Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
File:                     74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json)
Hash identifier:          ncBGp0g+bTty/zR9of1uCfyQLiNrIlpH/TANfaW8EQ8=
Subject key identifier:   D7:F1:A3:10:63:EA:CF:50:21:79:C6:CA:71:8A:0C:14:27:93:20:C0
Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
Certificate issuer:       /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
Manifest number:          5E
Signing time:             Mon 01 Jun 2026 08:53:10 +0000
Manifest this update:     Mon 01 Jun 2026 08:53:10 +0000
Manifest next update:     Mon 08 Jun 2026 08:53:10 +0000
Files and hashes:         1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: XPZWfUMvpzveloPPxXsjGYE3OSi/gD9O1urdA5Fs8/4=)
                          2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: KBecdMTFKnUpJ7QDfC5GLAYFAglDXZ+nTAZgDKN2WsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
                          rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
        Validity
            Not Before: Jun  1 08:53:10 2026 GMT
            Not After : Jun  8 08:53:10 2026 GMT
        Subject: CN=6a1d4876-f5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:91:0c:e5:73:c2:fa:58:b1:7a:35:8e:7d:
                    22:7a:ab:8e:38:f3:99:ea:8c:78:36:ea:8d:45:6e:
                    84:fd:60:65:f6:78:cf:29:d4:95:75:eb:17:86:b5:
                    9b:f3:9b:3c:3c:0e:ff:4c:86:9f:fd:6a:1d:14:9b:
                    b3:eb:7d:e0:b2:3b:ea:5e:e5:23:6c:07:f8:a8:1a:
                    4b:1a:8f:94:53:d2:82:26:ae:5a:dc:1f:da:70:d0:
                    78:9e:ed:46:50:0a:75:4d:95:0c:e4:ee:08:90:cc:
                    89:e6:92:7b:51:47:11:5b:93:9a:a5:52:d1:54:b0:
                    ab:26:e4:bc:ba:6d:72:01:09:b3:19:bb:2e:50:50:
                    70:79:e3:09:76:af:1e:a5:9a:93:b0:ca:bf:68:0e:
                    00:a6:c2:38:57:29:3b:f1:94:51:f5:e0:f0:23:22:
                    59:63:3d:fc:4c:fd:2f:4a:a1:30:58:d4:e6:25:17:
                    3c:ff:53:20:98:39:1c:60:ce:cb:76:13:22:21:da:
                    a8:eb:1d:95:c0:d3:d9:05:31:d9:80:2e:d8:59:b5:
                    94:f8:9d:81:d0:b2:48:ca:c2:70:ca:30:ea:74:a2:
                    78:9e:a2:01:d6:5f:73:49:50:a8:86:c4:52:d9:25:
                    90:01:74:b0:7e:51:73:c5:97:90:c2:75:84:2f:f9:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F1:A3:10:63:EA:CF:50:21:79:C6:CA:71:8A:0C:14:27:93:20:C0
            X509v3 Authority Key Identifier:
                keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0f:f0:b8:bc:80:fd:44:71:45:7f:a0:bb:37:8e:08:07:2f:
         00:dc:1c:c5:ee:b2:b1:a5:80:b3:18:18:1f:f4:a8:84:45:2f:
         05:b1:35:65:dd:fa:4b:ef:d2:cb:43:c9:5e:3f:b6:4b:a4:8c:
         84:65:78:75:c2:1a:4c:5d:07:fa:a8:37:6c:91:af:df:64:8f:
         45:d0:7b:ac:36:5a:29:d3:e3:25:67:7c:aa:ed:bb:90:da:b4:
         8d:ff:6e:ad:40:a0:c2:42:bc:32:6a:19:24:b4:df:bd:df:02:
         7e:97:90:66:f9:31:3f:29:a8:e3:f3:4a:07:14:76:df:73:66:
         9a:24:d5:9e:2d:8a:6c:34:d3:86:0b:1d:87:33:9d:80:02:72:
         e5:b0:a9:4b:45:7b:b6:54:4e:63:c4:8e:7c:c7:7a:12:99:d0:
         4e:2b:d0:bc:55:74:8c:06:73:1f:a1:3a:3d:ce:c7:99:01:b8:
         66:92:5c:77:a5:a2:e1:6f:3f:46:43:e1:74:c1:ba:7a:25:fd:
         bd:b9:2b:47:41:85:26:50:d1:6f:e6:d4:65:1c:0b:2f:cb:e6:
         63:af:fb:3a:bb:9f:ce:62:e8:6f:66:26:45:04:86:a1:9a:09:
         99:e3:9e:a3:01:68:7d:ab:e1:11:bd:02:31:f9:1a:e5:3d:dc:
         f8:21:db:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:01 2026 by rpki-client