Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
File:                     5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json)
Hash identifier:          IGkTM3byGELSiiqVjnHtnZHMbYv+8LS+Cc0BIBbLNJA=
Subject key identifier:   85:88:EA:25:4D:0C:05:15:FA:6A:F6:06:31:62:25:42:28:23:76:BE
Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83
Certificate issuer:       /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
Manifest number:          E1
Signing time:             Mon 01 Jun 2026 07:24:38 +0000
Manifest this update:     Mon 01 Jun 2026 07:24:38 +0000
Manifest next update:     Mon 08 Jun 2026 07:24:38 +0000
Files and hashes:         1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: RV5GDChgVeo1Qiu/edOfVtev9p7WpowHXfBwQGgZIa0=)
                          2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 0Pd2RnR3Fb00tGS21BR3ZHRM+0PBa1aIDio+p3wBXao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl
                          rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83
        Validity
            Not Before: Jun  1 07:24:38 2026 GMT
            Not After : Jun  8 07:24:38 2026 GMT
        Subject: CN=6a1d33b6-8460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:45:ba:62:a6:f2:35:f5:cb:b1:e4:94:5d:
                    0d:e5:62:21:53:34:51:5f:d6:33:e4:94:23:9e:fc:
                    63:74:c4:81:23:7a:77:04:c3:5d:ce:02:89:73:12:
                    42:bf:86:3e:ae:6a:fe:98:8a:10:e5:54:f5:8e:98:
                    47:25:ba:c9:6b:cb:4e:45:41:11:0a:85:68:87:33:
                    02:d9:10:4d:8c:b4:b5:37:76:60:58:32:cb:48:2c:
                    54:54:b7:9a:a3:34:22:6b:05:ba:fa:ab:45:1b:a2:
                    86:b2:50:de:c3:09:5a:d2:64:47:38:49:d9:91:b6:
                    cb:58:01:b1:05:46:73:92:69:5b:18:25:58:7f:89:
                    02:3b:fd:6b:9d:af:0c:46:81:cb:02:e6:b6:0a:a5:
                    ff:9d:b9:ea:c3:f3:ac:cf:4c:93:af:26:73:86:42:
                    93:b1:40:89:cb:62:6a:0a:8a:f6:26:af:39:01:92:
                    ca:8b:f3:cd:51:bd:46:ff:fd:8d:07:d0:6f:45:75:
                    8e:f5:7d:09:45:02:3a:24:77:f4:09:2f:6d:5b:5e:
                    56:22:fb:0d:c5:1e:08:32:e4:ff:11:0b:a5:85:bc:
                    4f:19:ae:83:c8:78:2d:84:45:9e:90:72:4d:32:59:
                    54:fe:ba:fc:4d:b0:a0:d8:ec:5d:d6:8c:e8:4c:6b:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:88:EA:25:4D:0C:05:15:FA:6A:F6:06:31:62:25:42:28:23:76:BE
            X509v3 Authority Key Identifier:
                keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:83:b1:1a:c3:ae:11:42:35:4d:61:10:ea:fd:3f:53:8a:ae:
         1a:5a:64:09:5f:09:5e:de:d0:ff:a3:88:29:39:75:01:df:64:
         46:e9:da:62:96:c2:2e:50:0b:63:9d:5f:20:5c:a0:b9:7b:c7:
         e4:18:7e:f9:fa:7d:8a:47:77:ea:06:a4:f5:7b:0c:75:38:50:
         69:a8:35:c5:07:e6:81:97:cc:18:e9:de:70:6a:ab:8c:7c:cc:
         fb:a8:9c:5e:2b:8d:94:f9:56:b2:6b:a3:68:0e:d4:59:86:ed:
         f2:ae:ba:bd:ae:ac:c1:2a:4c:25:70:c6:9b:d1:cb:be:88:b4:
         ec:6b:cc:77:f7:79:5f:18:14:8f:b7:8d:b4:05:52:e9:8e:d5:
         b4:90:e9:1d:28:53:1c:82:4b:e7:7b:6b:cc:1d:e7:a0:e9:46:
         81:63:2c:13:24:8c:53:78:27:e2:45:97:32:d5:ab:b7:9c:71:
         18:fc:3c:b9:8a:6a:ef:81:4a:91:93:e3:bd:4d:99:0e:8f:25:
         66:72:ed:64:e3:df:9d:39:01:1b:65:bb:f0:0e:1f:c4:f0:af:
         a9:f4:c4:37:54:a4:89:6a:91:4a:42:4f:dd:e9:21:45:5f:f7:
         c3:b2:26:30:2f:d2:88:3d:70:17:89:15:71:45:01:43:53:59:
         c6:ec:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:11 2026 by rpki-client