Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          5rlNYJtnGAfbtwR9ywjirWK47CXkw8nCzqQtdbz663g=
Subject key identifier:   40:45:28:3B:6A:88:EC:79:06:AC:D9:D9:54:54:7B:E7:65:90:49:04
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          FE
Signing time:             Mon 01 Jun 2026 07:02:36 +0000
Manifest this update:     Mon 01 Jun 2026 07:02:35 +0000
Manifest next update:     Mon 08 Jun 2026 07:02:35 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: DaWhoeCXGkkiiuLe3rOPyPkJbfRBDVA26p5guPrxgkY=)
                          2: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
                          3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
                          4: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Jun  1 07:02:35 2026 GMT
            Not After : Jun  8 07:02:35 2026 GMT
        Subject: CN=6a1d2e8c-fe07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:5c:c1:2b:df:0a:2e:d1:82:81:8e:4f:50:
                    cf:55:e4:28:39:66:0f:a2:9e:71:a1:8e:ea:17:fb:
                    89:45:9b:1a:68:7d:7c:84:f7:dc:09:5c:99:a0:bd:
                    97:d2:76:2a:03:17:c1:c6:8f:ea:ea:f4:87:41:b7:
                    67:2c:bf:1c:87:79:4f:de:b0:04:0c:74:76:ce:c8:
                    bc:76:a1:33:d6:51:f5:bc:76:b3:8d:98:7f:fe:c2:
                    31:c9:61:04:d0:20:5c:bd:46:7e:5b:ad:f2:0b:3b:
                    1c:fd:b7:30:0f:7a:ae:40:24:d6:82:82:c6:df:5e:
                    0a:6c:4a:35:61:b3:3f:e5:61:74:f1:1d:a4:98:42:
                    7e:a1:ac:90:b8:8b:4d:6e:b7:e3:46:c5:b5:3a:35:
                    de:10:49:a7:d6:b4:89:3a:3b:12:6b:6d:81:09:1f:
                    b2:af:be:fa:66:d1:34:86:0e:57:44:ab:a6:1e:f0:
                    b5:3e:a0:34:e2:61:0b:07:b3:a7:15:20:e7:13:4a:
                    de:51:ae:e7:b4:03:d0:57:3f:56:5f:3a:68:b2:e3:
                    54:11:2f:d7:a6:35:91:e6:24:6d:6d:15:b8:9b:a7:
                    9b:c7:64:7b:97:4b:ff:a8:43:63:0a:27:82:3b:b9:
                    d3:5f:d2:c2:2a:fe:21:5e:1b:6d:4c:89:91:b7:3f:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:45:28:3B:6A:88:EC:79:06:AC:D9:D9:54:54:7B:E7:65:90:49:04
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:1e:28:50:ac:b5:e4:c9:32:9f:7b:39:37:ea:8c:af:71:
         33:d4:9d:00:70:b1:ab:7e:32:fc:df:f6:40:00:64:82:a4:86:
         2d:51:44:57:c5:ad:ff:20:8c:05:57:ee:e7:58:78:37:27:1b:
         5d:d4:43:3e:01:59:f9:ad:0c:97:0a:d0:20:ca:dd:06:79:91:
         4c:05:bd:c3:36:08:0e:08:94:dc:e3:6b:c2:d1:78:c3:9c:98:
         57:45:bb:7c:12:59:e0:cb:fa:4d:b7:63:cc:fa:a9:cd:61:a4:
         d8:53:81:6d:93:4b:71:cc:b1:0c:9d:06:d9:71:c3:17:44:d1:
         87:1d:e2:1e:12:88:71:54:db:0c:9e:a1:af:60:fe:df:61:37:
         12:27:cd:47:5a:8b:19:f8:d4:03:76:db:ba:4a:c6:6f:9d:62:
         16:e0:11:3a:b8:4b:61:26:68:13:74:f9:22:ad:78:16:f6:08:
         10:1f:76:d7:04:54:19:ec:a6:16:f1:e9:43:e2:f0:8f:f2:f7:
         de:91:fe:5b:a3:3f:0d:2a:bf:9e:44:a0:fb:8e:ca:1c:b2:c2:
         c8:0c:29:08:7b:44:39:12:2b:cd:23:67:7b:f6:7e:f8:12:7d:
         be:e5:25:70:55:d9:2b:e8:06:34:b3:85:c0:6b:6b:4c:f4:22:
         37:3e:d7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:58:48 2026 by rpki-client