Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
File:                     _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json)
Hash identifier:          9uRcSu+phdy2OYa+THKOTr38+ODnNSaxvDV6Giytajs=
Subject key identifier:   49:DA:0E:DE:B7:94:81:39:52:46:6F:F7:57:64:CB:72:05:4D:16:7E
Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Certificate issuer:       /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Certificate serial:       01B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
Manifest number:          01AF
Signing time:             Mon 01 Jun 2026 04:49:58 +0000
Manifest this update:     Mon 01 Jun 2026 04:49:58 +0000
Manifest next update:     Mon 08 Jun 2026 04:49:58 +0000
Files and hashes:         1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: j1OeotKlf45DrI/uYu9U17TaGoEPUkzobrUx4gN1xgk=)
                          2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: IIgjx5hMDfgzrpHDFYnjfbNSp51tU2xzdb1oFbQHBNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
                          rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
        Validity
            Not Before: Jun  1 04:49:58 2026 GMT
            Not After : Jun  8 04:49:58 2026 GMT
        Subject: CN=6a1d0f76-5c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:ca:63:51:dc:fe:9c:52:35:40:81:9f:ba:
                    e5:7e:10:bd:23:d7:ad:3e:0d:bc:c0:4b:38:ba:df:
                    2c:ee:7f:9c:70:6e:a7:95:05:4a:cd:e1:7c:cb:37:
                    95:75:b2:c1:6a:1f:bb:01:99:b8:1c:79:0a:9c:12:
                    0a:f7:b7:80:19:32:0c:70:45:5e:b0:bd:d4:a7:3d:
                    44:77:87:ab:0d:f5:8e:7f:db:0c:c8:bf:3e:85:7d:
                    eb:ac:5c:66:b4:b6:9d:db:8b:e1:54:16:b3:64:f2:
                    d2:6b:3e:02:77:23:52:63:e9:c6:af:9f:c6:79:01:
                    22:4a:13:77:50:6e:31:90:f5:e8:6e:61:e9:3b:7e:
                    98:d8:ff:58:e3:dc:8b:32:b2:be:67:90:6c:2b:b9:
                    1e:6c:2f:ef:63:f9:9b:e7:28:6f:b9:7d:76:d4:34:
                    cf:61:b3:15:5a:da:e8:4e:06:e5:0c:85:e7:70:63:
                    22:67:85:2f:b4:d4:ba:b8:84:e6:f6:89:3c:ac:a7:
                    63:b0:94:a3:df:eb:42:d4:6e:8e:6f:68:33:49:46:
                    05:09:9f:51:50:6b:f0:51:68:34:f4:11:e4:98:52:
                    8b:cf:48:9d:ff:75:b5:70:d7:ef:b8:63:27:e3:7b:
                    23:c1:2b:f5:21:2f:1c:bb:3a:00:07:4b:34:a1:b8:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DA:0E:DE:B7:94:81:39:52:46:6F:F7:57:64:CB:72:05:4D:16:7E
            X509v3 Authority Key Identifier:
                keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:c9:45:fc:8b:ce:b6:69:02:04:7f:b0:13:0e:92:dd:d2:b8:
         d3:89:03:7d:8e:9e:b3:17:c6:66:bd:8a:5f:d5:d1:6a:53:ec:
         5c:0e:e3:6c:18:d3:2f:22:89:14:de:a4:e7:d1:42:78:a7:3a:
         2b:84:61:e8:97:1e:3e:c6:5d:7a:8e:e4:a6:33:f9:f5:7f:05:
         82:e7:a2:f5:4a:ea:fe:2f:9e:6c:9b:29:ac:83:ed:a3:5d:66:
         90:10:0e:a3:07:89:d8:54:83:bc:1d:8b:a9:36:73:b0:8f:32:
         04:8d:64:e7:ad:2d:0b:56:6d:a7:58:0d:b3:db:1a:81:29:f9:
         ed:33:08:25:17:d4:a8:34:3d:96:49:0b:b6:c1:94:c0:a4:db:
         06:d5:d2:3f:68:01:0c:19:4d:3d:ff:40:42:7e:8c:0f:e5:d6:
         fa:d7:51:b9:c2:42:3b:9f:ab:2e:eb:76:1a:6a:92:ca:9e:e1:
         a0:97:d7:65:a1:dd:e1:d9:82:3e:29:21:aa:2c:b4:fe:5e:b1:
         d5:59:ed:ef:54:c8:49:41:96:09:ba:5b:14:17:b3:4e:dd:5f:
         d9:c9:45:73:3b:22:c8:ef:c1:2b:c1:fe:5f:e1:b2:9e:50:59:
         4a:2e:91:8f:5d:9b:2e:4e:c0:a3:3d:5d:8e:0c:94:76:f5:ea:
         82:29:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:09 2026 by rpki-client