Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
File:                     poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json)
Hash identifier:          HW6Y2pWhHr230mw+KzRtkOg6/wR7gFbmTGypWnrY8BU=
Subject key identifier:   79:5F:23:05:60:A9:87:1D:39:05:91:05:43:E1:5D:A7:33:36:39:DE
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       0478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
Manifest number:          046A
Signing time:             Mon 15 Jun 2026 00:10:22 +0000
Manifest this update:     Mon 15 Jun 2026 00:10:22 +0000
Manifest next update:     Mon 22 Jun 2026 00:10:22 +0000
Files and hashes:         1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: A9t6QqkWPrKRDRpg2YIdIM0rFcXmjIy6nKhSpqFk0Og=)
                          2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: BOEExBy+QaPnsKDJ+gbhFQuFa7d7NxoUneMKG9j7QtI=)
                          3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: G+lt/1Mwh8N7G8KWZS1xUI3dDM2zaitfuprZkeWdjHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 00:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Jun 15 00:10:22 2026 GMT
            Not After : Jun 22 00:10:22 2026 GMT
        Subject: CN=6a2f42ee-60ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:7c:eb:08:5a:26:ae:99:8c:74:22:1a:29:
                    96:17:4d:56:14:eb:32:36:f3:2c:f5:70:aa:75:56:
                    eb:88:aa:77:fc:01:05:89:59:6f:90:6f:f1:df:ab:
                    b0:a6:d1:d2:69:7c:a0:f7:10:04:9e:b2:9e:cf:77:
                    19:64:96:15:58:e1:7a:bf:28:18:97:6a:0a:52:46:
                    35:65:0e:93:f0:af:b9:b2:93:36:6a:67:e5:df:45:
                    6a:9a:85:f5:54:4e:8f:56:ac:f5:01:86:ba:a4:67:
                    d7:d6:66:c2:5e:b9:a3:1a:76:23:fe:be:0d:3f:d4:
                    86:bb:b5:9d:00:3d:a9:9d:0e:77:07:b2:8c:7c:c9:
                    73:8f:74:d6:a4:9c:f6:75:6b:a5:5e:b0:55:12:7c:
                    19:61:40:c9:30:30:44:6f:0e:10:59:f3:38:d6:09:
                    60:83:e6:e4:3d:f7:a1:39:8d:42:3b:9f:07:25:85:
                    d1:c1:9c:6d:22:74:88:18:5e:8c:5c:a4:9c:ae:64:
                    d4:4a:d1:90:0b:55:c9:86:c4:9c:8a:ae:7d:03:de:
                    7f:63:3f:21:cd:b8:40:db:f6:a4:2d:b8:3b:6b:70:
                    ba:27:c7:8b:9f:e1:b3:73:b1:a5:58:93:06:06:fa:
                    fb:81:d0:3a:e9:2d:fa:5f:9d:b5:27:9e:e6:da:60:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5F:23:05:60:A9:87:1D:39:05:91:05:43:E1:5D:A7:33:36:39:DE
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:94:0e:ce:c9:6e:59:03:94:5d:cf:0a:e8:c9:64:8d:83:19:
         5c:51:46:1f:d9:21:94:f4:d6:d6:b3:3b:42:e8:69:71:b7:1a:
         ba:63:b5:b7:a3:94:d6:3b:31:d5:b7:ea:e2:e0:48:c8:43:99:
         07:aa:12:89:db:13:db:04:2e:63:68:41:96:f4:69:f7:54:85:
         29:f3:d4:e3:76:ee:c8:88:56:fa:44:f6:8e:fc:d6:dc:dd:5c:
         39:b5:02:56:37:f6:b3:fd:6a:3a:ea:3d:cb:54:c7:fb:08:df:
         c5:bd:ea:35:a4:36:f8:6e:01:3b:fe:11:8c:21:47:21:94:06:
         e9:dd:30:27:2a:2b:4b:43:75:f0:c0:c5:46:1d:be:12:a3:5a:
         5d:50:32:92:8b:35:5b:de:c3:8f:7a:82:25:e6:89:81:fd:f4:
         fb:6b:ff:25:23:9a:2c:cc:a5:b7:51:20:da:11:d2:ae:87:a2:
         72:c3:c6:22:c6:7f:aa:bd:7e:80:cc:da:77:1e:65:09:2d:e6:
         97:45:61:e5:28:4d:0c:91:52:41:80:68:4f:4c:90:ba:bc:8c:
         3e:26:6b:90:9f:9b:1a:aa:a1:41:67:e2:36:59:e7:0d:c3:6a:
         c9:4e:cd:7f:84:3f:b9:d6:55:06:9a:84:64:a5:3f:71:25:de:
         59:02:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:45:06 2026 by rpki-client