Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
File:                     x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json)
Hash identifier:          1gzPgSWPq6AcDNX05nnnP0f/psp5HXPVEy6HBWruGac=
Subject key identifier:   03:86:C4:CF:FC:70:0A:65:64:F5:1E:AE:B6:BF:95:74:CD:3A:4E:F9
Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
Certificate issuer:       /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
Manifest number:          0222
Signing time:             Tue 23 Jun 2026 02:55:14 +0000
Manifest this update:     Tue 23 Jun 2026 02:55:14 +0000
Manifest next update:     Tue 30 Jun 2026 02:55:14 +0000
Files and hashes:         1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: j0uFNzMrgsWn+ATUTqbIwWJCczCQgBCGmwpU9jDVs4w=)
                          2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: NZR7cop8QVWqUsDBeZWfV0zvXiChucbzAQ2g4pUVe3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
                          rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
        Validity
            Not Before: Jun 23 02:55:14 2026 GMT
            Not After : Jun 30 02:55:14 2026 GMT
        Subject: CN=6a39f592-095d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:51:0b:4f:c1:2a:98:f9:2a:ff:4a:61:1f:
                    2f:00:2d:31:54:c1:01:7d:b7:72:07:13:76:ce:c4:
                    ce:3b:fb:a8:38:34:53:c6:ad:c0:89:24:34:4d:e8:
                    c7:b8:4e:0e:ae:97:94:90:f3:8f:d4:24:24:b9:24:
                    f1:a7:47:61:48:39:fc:93:4e:e1:88:7b:9e:ba:2b:
                    cf:d2:da:2d:58:3e:de:f6:b8:4b:a1:65:10:1a:88:
                    d0:77:f4:ed:cb:b6:75:01:a3:3e:35:d6:59:c1:8b:
                    ae:3a:a2:6c:30:24:44:97:64:83:35:a1:4e:cf:28:
                    39:45:29:e0:54:fb:8c:98:39:2e:9b:3d:ff:19:f2:
                    4a:82:37:0c:ab:6e:39:3a:c7:a0:3e:96:0c:16:2d:
                    48:5f:83:de:b9:0b:ff:25:62:51:86:d1:02:bf:90:
                    6e:be:61:24:6f:e5:a2:94:48:7f:07:c0:0b:64:66:
                    0e:f9:99:ba:91:3a:c9:a2:ac:85:3b:4d:8c:7d:f4:
                    71:8e:3a:b7:92:b6:34:84:c4:7f:79:7c:18:ee:d7:
                    0f:51:b6:00:d0:30:b9:cd:b4:2d:d0:bf:0b:78:c3:
                    3c:28:a6:2c:24:99:79:0d:0c:5f:28:2d:99:50:99:
                    61:94:4e:df:4e:4e:7d:43:fa:8f:54:b6:89:bd:bb:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:86:C4:CF:FC:70:0A:65:64:F5:1E:AE:B6:BF:95:74:CD:3A:4E:F9
            X509v3 Authority Key Identifier:
                keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:81:81:5b:77:72:1f:25:71:98:8f:eb:90:59:98:b4:a5:
         46:93:af:bf:1c:51:97:39:a7:71:a6:e1:12:4e:35:9f:70:7f:
         f5:dc:97:4b:95:5b:5d:73:04:46:44:b0:8b:f7:98:4a:3b:ce:
         ea:20:6e:df:46:5f:8a:39:21:0d:b7:5f:d1:0b:11:4c:55:b7:
         68:4c:60:fa:b8:39:e6:fa:16:05:d1:3b:fc:76:03:e0:d8:7f:
         3f:58:85:7a:31:36:3f:cd:b2:21:86:e1:ea:9c:e4:ff:15:25:
         ea:1a:f6:47:a9:d9:83:9b:6c:29:07:b4:d7:a7:7e:1d:7b:e4:
         1f:6f:ee:55:a4:b6:2e:7a:57:a8:24:5e:71:39:64:fc:77:1d:
         94:1e:0a:90:26:87:29:e9:c8:28:88:6d:b8:6a:5f:c1:b9:fe:
         87:91:7f:ac:42:1f:32:a8:07:1b:1d:6f:6c:ab:57:a6:e8:77:
         2f:d7:54:f4:e6:01:ad:36:be:4d:99:81:d9:40:fa:2b:05:46:
         cb:c9:1e:e3:4c:b8:1a:c5:37:70:7a:75:73:f8:38:fc:ec:62:
         03:e0:9d:b7:6d:f9:ec:38:f1:0e:87:90:ec:58:cb:96:e9:9a:
         eb:0b:1d:46:b2:22:28:94:c7:22:d0:cc:e7:d0:58:1c:3e:eb:
         be:03:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:16 2026 by rpki-client