Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File:                     5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier:          eHmJ7U+hy8CtROhScmvzNauCKl3E+JU86oumJoF5dmk=
Subject key identifier:   D7:F2:22:1A:F4:42:B1:D7:AD:EB:0C:B7:FF:E1:AD:77:0B:1B:99:30
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer:       /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial:       147A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number:          144E
Signing time:             Sat 06 Jun 2026 16:50:53 +0000
Manifest this update:     Sat 06 Jun 2026 16:50:52 +0000
Manifest next update:     Sat 13 Jun 2026 16:50:52 +0000
Files and hashes:         1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: Zxfn5zYKNQ3OAHWP2LVwWiljoT1onx/WZwMISSDlWfc=)
                          2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: r9JGVgj9zikJ7F79B2BaZrfg6rmzbuab3Jau6eNt9Fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5242 (0x147a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
        Validity
            Not Before: Jun  6 16:50:52 2026 GMT
            Not After : Jun 13 16:50:52 2026 GMT
        Subject: CN=6a244fec-0fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:19:40:32:1d:5d:0c:8f:11:df:9b:e8:a7:e5:
                    12:32:c2:38:4f:c9:3e:14:8f:20:b2:27:95:01:39:
                    33:dd:b0:d6:88:59:ac:73:a2:5e:22:95:69:d6:56:
                    c5:61:3b:11:e3:e0:8b:1b:a3:76:09:b2:74:06:08:
                    51:27:d4:91:a4:52:51:6f:93:05:49:87:09:69:0c:
                    f8:1a:af:69:5e:96:39:b4:a4:ad:1e:41:ba:83:da:
                    04:57:30:56:5a:3a:74:7f:36:8e:d2:df:95:47:47:
                    7a:17:cc:05:c5:88:5f:8e:3d:3a:55:de:3c:76:b9:
                    d2:f8:66:03:5e:c4:20:b6:1d:1a:0f:72:e2:29:29:
                    8c:ee:a4:3e:fd:2c:c6:48:13:c9:27:b6:b7:a2:b9:
                    eb:2f:f1:ea:63:85:65:56:d9:d5:dd:5f:dd:5d:47:
                    6c:db:ab:58:31:cd:df:c9:c6:16:ef:bd:ef:68:0e:
                    b8:e1:01:cf:cd:1b:d6:ef:25:17:ec:78:73:f4:0f:
                    ec:38:42:01:3f:e6:73:80:85:11:e4:fd:43:49:a3:
                    45:f2:f1:3c:7b:41:22:94:8b:23:8c:ce:79:07:48:
                    be:4f:64:92:99:5c:ba:c2:13:28:bc:d3:fa:bb:60:
                    98:97:49:7e:0d:51:e1:ce:7a:0e:dc:0c:4f:61:92:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F2:22:1A:F4:42:B1:D7:AD:EB:0C:B7:FF:E1:AD:77:0B:1B:99:30
            X509v3 Authority Key Identifier:
                keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:06:02:bd:e9:6a:c4:6a:ba:8c:41:28:66:01:8b:57:d6:
         1e:85:f2:0b:65:a1:e4:cb:4b:83:4d:e0:22:46:aa:96:cb:81:
         57:c4:b3:e6:95:bb:86:6c:14:13:11:6b:04:a1:fe:ba:b8:03:
         57:a7:bc:3a:3b:e3:98:01:da:03:14:c0:4d:e5:a1:56:66:0b:
         cd:65:1b:8d:fc:57:74:07:d4:41:e8:3a:f7:29:37:5e:a0:c2:
         d8:8a:8c:0d:2d:66:0d:33:d8:82:c7:e5:a6:b8:e7:f5:23:01:
         d8:0b:a5:82:b1:24:e8:29:26:a1:6d:89:f4:d4:37:ad:23:12:
         64:c3:99:4e:7e:b9:17:07:77:9c:44:aa:7c:3a:8a:55:fc:db:
         a7:6a:3f:b7:8c:08:aa:d5:e6:2e:9c:ae:d2:ab:f4:0a:d4:1b:
         9b:5d:20:c5:1d:04:1a:83:0c:73:83:a7:d0:8e:d0:4f:d8:86:
         f5:e7:c0:41:80:8c:00:e3:a5:45:5b:9e:e8:29:da:ff:d3:8d:
         e2:8f:16:e3:c1:33:9e:f9:ad:a4:23:e0:69:4e:96:ea:6b:fb:
         5a:54:82:8a:f9:df:e7:36:25:14:95:a7:ca:12:a5:84:1a:17:
         ca:01:89:b3:db:8f:2f:a4:95:af:70:53:a5:77:03:39:b9:b4:
         54:06:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:29:10 2026 by rpki-client