Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File:                     1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier:          PEj7tCIXEEmjAVLRt9aM2x7MvOeyUqBeiQqxVxfZlJw=
Subject key identifier:   37:5B:C6:02:80:D0:C6:E6:F8:5A:0C:FE:D8:33:58:BB:B8:41:06:5A
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer:       /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number:          010A
Signing time:             Mon 01 Jun 2026 06:55:14 +0000
Manifest this update:     Mon 01 Jun 2026 06:55:14 +0000
Manifest next update:     Mon 08 Jun 2026 06:55:14 +0000
Files and hashes:         1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: rSPhN0nrkOBnVm80E0v33yzb+qFZ4myjtAwsRZE+6JM=)
                          2: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: WbcHkuV1KGZpUWsgSLnvoF/j0nloKO7jZjWyz2sKLc4=)
                          3: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: GqBmWG7cp4InXGzH112fZPiBHKzEQ6yteA8i5t3EwNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
        Validity
            Not Before: Jun  1 06:55:14 2026 GMT
            Not After : Jun  8 06:55:14 2026 GMT
        Subject: CN=6a1d2cd2-691d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d0:7f:e6:36:8b:d5:bc:79:3b:80:ea:4e:3b:
                    c8:97:90:c9:32:bc:6e:f8:eb:d9:82:4e:7a:41:1b:
                    b5:c1:39:06:31:30:61:c5:28:3e:fd:0a:70:54:50:
                    83:2c:6b:9a:47:3c:38:85:6e:90:8b:8b:38:a0:fe:
                    54:2f:d9:76:2f:84:a1:a3:3e:f1:d9:48:6e:cc:6e:
                    1b:a1:da:6e:8d:65:b3:fb:08:77:cc:b7:64:68:49:
                    9a:aa:25:70:42:bf:26:07:b6:cb:45:c9:26:fc:9d:
                    8a:c3:77:24:3c:f6:68:bd:4e:d1:22:02:47:6f:a0:
                    b7:99:ab:70:d0:ff:74:19:c7:52:6b:d6:93:9f:fc:
                    4b:c3:3c:5f:3b:6e:f6:82:9d:c3:c3:01:9b:f5:4e:
                    98:ac:f9:37:cb:75:43:f5:a2:f0:71:2e:54:6b:79:
                    fe:1f:e2:ec:be:94:2d:e5:fc:db:28:0b:cc:15:a9:
                    51:b5:0b:e0:59:fa:ee:0a:ca:8d:1d:35:76:47:32:
                    6f:b6:8c:2c:08:3f:fa:82:3c:bf:76:74:84:9b:cd:
                    1f:6d:2a:0e:a3:12:92:ee:fd:30:05:f5:ec:15:82:
                    c8:bf:dc:03:89:f0:23:0a:5e:62:d5:7e:87:48:a5:
                    d0:5d:42:56:2c:09:e2:1f:59:71:33:32:e3:b6:e7:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:C6:02:80:D0:C6:E6:F8:5A:0C:FE:D8:33:58:BB:B8:41:06:5A
            X509v3 Authority Key Identifier:
                keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:8d:f4:de:9c:e1:84:41:cd:a2:50:5d:da:24:00:7b:08:
         0a:f8:06:83:a2:28:b7:a2:c8:d7:14:0c:60:a4:db:ad:b4:ce:
         33:a0:ed:72:48:1c:f5:e6:0d:0e:45:c4:31:96:84:02:e5:c1:
         1d:1a:53:34:24:43:f2:8a:19:7b:f5:d4:1b:42:a8:97:93:eb:
         59:82:33:24:9b:2e:26:d2:e6:69:c7:58:40:6c:91:a0:e7:06:
         7b:1c:41:a9:a8:07:92:e1:17:77:11:75:00:97:44:67:11:87:
         f2:64:7e:64:82:06:86:18:1f:af:d5:27:7c:c8:92:82:28:ad:
         e1:e2:64:f7:da:c2:d6:08:1d:ee:18:81:17:50:9e:d3:8f:03:
         9f:fc:85:ac:5c:3a:8d:df:ad:38:66:89:80:90:bb:ee:d9:67:
         49:f6:30:ec:be:cb:03:6c:69:25:0b:c8:52:ff:f6:fd:5b:bd:
         0a:6e:7e:1f:44:97:a1:42:84:bc:8a:7d:fb:6d:67:60:36:38:
         74:44:53:99:c4:af:f7:66:3f:31:46:39:54:09:01:34:6f:f0:
         bb:00:70:c0:c8:dc:18:08:de:b9:37:6c:65:02:45:cc:f5:c3:
         57:29:e5:ee:e5:e9:f2:61:33:1f:6c:2a:96:a2:60:29:82:43:
         8b:88:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:11 2026 by rpki-client