Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
File:                     dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json)
Hash identifier:          Uzsmz6ep6+Ck/0WBkNRIcg0cWLY6SdVqtwqI1CCLHYA=
Subject key identifier:   A4:35:B4:52:E4:15:11:7F:D5:7D:14:7E:2B:4A:22:8A:12:FB:A2:79
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Certificate issuer:       /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
Manifest number:          79
Signing time:             Mon 01 Jun 2026 08:37:21 +0000
Manifest this update:     Mon 01 Jun 2026 08:37:20 +0000
Manifest next update:     Mon 08 Jun 2026 08:37:20 +0000
Files and hashes:         1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: /V5PndJSL3d7oMs9MgMq1cBDaWXX+Z3Wj9vr5ah+lUQ=)
                          2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: b99ya6U9QMY/5a9pzqhDLkO/k1qaTOIL0zEPGVgl0hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
                          rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
        Validity
            Not Before: Jun  1 08:37:20 2026 GMT
            Not After : Jun  8 08:37:20 2026 GMT
        Subject: CN=6a1d44c0-984b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:e6:98:b5:ec:14:1b:a8:e8:4b:47:3a:4d:
                    47:e2:8c:8b:16:db:cd:ff:ec:ab:46:fc:d2:26:0f:
                    06:95:f9:46:80:92:1e:16:d3:94:58:d0:a6:d4:6d:
                    0b:14:9f:d1:10:cc:d2:3f:a1:95:6e:22:c6:29:3f:
                    38:73:aa:86:66:57:56:ae:4b:47:12:bb:ad:ce:65:
                    8f:b2:49:bd:68:da:12:2f:7e:42:47:f2:dd:71:d8:
                    5a:9e:66:3e:6c:27:a1:bb:55:5c:ea:c3:5e:88:db:
                    ae:7a:a1:0a:77:63:24:bf:54:5b:f5:18:46:09:2f:
                    86:80:cd:be:b7:d8:79:de:61:da:44:4b:25:7d:3c:
                    8e:77:67:07:3c:06:6e:c5:20:99:7f:52:71:1b:fd:
                    3d:62:17:3e:07:65:96:57:bf:9e:76:4f:b1:b1:77:
                    7f:6a:92:8d:a2:ec:e1:f5:84:1a:57:b0:b8:18:51:
                    84:7b:98:1e:96:31:c9:60:c0:af:11:49:62:00:07:
                    7c:31:a8:be:0c:2a:4b:73:fc:81:fa:f5:3e:a3:6a:
                    e2:cc:12:de:1f:e0:de:63:9c:ac:3a:68:7b:08:64:
                    31:a0:3e:38:96:4c:83:65:6d:ab:4e:35:dd:e9:dc:
                    58:25:49:b6:27:e8:08:e4:e8:53:dd:c9:ae:7d:01:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:35:B4:52:E4:15:11:7F:D5:7D:14:7E:2B:4A:22:8A:12:FB:A2:79
            X509v3 Authority Key Identifier:
                keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:a0:81:70:5b:cc:0b:09:c0:4c:f0:53:47:39:ef:fb:90:
         81:e1:ff:43:90:91:be:84:f9:8f:6f:c4:1e:55:b5:ec:0b:28:
         fd:fb:b0:82:f8:cd:39:60:6b:71:5c:fe:7f:cc:8d:36:ea:d8:
         2e:19:bd:8e:d4:39:76:ca:71:96:73:b3:ec:2b:ea:f1:f3:6e:
         7d:62:90:dc:33:f2:69:13:9e:5a:c4:db:94:87:53:98:30:51:
         fc:77:10:ee:34:4e:44:74:69:a6:4c:77:08:d0:9b:77:ae:85:
         33:bd:e0:e3:b3:93:8e:f9:df:ec:6c:5c:47:0f:5d:53:2f:04:
         c1:ce:40:7e:35:67:0f:14:33:73:65:3b:3c:d3:ab:66:00:f9:
         e8:69:74:64:2b:2b:e6:f1:51:3e:9a:c6:e4:f8:3c:e1:28:82:
         1e:ab:de:be:3a:45:bd:b6:4d:f4:1d:df:e1:42:a6:70:d9:96:
         63:19:9c:e2:70:3c:7b:8b:dc:be:d1:8b:f1:51:f1:d2:e3:0a:
         11:38:ba:16:84:fe:99:f6:47:3b:ae:f7:54:33:1a:f8:10:59:
         18:08:ad:ba:3e:ac:aa:d8:11:62:f6:c2:32:c5:24:e5:bd:35:
         4d:c9:5f:06:c1:9e:5e:22:60:3c:55:10:8e:97:66:e3:eb:1c:
         95:4a:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:23 2026 by rpki-client