Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
File:                     V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json)
Hash identifier:          C4//9sdD9gwm+gHJ0F/noxnebGKsUGg9tDra2iKT1pY=
Subject key identifier:   B7:69:CC:0A:BE:41:24:84:05:C2:5F:9B:77:B6:92:3B:C5:08:6E:E6
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Certificate issuer:       /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
Manifest number:          0128
Signing time:             Thu 11 Jun 2026 08:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 08:00:36 +0000
Manifest next update:     Thu 18 Jun 2026 08:00:36 +0000
Files and hashes:         1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: yQSl5Li4FQUJOH6r4cuJsXUP9X7QjmiWZArb6+mQOz0=)
                          2: 89FFAC1AF26B11F092350A59636F56BC.roa (hash: NFihz5oOFEQ/L/IatISrvLAQXRyCguKHk6tM5p6j0/M=)
                          3: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: bwcFEcR5ByOuMh5c9fYjzQ896YuFNkVRc9AQMLg87o4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
                          rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
        Validity
            Not Before: Jun 11 08:00:36 2026 GMT
            Not After : Jun 18 08:00:36 2026 GMT
        Subject: CN=6a2a6b24-15c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:a9:45:0d:d6:5b:2b:01:0c:ee:2a:14:4f:
                    da:97:60:14:45:a0:a0:c7:4a:03:ac:ca:1a:de:3d:
                    cc:b4:a5:a7:51:5e:ab:fc:66:a1:e1:a5:b2:86:d3:
                    5a:ee:50:a4:43:f2:46:75:27:4f:d4:bf:3d:45:97:
                    1a:ec:f7:07:41:7e:a8:a6:06:fa:5f:70:d2:37:45:
                    9f:51:1c:b8:f8:79:b4:90:88:7a:f6:94:b5:55:b0:
                    e7:82:73:83:e2:28:a7:36:88:fd:6e:b9:6c:8b:62:
                    b9:bc:d4:1a:74:86:45:8d:c4:1a:22:38:e6:b0:48:
                    91:2e:91:19:5d:5c:41:2d:dc:30:8f:12:99:ed:04:
                    ee:94:62:c8:18:0d:40:9d:90:68:8b:1f:85:38:4d:
                    d9:b0:6d:49:c6:2a:ea:9a:32:ae:08:d0:49:94:47:
                    93:99:9b:a2:33:bf:6c:10:65:9d:9a:fd:a7:82:7c:
                    41:49:ca:5c:a5:74:6c:df:da:ee:2f:2f:63:3a:2c:
                    4f:79:02:07:e2:20:d0:5c:1c:ea:c7:0d:76:9b:a3:
                    3a:df:cc:89:4d:a0:a1:d2:2f:db:b3:31:74:71:3d:
                    a4:75:2e:13:09:04:a8:19:cc:1a:19:9e:39:9a:40:
                    63:2d:40:02:7f:80:31:65:e6:fb:53:a9:52:62:f5:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:69:CC:0A:BE:41:24:84:05:C2:5F:9B:77:B6:92:3B:C5:08:6E:E6
            X509v3 Authority Key Identifier:
                keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:99:f4:ab:43:7c:de:8e:dd:e3:22:b1:89:5f:c1:e6:72:4d:
         9f:71:60:6d:e7:ba:62:4d:35:c9:5a:e4:38:f2:75:4a:72:d3:
         f8:cb:2f:8d:ca:76:06:5a:21:15:f7:2b:73:55:8d:87:61:9f:
         a4:b3:f9:18:b9:c0:9e:1a:1c:58:d7:61:3f:16:f0:2e:51:cb:
         cc:5a:ee:fd:7d:14:58:04:42:8b:f8:dd:21:c2:7d:ff:80:bf:
         65:0e:08:59:72:7d:f1:62:c0:8d:c9:45:13:7d:57:38:19:89:
         1a:cf:1b:06:03:7a:2a:81:4b:83:35:81:60:90:0a:22:d6:22:
         e8:ee:03:5c:5b:42:06:3e:06:e6:3b:85:25:c3:35:d7:21:a1:
         88:00:1f:80:ec:98:ec:a0:36:57:54:07:87:cf:d6:08:83:f6:
         2b:6a:0b:c1:82:18:47:44:c4:a3:d7:ba:35:e5:64:5d:fa:09:
         1c:b8:39:38:20:59:e2:b5:b6:31:0c:57:db:9c:2e:80:d4:6d:
         8c:29:e9:f4:de:af:e2:48:e5:f2:4b:39:da:0f:f0:44:33:8c:
         9b:b9:22:2a:d8:be:c5:f0:0a:0e:2e:d0:32:e4:b8:8b:65:37:
         f7:76:e1:24:94:56:c8:9a:ca:94:a3:b1:90:6a:75:b2:09:d6:
         34:9b:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:20 2026 by rpki-client