Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
File:                     MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json)
Hash identifier:          /EBn/3xkXewKx+ZVLqhhDg0cuUdkzewr1GHSs23opyM=
Subject key identifier:   46:4E:BB:7D:56:82:51:EB:71:52:1F:83:08:F9:00:16:C9:D4:DF:99
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Certificate issuer:       /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial:       1554
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
Manifest number:          153E
Signing time:             Tue 02 Jun 2026 16:47:54 +0000
Manifest this update:     Tue 02 Jun 2026 16:47:54 +0000
Manifest next update:     Tue 09 Jun 2026 16:47:54 +0000
Files and hashes:         1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: U3SK/jOl+ecxqSKzrENzTs9y/xSUcdSjrwHOMMwQNT8=)
                          2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: cIxtJWgcXzpekN854h+Gn0iT4S0YYTFuZrY9rIh4a6M=)
                          3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: 0s446asxUq4TUjj3iz0ZGInEQ2S3Qugk+pBUyrJhQAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5460 (0x1554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
        Validity
            Not Before: Jun  2 16:47:54 2026 GMT
            Not After : Jun  9 16:47:54 2026 GMT
        Subject: CN=6a1f093a-3c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:02:62:12:43:5b:1d:2c:28:e9:b6:7d:0e:
                    e2:44:bc:b6:11:63:51:1c:4f:f2:ad:69:e0:8c:b7:
                    2d:dc:b2:41:16:74:50:ad:08:b1:4c:14:88:88:30:
                    9a:bb:82:7c:27:3d:e8:de:a1:88:09:c4:6f:6f:dc:
                    86:89:89:f8:ba:20:4b:f8:32:81:86:29:c3:13:4b:
                    f3:b4:2d:9d:d1:0c:a6:fa:e2:d0:c0:13:fc:11:c6:
                    79:77:78:70:a9:33:97:c8:f9:66:31:56:cb:3a:24:
                    6d:41:ec:89:c4:0f:0c:5e:39:dc:55:34:99:7e:1d:
                    75:e4:f6:7c:7d:ea:ba:5e:41:03:3e:1a:d5:d9:41:
                    17:48:b8:9b:28:f9:3f:15:e9:00:a6:78:2d:f9:77:
                    4e:7e:1f:67:3a:17:37:8b:cc:89:90:94:44:27:b0:
                    98:cb:84:ed:d7:62:e8:6d:d8:f8:79:02:1a:22:ea:
                    5b:f6:74:9c:b7:24:45:93:f5:bc:56:7e:8c:d6:29:
                    94:9e:71:13:d7:d7:4d:84:e5:14:de:de:57:26:bd:
                    03:5c:7a:02:b6:14:c4:82:31:60:62:ef:43:cb:d6:
                    63:88:e1:c9:fe:2f:45:04:fe:7e:05:c8:3c:18:e2:
                    97:04:44:56:dc:a9:78:fe:5e:89:82:4e:f1:44:2d:
                    be:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4E:BB:7D:56:82:51:EB:71:52:1F:83:08:F9:00:16:C9:D4:DF:99
            X509v3 Authority Key Identifier:
                keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:55:6e:71:05:48:02:55:39:8d:ae:52:50:b1:98:b8:36:ab:
         1c:93:7d:b5:7f:eb:f6:6e:da:f0:fc:ce:f9:ac:bb:2d:08:9c:
         f9:02:8d:5e:a5:56:43:d5:46:6b:32:a3:77:e6:ba:0a:e3:e4:
         6d:0f:19:82:fa:54:d8:54:d0:d9:34:ca:4b:86:a0:85:fc:8d:
         54:9f:13:97:8c:ac:fb:4f:6f:95:de:73:2e:6e:f8:7a:93:b2:
         61:3f:39:a5:2d:65:e6:a7:f6:17:15:51:33:b5:5f:8d:bb:75:
         1b:83:9b:43:e7:90:9d:0e:d7:e9:8c:df:f3:40:70:7b:c6:01:
         22:fe:2d:36:2c:82:be:1a:30:26:dc:25:0d:c7:5b:e0:66:53:
         fd:76:6a:e4:cb:46:62:5f:43:5c:68:02:07:1c:d4:bd:20:34:
         88:c3:10:b1:12:06:09:41:fe:9f:f5:c5:75:89:cd:ab:8e:e7:
         f4:72:dd:e2:ab:0d:d3:b0:99:00:85:f0:12:38:46:a0:1d:57:
         75:3b:d1:30:ba:15:c7:36:91:a4:a4:7f:54:65:07:a6:e4:b7:
         42:8f:02:cf:f0:19:75:99:4b:38:18:a0:8f:9e:28:53:a0:65:
         06:21:ad:62:b1:a6:47:e9:24:00:5a:fe:61:fc:e8:26:ca:7d:
         36:8f:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:09 2026 by rpki-client