Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File:                     mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier:          zbbhqFz2KxeRXQyMGRPq64pdE9Nue73734nA3DxGUyY=
Subject key identifier:   6A:4B:DE:A1:51:E2:6E:6F:46:F8:4F:F8:EE:DF:B5:47:96:16:59:29
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer:       /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number:          51
Signing time:             Mon 01 Jun 2026 09:05:37 +0000
Manifest this update:     Mon 01 Jun 2026 09:05:37 +0000
Manifest next update:     Mon 08 Jun 2026 09:05:37 +0000
Files and hashes:         1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: ZGAKBcmygjY8xWNgH+zY5bdSxFP3ATaxBZpOfMzJBqc=)
                          2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: 18c0IjqREvvCbFh1OonuDqpoKVFbN0WBr8JimtNfp4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
        Validity
            Not Before: Jun  1 09:05:37 2026 GMT
            Not After : Jun  8 09:05:37 2026 GMT
        Subject: CN=6a1d4b61-c138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:06:05:9e:29:0e:9c:5b:95:5c:1e:bc:62:
                    96:7a:fc:5e:85:d5:b1:75:c3:68:9d:83:96:e1:7f:
                    26:a6:ff:b0:dd:d3:e4:13:20:18:f2:11:2e:67:23:
                    08:9d:9c:2b:aa:a2:da:88:02:6f:7a:1d:09:2a:92:
                    79:15:15:ac:f4:80:df:3a:fb:fe:b1:16:35:33:7c:
                    15:b6:dc:08:bc:33:41:81:23:1b:fa:7c:16:fd:20:
                    6c:4f:e1:36:59:bd:50:62:ec:75:be:9b:99:4e:63:
                    8e:e1:e9:88:50:81:e2:cf:a5:7a:a2:a6:3f:4e:f8:
                    5d:4b:60:a0:5b:5d:f0:19:a5:ae:70:55:88:b4:db:
                    cb:81:af:92:3d:23:51:f6:27:e3:e8:68:dc:34:14:
                    2e:c1:8a:66:e5:a6:bb:41:0e:bf:ac:21:aa:6f:d0:
                    5d:18:6c:c7:d2:42:66:63:34:15:d7:6a:31:71:2f:
                    b3:83:48:f1:0c:b1:c0:aa:f2:17:04:df:ad:8d:3b:
                    57:e7:92:27:50:1e:0b:b3:8b:92:c5:a9:7f:92:44:
                    d0:04:7f:6e:4d:0f:78:04:b4:37:12:33:c0:67:11:
                    f7:55:c1:8d:aa:d5:22:35:30:97:23:be:7c:54:f0:
                    39:01:a2:28:8d:23:8b:e5:30:19:b3:f0:1d:b3:13:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4B:DE:A1:51:E2:6E:6F:46:F8:4F:F8:EE:DF:B5:47:96:16:59:29
            X509v3 Authority Key Identifier:
                keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:37:7f:ef:9e:33:87:0f:2e:da:18:75:61:ab:de:6b:c6:
         ac:b0:77:c9:37:22:3c:15:18:b4:30:fa:8b:96:f6:90:11:91:
         49:f3:9a:bb:d2:57:55:80:8c:5f:53:b6:d4:f5:d0:02:4d:cd:
         ed:9c:c7:5b:d1:b0:08:08:8e:7c:bc:e4:e0:7f:41:44:b7:94:
         a4:1c:05:76:5c:79:f3:dc:0d:71:89:a8:45:33:60:8f:c4:9b:
         9b:96:16:8b:ad:63:44:f7:71:37:6b:b5:bd:e7:97:c3:09:e4:
         2c:93:35:ef:84:00:54:2d:95:56:46:71:28:4e:c4:57:e4:bd:
         20:71:b9:bc:00:17:8a:b5:48:6e:ba:84:e8:44:97:be:06:d5:
         74:b1:43:28:f3:a3:40:f4:12:6a:97:f1:74:71:59:be:4e:44:
         6e:fd:5b:ef:af:a6:5f:69:e5:1d:e3:9d:ca:76:ce:66:d6:c9:
         ef:99:ad:b6:ff:ba:4a:e5:2f:56:96:34:d8:43:70:9b:46:94:
         a0:49:ee:d6:c0:70:ce:e1:e2:ee:13:4f:78:a7:3b:9f:38:cf:
         d5:c5:e8:76:b3:7a:89:4b:fe:17:42:76:c7:71:77:be:3a:c3:
         7f:6c:0d:b8:07:1e:c7:28:2d:1f:76:c2:4d:59:c6:c1:f2:cb:
         df:46:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:39 2026 by rpki-client