Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
File:                     62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json)
Hash identifier:          PYDyZWrnYjlp3NZWmaWyzwLphkooSpJ5x+r+IL3nYus=
Subject key identifier:   AF:5A:EE:6D:28:C8:DD:7A:BE:90:8D:32:58:5C:35:9C:5E:A0:D1:92
Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90
Certificate issuer:       /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
Certificate serial:       3579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
Manifest number:          3564
Signing time:             Mon 22 Jun 2026 14:49:53 +0000
Manifest this update:     Mon 22 Jun 2026 14:49:52 +0000
Manifest next update:     Mon 29 Jun 2026 14:49:52 +0000
Files and hashes:         1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: Fki4MVDicHwU6w4iR8okEVxLQK+NKITtT20KZYKIcYw=)
                          2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: f/lcS6bLLjVH8wwIobnaBz8sL5pzSiGiCHWpfFVVqW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 14:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13689 (0x3579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
        Validity
            Not Before: Jun 22 14:49:52 2026 GMT
            Not After : Jun 29 14:49:52 2026 GMT
        Subject: CN=6a394b91-99ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:d4:5e:87:a5:19:90:d5:39:4e:96:17:a4:
                    7d:78:87:f2:77:47:9f:d6:06:7b:76:22:11:9a:94:
                    0c:6e:0e:f6:01:68:98:83:46:8c:a6:49:b6:39:11:
                    e2:6f:95:bf:91:c8:5c:97:d3:e6:fa:18:77:5a:18:
                    e1:dc:55:e6:16:07:ba:13:a0:86:ae:31:7d:75:3e:
                    5a:78:5a:4f:e2:39:84:39:79:eb:a7:43:a6:44:fd:
                    b2:65:0b:15:c9:d9:bc:07:70:af:62:87:99:5d:73:
                    3f:27:6a:6f:b1:f0:87:cf:82:90:0f:1f:45:8b:71:
                    9c:03:e0:3b:61:db:2e:d8:8b:43:6c:61:d9:03:c1:
                    ff:fa:cd:4d:14:62:eb:d3:bb:be:00:cf:7d:a1:f6:
                    26:ec:56:2e:c8:ec:c5:d4:59:bd:64:1f:73:89:49:
                    50:3d:48:0c:9b:e2:9d:33:59:2a:30:bd:5e:4b:c2:
                    6b:60:d5:62:43:41:0a:98:64:65:06:77:e1:4c:ae:
                    95:e9:9f:5b:4c:71:0e:61:8a:9f:4a:bf:19:e8:e9:
                    f5:73:c7:97:ab:f4:67:c5:5c:63:d6:27:64:cc:c3:
                    30:f5:79:4f:63:6f:ac:55:85:21:6b:05:56:ed:28:
                    e4:19:00:a6:f6:30:5c:15:62:dc:39:73:74:e2:5c:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5A:EE:6D:28:C8:DD:7A:BE:90:8D:32:58:5C:35:9C:5E:A0:D1:92
            X509v3 Authority Key Identifier:
                keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a0:bd:2a:bd:e8:76:91:58:58:18:19:ed:13:22:bd:ad:ef:
         27:2e:75:aa:31:0f:a1:ff:1d:6c:52:53:0c:b8:0b:26:59:3c:
         5e:9f:45:77:df:c4:53:c8:80:e1:16:29:a2:ef:4b:c6:05:7d:
         22:36:1a:cd:71:4b:e4:ab:5f:0c:84:7a:a9:45:9a:d2:23:d9:
         67:9b:ce:b3:1f:5e:8a:4d:4e:00:b4:6e:cf:9e:4a:b3:49:31:
         d5:bf:db:3b:69:af:aa:4e:b7:b5:cb:ab:8c:d0:19:8f:d8:c6:
         43:9d:5c:a4:1a:fa:1f:e9:ee:08:f8:93:f8:65:6f:56:e9:ba:
         f7:9f:7e:7d:b7:98:81:f5:88:fb:19:b9:9b:73:fe:50:8a:9b:
         84:4a:5e:08:a1:24:78:28:b3:56:cd:01:0b:b3:e7:3b:60:b6:
         f8:37:61:d0:66:99:34:23:b5:38:15:2c:86:ba:f1:be:c3:c3:
         9b:e7:1a:6b:2c:2a:79:e2:a2:c6:08:43:cb:40:15:a9:ee:48:
         16:77:ee:82:4f:7b:4d:29:9d:75:38:e9:d2:cd:e6:79:5f:6f:
         51:a7:e0:93:37:a5:e6:ce:ec:de:62:11:73:6c:c6:ff:0b:e1:
         2e:4b:10:ff:d3:09:7c:ca:74:07:2f:a8:61:f9:c8:20:cb:eb:
         0b:d4:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:15 2026 by rpki-client