Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
File:                     0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json)
Hash identifier:          25ziYBWADC8M8lWX+bYDMvtId1atfB14vFQuCWgxanA=
Subject key identifier:   EF:3F:B1:BC:BB:F2:E3:E3:9E:50:72:52:49:F5:20:88:45:1C:12:75
Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
Certificate issuer:       /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
Manifest number:          05D4
Signing time:             Sun 31 May 2026 23:43:04 +0000
Manifest this update:     Sun 31 May 2026 23:43:04 +0000
Manifest next update:     Sun 07 Jun 2026 23:43:04 +0000
Files and hashes:         1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: bYHnJiZD0JzFFvnh3/NNVCL7EkdCqxLiitgshCSnFJ4=)
                          2: C6212596B5FF11F0A3F6A41AC4F9AE02.roa (hash: vjcVmpY5exF0KvvFr7MQCETy6G444Gcd8QqEnM4obso=)
                          3: 9CD333C6B92B11F09402D810C4F9AE02.roa (hash: g/iViSJomlNp1cYO1eJotO/CO79RIUjeoIEUf9uvmn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 23:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
        Validity
            Not Before: May 31 23:43:04 2026 GMT
            Not After : Jun  7 23:43:04 2026 GMT
        Subject: CN=6a1cc788-f65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:cc:c3:c9:dd:65:f6:10:04:22:eb:18:e3:
                    7f:14:63:69:04:69:5c:29:f0:65:db:58:08:df:e3:
                    55:45:fa:a6:98:a9:1d:e8:e4:a3:bf:74:7e:02:49:
                    7c:b8:11:7c:5d:e0:04:af:e7:81:50:62:30:71:d8:
                    85:8d:31:06:51:dd:fc:63:e8:72:d4:d6:f7:4f:e0:
                    87:62:bd:7d:60:10:ea:8b:33:3d:a7:c1:12:12:6e:
                    48:31:50:1d:77:aa:84:a4:01:42:93:85:7b:7d:87:
                    1c:4e:8d:c0:78:95:1c:9c:22:b8:9e:6a:54:f3:7a:
                    91:73:63:23:5c:eb:d3:58:c6:68:3b:90:ce:d2:8b:
                    44:0e:9a:fe:4f:d5:1f:1b:00:53:30:e4:4f:5c:47:
                    26:bd:2d:bb:a7:8f:c9:5c:5b:da:a0:8a:bf:fb:5e:
                    4a:11:12:b6:06:31:27:a0:07:3d:39:1d:12:6b:68:
                    8b:f4:5d:56:3b:24:ba:55:ff:8d:0c:e5:e3:f8:82:
                    11:5a:4c:1c:d6:47:45:d1:50:f0:07:3d:7d:7e:1d:
                    17:77:25:ae:8b:3c:0e:46:5c:ba:8c:ac:bd:51:8e:
                    da:8c:33:5c:b8:80:30:72:6a:ee:8a:67:4e:1d:1c:
                    d0:16:27:34:02:df:02:b2:8f:f9:8d:50:e8:ea:39:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3F:B1:BC:BB:F2:E3:E3:9E:50:72:52:49:F5:20:88:45:1C:12:75
            X509v3 Authority Key Identifier:
                keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bb:50:b3:15:66:23:df:33:f0:43:56:5b:8f:2c:91:92:26:
         62:44:98:7b:ae:fe:5f:aa:e3:4a:bd:cb:bf:a9:86:e5:92:82:
         1d:d5:f1:94:d9:8d:a5:21:3c:f2:09:75:22:c9:8f:7a:5f:53:
         d4:81:61:6b:16:9f:f4:16:f8:08:b9:b6:98:57:c9:e5:6a:53:
         72:50:26:df:72:71:e4:8c:01:c3:21:ac:23:71:96:29:32:15:
         81:4e:32:51:0e:ad:6f:18:0d:68:56:b5:86:fc:ec:84:5c:5e:
         01:f7:df:c1:a6:ef:49:6e:f6:5c:8d:a3:93:e6:d2:f9:5d:5b:
         81:27:4e:ca:ae:2e:80:12:a7:08:87:9f:b3:fe:f7:05:80:56:
         aa:d0:9a:51:3f:e4:b0:f3:bd:ec:6c:8f:06:f0:54:2c:8c:2b:
         6f:21:ea:51:21:1b:d4:3c:50:a5:de:af:e8:40:4d:bf:08:b8:
         01:bd:f9:a3:89:39:96:bb:5a:ea:8e:b8:08:cc:ec:37:69:9e:
         7b:a7:1d:cc:e6:07:b5:dc:21:cf:7e:95:71:f0:3c:03:f2:2c:
         b3:a5:f7:0a:8f:2c:e7:b3:ae:af:00:d9:cf:a3:a5:2c:ac:25:
         9e:df:86:a6:f8:4b:81:98:be:bb:dd:7c:c4:2e:3b:1b:b0:61:
         eb:89:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:26 2026 by rpki-client