Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
File:                     MYH5m8WFngRexECQnaM0uPSdFtI.mft (raw, json)
Hash identifier:          GrxP6KWB+WvdOSOXRVJqOLL80YFl0cmrffoSXhH3s/s=
Subject key identifier:   10:00:BD:7D:F9:7B:60:D9:74:D0:70:3F:95:A6:F0:0A:A9:BC:63:8C
Authority key identifier: 31:81:F9:9B:C5:85:9E:04:5E:C4:40:90:9D:A3:34:B8:F4:9D:16:D2
Certificate issuer:       /CN=A91F7C06/serialNumber=3181F99BC5859E045EC440909DA334B8F49D16D2
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
Manifest number:          49
Signing time:             Mon 01 Jun 2026 09:12:20 +0000
Manifest this update:     Mon 01 Jun 2026 09:12:20 +0000
Manifest next update:     Mon 08 Jun 2026 09:12:20 +0000
Files and hashes:         1: MYH5m8WFngRexECQnaM0uPSdFtI.crl (hash: f4pU+R4fOM3+VPrkTK5PZur3X7VEtRbzRZ8nhTE17SE=)
                          2: F2229F54F6BD11F09D68ADA04A6F56BC.roa (hash: GPBxzgkKMaaG3/PAbiTitYUtRx+LwfxYpF4stDa35Tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C06, serialNumber=3181F99BC5859E045EC440909DA334B8F49D16D2
        Validity
            Not Before: Jun  1 09:12:20 2026 GMT
            Not After : Jun  8 09:12:20 2026 GMT
        Subject: CN=6a1d4cf4-af75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:32:0b:46:3c:c9:4a:77:b8:50:e5:70:3a:
                    23:57:03:1f:02:49:d3:0e:5a:10:5a:c0:29:ea:9c:
                    19:60:e1:15:35:b7:c3:de:67:89:f8:bb:39:44:46:
                    71:3c:cd:54:0d:bf:45:a1:55:3e:00:fb:d1:85:19:
                    34:cd:d3:1e:06:3f:ee:f6:02:ad:7e:70:c8:f8:67:
                    ac:c0:f5:20:f5:f5:28:ef:b8:78:fc:ce:82:cd:40:
                    56:85:1e:be:90:66:56:ba:56:0c:78:7d:fc:54:b5:
                    a6:d7:98:c8:7d:fa:38:fa:bf:05:24:0a:37:09:c4:
                    fc:7c:f3:35:17:95:36:a1:39:57:88:01:86:26:03:
                    b3:35:3a:5f:f0:e8:5a:89:e5:62:1a:4a:4b:e3:34:
                    02:d3:16:54:98:c9:f7:f6:a5:a2:12:f0:ce:2c:44:
                    a4:2c:42:e6:13:55:20:37:73:5e:c1:5e:5b:07:35:
                    c3:ea:f6:3c:06:95:5d:39:63:68:af:eb:a9:c9:26:
                    1d:2a:df:75:5b:60:e9:24:ed:7d:93:4c:10:06:c1:
                    97:b2:2d:11:d6:d8:35:31:a0:d5:f1:33:c1:a8:05:
                    45:97:b0:45:db:f6:bd:a3:90:59:0c:f0:cf:d4:9b:
                    5d:4e:84:c3:0c:35:f6:d3:bf:75:af:08:9d:bc:35:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:BD:7D:F9:7B:60:D9:74:D0:70:3F:95:A6:F0:0A:A9:BC:63:8C
            X509v3 Authority Key Identifier:
                keyid:31:81:F9:9B:C5:85:9E:04:5E:C4:40:90:9D:A3:34:B8:F4:9D:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:08:67:b0:2d:7e:b8:c7:2f:b2:da:72:5a:f5:6f:d8:b4:71:
         9c:4a:e4:c9:ed:08:79:a1:fd:e7:01:96:4f:bd:28:7a:03:5e:
         9c:fb:c4:0d:fc:7b:a3:3e:3b:db:4a:9c:bb:6e:3f:e9:d0:6b:
         36:24:be:0f:7e:c7:44:3b:5b:0c:dc:94:ec:64:bf:0e:7b:84:
         72:59:86:6b:02:f2:c1:4a:72:1f:c3:6c:d8:7b:d7:e1:60:e3:
         a4:bf:78:3c:0b:a0:cf:a6:3c:83:2d:48:56:9f:49:d8:0c:1c:
         82:78:bb:d4:7a:01:02:51:4c:de:d8:a4:8a:91:62:d8:eb:29:
         ed:43:ed:56:f8:43:d3:66:23:8e:a7:f3:40:f2:dc:a5:88:fe:
         1e:59:ec:78:14:8b:89:fe:63:b9:d5:e3:56:bb:ca:0c:44:03:
         1c:81:8d:ee:d2:e7:e8:31:03:f9:b7:8d:a7:52:27:da:a9:21:
         03:5b:42:54:48:d7:1c:79:75:16:66:21:03:aa:23:9c:08:84:
         17:90:7d:39:46:1d:0a:78:12:b2:74:18:33:ac:74:d8:32:c9:
         9f:3b:64:90:df:16:f5:de:14:75:d8:91:c0:f4:dd:fb:94:40:
         65:ed:2a:f5:64:46:d5:8d:5b:80:de:9f:86:c5:c4:05:39:44:
         08:b6:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:06:53 2026 by rpki-client