a5:08:c0:ac:ca:7a:98:ec:2f:48:
                    7f:16:83:e3:9c:65:66:f7:ec:e4:63:27:80:cf:7a:
                    0f:97:f9:85:b1:bb:78:85:5c:bc:38:9c:37:33:00:
                    ae:e9:06:c8:ea:e9:bd:71:47:41:da:b6:55:d7:a4:
                    a9:71:bf:a6:3d:e3:5f:94:73:c6:9c:b5:1f:e7:7b:
                    f9:24:28:17:09:5f:a7:ca:b8:11:2e:d0:8c:19:b0:
                    48:b6:81:bd:f0:57:3c:65:ad:69:6b:3b:85:43:da:
                    af:4e:3e:ac:29:96:3f:cb:fa:83:03:9e:f3:78:71:
                    a5:bb:e2:0d:cd:11:a8:7e:2b:bc:28:81:6e:2b:fc:
                    74:e1:25:d2:be:0b:7b:c3:ce:7f:70:d8:21:77:7d:
                    9f:f9:62:9c:22:95:c0:d1:c6:20:b4:23:98:15:d2:
                    13:20:a3:65:ae:de:47:7e:2a:9a:a9:6c:87:47:59:
                    36:df:1d:d3:fc:af:7d:cb:c6:01:df:98:b0:0c:50:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A6:16:AB:C3:B4:A2:72:42:08:E4:86:B0:32:5D:2E:89:14:11:3C
            X509v3 Authority Key Identifier:
                keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:80:41:7a:bf:2d:7a:55:56:c4:83:9f:65:c7:75:17:c6:
         09:c4:16:81:8d:38:7f:76:be:98:49:1e:53:10:dd:5b:55:02:
         7c:24:05:d6:4a:b8:6c:78:0c:bd:69:75:6d:a3:c8:88:97:29:
         f4:b3:dd:c6:0e:9f:ae:54:b9:cb:dd:70:b1:87:af:36:51:57:
         50:b9:76:c6:27:2a:da:ed:97:b1:bc:4e:1e:5a:5d:4b:8c:00:
         ba:f1:ce:2f:20:45:16:f6:aa:d7:c7:77:d3:5d:30:34:d8:74:
         5b:f4:45:16:ab:d5:cb:49:51:94:05:4f:b3:7e:6b:33:eb:d0:
         29:99:97:ad:ff:33:54:a6:fd:9e:70:55:41:09:12:65:5d:16:
         92:1e:1f:82:29:ee:2b:a4:6a:3f:8d:d4:c2:4b:8d:ee:60:17:
         84:3c:c1:0b:87:f0:61:fb:c9:3c:ba:dd:c9:81:40:e9:60:b5:
         df:dd:f3:10:36:1e:87:f2:42:64:93:6f:d1:89:9c:ad:ed:05:
         4a:46:df:6b:62:be:89:44:32:14:b7:08:97:4c:3c:c9:a1:de:
         9e:9e:88:3a:72:eb:a6:8e:92:e3:93:59:99:d5:3a:a7:db:82:
         6f:49:f8:6d:2d:b4:5a:39:ab:9b:c1:e2:06:b2:40:21:00:52:
         3a:f4:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:30 2026 by rpki-client