Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
File:                     RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json)
Hash identifier:          bp7SWAB1kgj/3TC52r/wF0A9PxuknlNb7rQ4vLIG84w=
Subject key identifier:   1A:5A:E8:B3:2B:E8:5E:C1:14:46:75:75:B4:C2:D0:2D:72:25:47:B0
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Certificate issuer:       /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
Manifest number:          5C
Signing time:             Mon 01 Jun 2026 09:00:37 +0000
Manifest this update:     Mon 01 Jun 2026 09:00:36 +0000
Manifest next update:     Mon 08 Jun 2026 09:00:36 +0000
Files and hashes:         1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: VFXWNJPQ0b1jSqroRaNcfWJX3+tIFRk3Fz/sQ4KVVEI=)
                          2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: 3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
        Validity
            Not Before: Jun  1 09:00:36 2026 GMT
            Not After : Jun  8 09:00:36 2026 GMT
        Subject: CN=6a1d4a35-7c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:67:46:b3:05:6f:b5:24:72:8d:26:00:e8:
                    27:fd:18:54:ba:78:05:31:aa:5d:98:aa:71:47:55:
                    a2:d9:f4:df:67:c8:1b:f7:97:c7:89:ff:55:51:75:
                    f6:77:41:1f:82:b1:46:55:b3:32:d8:c0:3a:41:63:
                    33:80:8d:de:99:23:28:68:21:eb:31:e9:e7:7b:20:
                    89:09:a4:92:6f:d1:4f:5d:ac:ab:9a:68:ee:30:fb:
                    f8:db:48:d5:ca:4b:e4:3f:a4:2b:3d:d5:dc:00:b0:
                    5c:63:c6:5b:67:20:c1:ae:9f:5e:ab:51:2c:68:6e:
                    10:86:28:1d:63:42:31:b4:0d:a4:2d:31:98:b4:21:
                    57:51:2e:67:39:59:dc:19:a6:0f:5d:b7:43:ce:9f:
                    14:5e:50:67:9d:c7:15:27:f8:d2:d5:e6:4b:7e:bd:
                    1c:cb:77:2e:bd:86:49:53:e9:9c:e6:a5:f3:55:ea:
                    cf:1e:56:ac:e5:42:70:af:cd:20:09:b1:1d:5b:ae:
                    f2:96:18:32:20:d5:c7:99:c8:dd:8a:0f:1a:75:af:
                    2d:11:c8:d6:20:95:3a:d1:80:7e:3f:74:90:88:9d:
                    65:6c:f4:4b:8a:b3:95:ca:d2:de:af:8e:4e:aa:bc:
                    50:48:3f:4b:cb:d8:d4:c6:d1:84:1c:31:ff:82:b7:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5A:E8:B3:2B:E8:5E:C1:14:46:75:75:B4:C2:D0:2D:72:25:47:B0
            X509v3 Authority Key Identifier:
                keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:df:87:6d:d3:f4:ee:31:93:d8:c7:bd:19:c5:a8:12:04:a1:
         12:e4:b5:c8:72:b2:ad:75:d8:9e:8a:46:46:22:db:fe:e3:fd:
         e2:cf:b3:f6:f6:57:54:bf:4e:8e:f4:8f:ae:23:bf:ec:01:48:
         aa:d4:9d:9c:19:69:2e:37:29:25:24:e4:da:53:ba:b2:3f:d3:
         b0:a2:48:40:56:13:7f:c5:dc:4f:e7:12:c0:0c:61:2b:06:ae:
         76:13:13:70:72:6b:94:31:99:95:af:76:9e:ad:83:68:2c:9c:
         cb:a6:11:b9:fa:3a:04:99:9b:ae:00:d1:3b:7c:fd:47:27:3a:
         8f:b7:f7:86:46:da:5b:63:c7:74:5f:15:50:ef:20:35:f3:e2:
         ed:41:0e:44:e1:e2:04:aa:cf:66:33:5a:d9:27:7e:3e:cb:6c:
         c2:d3:16:f9:5d:de:1d:21:e2:5a:f5:c7:30:c1:83:72:89:16:
         94:d0:d7:28:06:cc:8b:f9:83:f8:78:27:4d:90:ae:83:ee:a0:
         74:99:73:0d:7d:60:b6:0b:da:10:5c:8c:00:c3:9f:d8:9c:7d:
         ce:45:88:b3:6d:d0:46:45:ba:99:04:ce:59:77:82:8a:e2:f2:
         83:5e:60:d9:17:63:66:ce:d3:29:17:26:92:22:5a:aa:c8:90:
         37:80:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:21 2026 by rpki-client