Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File:                     pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier:          7KyQZTWBnIPUNvDSj9Chf4ZfDqQNIT2hgSLvt+P+wzI=
Subject key identifier:   7F:66:87:D6:72:40:3B:C6:4C:33:56:8C:F2:D6:F9:E1:64:94:5D:2F
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer:       /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number:          EF
Signing time:             Mon 01 Jun 2026 07:10:52 +0000
Manifest this update:     Mon 01 Jun 2026 07:10:52 +0000
Manifest next update:     Mon 08 Jun 2026 07:10:52 +0000
Files and hashes:         1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: dGCuBOMi7XOCnykEjeMA/o0vVygWcS7FkqJLQP15pH8=)
                          2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
        Validity
            Not Before: Jun  1 07:10:52 2026 GMT
            Not After : Jun  8 07:10:52 2026 GMT
        Subject: CN=6a1d307c-41d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:bf:63:ab:f5:ac:51:66:fb:01:da:8e:44:
                    80:0c:7b:24:84:f2:0c:16:1c:3a:15:e3:f6:db:96:
                    d8:cd:c7:3d:70:d9:db:17:77:42:a4:2f:ae:dd:88:
                    ab:f4:e5:0f:a2:13:ac:dc:49:fa:21:f7:4c:07:47:
                    e0:25:76:e9:67:f5:7a:d9:6f:53:b5:d8:9c:b3:dc:
                    bc:a7:82:8a:6e:0e:51:53:46:63:21:1d:42:76:12:
                    69:57:1b:07:df:04:46:f5:54:77:93:e7:d4:a3:ae:
                    90:2b:d7:47:74:de:f3:bc:cc:6b:d3:2a:ec:ae:b5:
                    f2:77:20:7a:11:d0:69:28:54:fb:a4:9e:86:48:1a:
                    47:17:cc:44:71:9f:32:f5:30:a0:78:54:53:82:e8:
                    30:44:d7:2e:97:ed:c0:87:0f:dd:68:f9:fb:c3:13:
                    11:aa:09:6e:6f:c4:60:de:2b:5c:5e:b3:1c:5b:4c:
                    61:35:fa:d9:e3:0b:53:be:a3:da:28:d1:9c:1c:3c:
                    aa:86:b9:f0:26:af:03:cd:20:66:8a:da:3a:64:d9:
                    0b:47:0b:2b:ee:b2:79:c0:5c:d1:b5:cb:c4:bf:f2:
                    e2:f8:21:96:67:df:e7:f4:ae:13:b8:21:f5:48:e2:
                    72:60:00:4b:e2:80:0d:91:21:4a:83:57:d1:5e:77:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:66:87:D6:72:40:3B:C6:4C:33:56:8C:F2:D6:F9:E1:64:94:5D:2F
            X509v3 Authority Key Identifier:
                keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:83:a5:17:53:c1:2b:79:33:66:84:32:d2:2a:56:f5:b4:
         d7:61:a3:38:82:01:2d:67:01:d7:22:b9:2b:5b:7d:87:c1:3e:
         0c:e7:d3:19:b1:ea:4b:e4:36:8d:7c:a6:b8:26:de:eb:f1:2f:
         30:2d:a9:a9:ed:eb:df:66:33:f2:bf:a0:0c:92:b3:0c:7c:b9:
         48:4e:79:b8:c9:d6:b3:47:69:b0:a2:0f:b0:86:77:1f:c8:70:
         00:d0:b3:41:a1:fa:8c:e5:4c:22:f5:bc:29:58:4a:f7:ab:3f:
         02:aa:84:b1:55:8a:d1:24:12:1d:48:0c:e2:d0:cc:46:95:5a:
         31:fa:7a:63:47:a9:28:f6:8a:1f:19:34:8b:eb:19:a8:d8:cd:
         dd:42:f5:3a:c0:bc:86:b8:40:b0:e0:e5:76:e0:ac:a6:72:c9:
         49:14:08:63:c8:51:87:06:24:18:da:64:08:38:e6:19:44:7b:
         1e:73:13:7c:dd:b9:e6:46:55:ef:8f:e7:27:7b:6e:a7:cb:e9:
         1a:af:bc:fe:d2:72:37:d1:72:b2:7e:ae:31:7f:75:94:e6:1c:
         b8:d5:db:30:be:65:29:d7:68:4f:dc:50:51:1c:83:9a:e0:03:
         6f:86:29:1a:35:88:4f:0e:9f:bd:10:73:c6:76:b7:ce:b0:33:
         60:2d:37:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:41 2026 by rpki-client