Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
File:                     whcUQpGt4TEa-2LQLllQN8jatdw.mft (raw, json)
Hash identifier:          Q9Aee3J+CH5To74jN5KSk88QlwnDOwkIjDKFhrvhRIs=
Subject key identifier:   AF:EC:A8:EF:71:B1:1D:CB:81:57:4F:CC:AD:5B:90:61:64:80:C1:4C
Authority key identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
Certificate issuer:       /CN=A91E3E8B/serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
Manifest number:          6A
Signing time:             Mon 01 Jun 2026 08:40:21 +0000
Manifest this update:     Mon 01 Jun 2026 08:40:21 +0000
Manifest next update:     Mon 08 Jun 2026 08:40:21 +0000
Files and hashes:         1: whcUQpGt4TEa-2LQLllQN8jatdw.crl (hash: 95bIhcWsSFXTdC0ZlmdldRM4UHZRG70WyuwydVXWRGk=)
                          2: 0359510CBE2711F08C3BFC4DC4F9AE02.roa (hash: bg9OdmypdtmkD01MhIR8EeLLWoS84maV/i45F72hbDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E8B, serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
        Validity
            Not Before: Jun  1 08:40:21 2026 GMT
            Not After : Jun  8 08:40:21 2026 GMT
        Subject: CN=6a1d4575-8385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:e2:d3:12:ab:bd:cb:22:4c:26:5f:c1:18:
                    ff:56:46:e3:07:d1:42:52:95:c8:ef:c4:a4:c4:90:
                    bd:98:87:9f:29:62:df:c3:3a:26:4f:2b:dc:97:a1:
                    28:c0:81:11:57:a6:73:8d:a2:a3:f9:28:57:1f:9e:
                    c6:34:44:e4:1b:80:63:46:e4:bd:71:5f:c9:3f:34:
                    b1:f8:e7:b0:a1:61:73:00:97:ff:3b:5b:75:aa:87:
                    c8:a2:d7:37:07:52:ec:1e:e5:3b:fa:67:03:b7:55:
                    8f:ca:97:fe:4c:33:d7:4d:02:81:83:15:ec:4b:9f:
                    a5:d0:79:39:b8:a6:59:a5:68:45:31:7f:7d:d6:7a:
                    9d:06:66:70:1e:4c:b4:11:13:56:08:a5:28:09:1c:
                    57:b0:68:82:19:48:7b:16:e8:62:69:e3:46:25:c4:
                    92:5a:a0:3b:c7:3d:73:d4:3c:c2:8f:a0:e3:29:2f:
                    1d:a9:bb:95:03:bf:f9:ac:09:53:e3:ad:8c:39:4a:
                    21:84:1c:00:69:2f:60:7c:93:ec:c9:96:ad:41:10:
                    20:fb:5e:5a:a2:9f:ad:d9:60:ee:78:52:41:4b:73:
                    11:47:5e:4c:f1:b1:b9:2a:7a:c9:4c:64:79:dc:ed:
                    00:3b:ac:ec:99:a0:ae:a5:d3:af:3f:c6:71:03:75:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:A8:EF:71:B1:1D:CB:81:57:4F:CC:AD:5B:90:61:64:80:C1:4C
            X509v3 Authority Key Identifier:
                keyid:C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ae:2d:36:66:b5:4f:e5:d6:dc:2b:1a:cc:39:38:e3:0f:3a:
         24:00:6e:d4:8a:7d:28:3f:a3:eb:27:b2:d1:b0:0d:fe:02:6c:
         cf:94:00:6e:6e:4d:1c:3f:0a:26:cc:ce:a5:a1:1f:64:a5:ec:
         e5:3c:71:5d:a3:a8:49:d8:b0:56:36:05:5b:cf:6a:ca:70:b7:
         59:27:15:3f:26:23:ea:20:3e:ff:45:ee:62:57:b6:9c:dc:18:
         ba:50:f8:68:76:9b:89:26:09:e0:25:88:fb:ba:2c:09:57:20:
         75:14:90:2a:b5:29:0d:d5:47:4f:c0:24:56:74:5f:b7:d9:ba:
         7a:96:ac:50:28:e7:3f:03:42:07:11:ac:61:08:f2:9e:7c:d2:
         3f:9a:fa:ab:5b:d8:de:b8:09:05:5b:66:a0:94:e8:9b:a2:8f:
         6a:2d:b5:f3:10:0a:a5:8b:cd:fe:80:0a:2a:17:3b:2c:b4:82:
         e5:e9:a3:5c:6b:0e:2d:98:81:d5:e4:92:48:d2:fa:92:c5:80:
         4d:18:d3:d5:39:b4:97:ff:e2:24:b2:b1:f0:1a:45:3c:6d:ec:
         29:eb:76:73:c9:d1:cb:5d:a3:42:c4:91:a7:d5:a8:5b:ac:c5:
         49:6f:2b:2d:43:5c:52:69:89:ae:25:60:9b:fa:1c:9f:85:9b:
         08:b4:d6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:35 2026 by rpki-client