Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
File:                     dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json)
Hash identifier:          /U/YE4qzpJAyZynQCYdgV97pptNG2usMkHxyxweEGQU=
Subject key identifier:   D4:AA:1D:AE:DA:AF:3A:5A:6A:4F:CC:B7:E0:EB:39:E3:57:EE:F8:EC
Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
Certificate issuer:       /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Certificate serial:       06C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
Manifest number:          06B0
Signing time:             Wed 20 May 2026 22:27:46 +0000
Manifest this update:     Wed 20 May 2026 22:27:46 +0000
Manifest next update:     Wed 27 May 2026 22:27:46 +0000
Files and hashes:         1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: NFur9H6/v+2KWKhWiitYB3K6dnAGrSvJOE0LR6rwVgk=)
                          2: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 8aY/L8nAVzgyjTW/6jXj10GkNKuhhpPDhGncvfwb/Bc=)
                          3: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: qSB4ftjX3kA4tLaGQ98+0+IxSSCm+dtpWVZIBrMu7h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1733 (0x6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
        Validity
            Not Before: May 20 22:27:46 2026 GMT
            Not After : May 27 22:27:46 2026 GMT
        Subject: CN=6a0e3562-ad69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:9c:2e:08:a8:39:1b:a4:8f:4e:ee:f0:a6:
                    2e:85:5d:77:46:0f:38:c3:46:8a:31:df:de:e5:ca:
                    ca:19:39:01:62:10:2b:e5:b3:da:89:db:00:a3:bd:
                    87:9b:85:f3:a3:53:bc:58:6e:f1:9b:89:f0:af:be:
                    9a:c5:a9:41:b3:f2:13:2b:9a:24:6b:9b:d5:9f:56:
                    0c:3c:07:4d:ca:f0:f1:7b:9a:78:d7:51:25:b5:5d:
                    0b:cf:bc:da:e6:da:32:18:2b:a3:e0:77:48:32:90:
                    cd:6b:8e:71:04:eb:47:4f:aa:83:ff:5f:f0:be:79:
                    76:f2:2e:48:41:bb:1d:0f:e9:3a:a1:ce:2b:ef:fd:
                    8b:ab:4a:77:c3:ba:71:c3:07:54:dd:1b:84:e5:b2:
                    27:1a:da:03:69:91:a0:a2:91:aa:5d:9d:cf:ae:5d:
                    85:63:08:43:cb:a9:81:9a:7f:99:e8:b9:21:1d:d1:
                    82:6f:7f:97:d1:12:8d:a0:be:4a:0c:73:0c:c8:13:
                    a9:c9:2c:2f:ab:7c:57:44:34:f5:45:6c:ec:a7:f7:
                    7d:fb:ae:d7:9a:2f:df:4d:b3:28:59:7a:d3:f1:af:
                    ed:f8:a2:7b:36:a0:30:a1:8b:da:91:f3:3a:d7:b3:
                    60:8e:c4:d4:28:3d:92:a3:8e:b6:ff:06:b9:43:f1:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:1D:AE:DA:AF:3A:5A:6A:4F:CC:B7:E0:EB:39:E3:57:EE:F8:EC
            X509v3 Authority Key Identifier:
                keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4e:ca:df:fa:79:31:72:c2:45:5f:1f:ef:be:e9:52:f3:0c:
         22:5f:53:9b:20:73:59:2a:ed:ab:63:6d:bf:77:10:fd:1f:23:
         1c:7c:ce:54:0c:68:b8:5c:ae:86:1a:0a:99:a2:49:09:d2:b8:
         f3:14:0f:a6:af:68:03:ea:82:19:1b:a6:20:83:47:f5:7a:98:
         24:f2:6b:93:29:e1:5e:b7:91:20:52:0f:62:39:cc:19:2d:94:
         5c:68:a2:b5:1e:91:ef:7e:89:9d:b3:ef:34:de:f2:f8:32:70:
         0d:64:3d:a6:d3:be:77:0b:e5:a7:f5:3c:11:0c:aa:80:a5:70:
         7a:03:73:80:34:53:a6:2e:02:9b:e4:32:59:da:ef:19:bc:e4:
         62:cd:87:3e:08:1d:3e:69:a7:45:e3:07:ac:34:74:d7:9b:66:
         81:0e:8d:1b:06:29:53:89:d4:e9:61:cd:d7:55:b0:d5:20:a6:
         d2:b2:dd:1c:65:f9:be:7d:20:6c:82:5f:6a:38:d9:ac:a1:c3:
         35:da:dd:c8:ed:1d:b1:a6:f4:bd:40:68:6a:ed:54:d4:b6:a7:
         26:29:f8:47:88:46:de:8d:6e:49:8a:12:e4:54:8c:a1:16:b0:
         1d:24:42:06:85:ae:74:ac:b7:a0:e9:d5:d6:94:dd:a3:40:57:
         47:51:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:56 2026 by rpki-client