Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File:                     X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier:          5/Vro8LRl2NUkfQIqgZfia5r3yXCuDfmBC7gX2tJWRo=
Subject key identifier:   6F:39:12:D5:5D:51:56:45:04:39:66:AE:0D:84:52:76:38:16:CB:29
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer:       /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial:       1EF7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number:          1E65
Signing time:             Thu 04 Jun 2026 16:04:43 +0000
Manifest this update:     Thu 04 Jun 2026 16:04:42 +0000
Manifest next update:     Thu 11 Jun 2026 16:04:42 +0000
Files and hashes:         1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: dptyuBlJIuJTFoX5x0ac5dTiG071gemPLBnJkyjSOtM=)
                          2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
                          3: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
                          4: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
                          5: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 16:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7927 (0x1ef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
        Validity
            Not Before: Jun  4 16:04:42 2026 GMT
            Not After : Jun 11 16:04:42 2026 GMT
        Subject: CN=6a21a21b-c0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:3a:cb:80:37:f0:b6:d3:76:81:59:05:6d:
                    ea:96:77:48:ac:59:75:74:7e:ec:73:56:95:d6:2a:
                    52:3b:5e:a9:06:ed:6c:40:ef:71:58:52:e0:2e:63:
                    e5:75:8e:05:18:e3:08:aa:55:7d:6a:90:84:ab:11:
                    d5:8a:61:5d:88:cd:e7:80:4e:10:c3:cd:85:a8:5e:
                    c4:4d:f4:10:bf:59:4d:63:f9:b2:2b:b4:25:12:7b:
                    d0:37:39:72:ac:68:38:97:54:dc:f0:0b:eb:46:17:
                    a5:f7:81:92:21:c0:3d:28:52:3d:51:a4:4c:98:96:
                    82:4b:9b:95:6f:48:df:e5:95:e8:ed:cd:21:41:65:
                    0b:b6:38:42:18:35:21:9a:6c:ad:de:8d:a3:dc:17:
                    74:a9:10:52:18:7f:b4:20:41:4c:4e:4b:cb:5b:ab:
                    01:37:87:20:15:fe:0b:d9:fd:78:eb:26:58:80:52:
                    81:ee:e9:ac:08:9a:66:f8:56:93:75:32:89:ac:a5:
                    eb:3a:30:31:78:4d:e6:ef:d7:21:43:f7:34:7b:75:
                    29:13:25:1a:d3:98:e1:03:a4:37:7b:b7:3e:c1:17:
                    ae:cb:d8:7e:d1:e7:3b:af:b2:f0:1d:3e:43:a0:ca:
                    f1:78:2d:ff:35:26:ea:3a:19:b4:cb:8e:38:ef:8a:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:12:D5:5D:51:56:45:04:39:66:AE:0D:84:52:76:38:16:CB:29
            X509v3 Authority Key Identifier:
                keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:ad:f9:b3:af:60:1b:9e:00:ff:81:2b:a7:5f:93:dd:c2:
         0e:4a:a3:57:3c:62:bb:61:f7:4c:1c:ed:0a:4c:12:97:4c:3c:
         f5:07:aa:89:2b:fd:fe:52:f9:00:8c:fe:9f:a4:a0:cb:3c:a6:
         ee:cb:a3:90:7b:13:df:5e:c6:1f:b9:de:b0:cc:6f:73:d6:c6:
         60:be:27:1c:0f:28:e1:93:89:8f:78:80:11:44:1f:3b:ce:5e:
         21:7e:11:05:fd:73:f8:e3:e9:34:d0:d2:3c:5c:9c:16:87:b5:
         d0:f2:c8:2c:26:a1:28:73:14:61:35:87:55:aa:93:64:48:06:
         ee:49:e4:c5:a3:93:0e:77:53:8a:a7:a2:ab:8e:e4:f2:ef:31:
         de:b0:55:ae:3d:9a:18:57:3d:31:06:a9:c5:e8:01:e1:bb:85:
         65:0a:83:64:41:54:2b:52:be:7e:ee:3e:1b:e7:d1:33:fe:68:
         ad:a3:2d:0b:f8:63:82:10:31:f5:4e:a5:a4:60:ae:e6:98:aa:
         3e:2a:22:37:9c:85:da:b8:cc:34:39:26:ad:af:15:26:24:b9:
         a6:d1:55:e8:a3:8c:ea:b4:2f:9e:f7:7e:ca:da:d2:9c:ef:78:
         1b:38:44:86:6e:83:fd:e9:2f:03:15:2a:fa:e8:d1:76:9c:34:
         26:fc:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:08 2026 by rpki-client