Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
File:                     vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json)
Hash identifier:          g27c42klz5zjHJCbB3t23K/bR0R2zkWjswFWD4wLjkY=
Subject key identifier:   FB:45:B5:8F:DC:4C:6F:5E:A2:66:75:20:64:30:87:38:59:D2:F2:5A
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Certificate issuer:       /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial:       0606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
Manifest number:          05F6
Signing time:             Wed 20 May 2026 22:58:16 +0000
Manifest this update:     Wed 20 May 2026 22:58:16 +0000
Manifest next update:     Wed 27 May 2026 22:58:16 +0000
Files and hashes:         1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: U6wIqlmQfWvvCl0gzlZbc5xbS6tfYNIGtACZ/p0H0xk=)
                          2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: H+/gL9GOC5rLy94c2j0ly4aLXYfukKwRD5D8FRI8cvw=)
                          3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: 5AtvjYv/5JBxLgDIDbG/ZJKbMg4yztkVNaeXKIlbHXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
        Validity
            Not Before: May 20 22:58:16 2026 GMT
            Not After : May 27 22:58:16 2026 GMT
        Subject: CN=6a0e3c88-4689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:62:3b:7f:5b:67:e3:10:16:53:72:08:e2:
                    c2:16:c6:01:7e:8a:a8:b3:f5:ec:7c:18:16:94:f4:
                    39:2c:27:04:cb:62:64:08:10:64:d6:cc:a7:40:a3:
                    13:b6:e8:82:14:3c:fd:00:40:bf:e9:81:25:b6:27:
                    09:51:03:ac:35:8f:d0:f2:5e:32:6f:16:09:70:d5:
                    b8:ea:22:e6:44:4e:e6:fd:d2:1a:9d:19:93:6c:6a:
                    72:a3:11:c0:e3:3a:b7:f7:d9:62:b6:b6:50:3e:7a:
                    15:93:61:42:31:fe:83:22:ab:71:d3:06:f7:5a:4d:
                    65:53:85:61:7b:0c:70:30:7a:d1:f6:c9:ae:e6:af:
                    27:67:75:1b:d9:c4:a3:b7:26:c2:a7:94:65:16:bb:
                    1e:7c:9f:2e:9b:d3:df:b9:c4:14:b3:7c:9e:43:3f:
                    af:77:c3:16:d4:63:2f:a9:58:03:fb:84:86:2e:eb:
                    40:07:b4:37:ba:0a:7d:8a:d6:43:1b:78:a0:e8:de:
                    60:93:5c:7c:89:82:4c:e6:76:d7:fb:ca:e8:ac:e9:
                    3c:46:8f:87:96:4f:9a:d3:86:17:53:1d:06:16:25:
                    65:d4:6f:a4:a1:41:58:b5:6a:16:54:5f:76:66:db:
                    cb:d7:8a:6a:03:b7:e2:61:55:a7:b9:33:6d:07:cd:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:B5:8F:DC:4C:6F:5E:A2:66:75:20:64:30:87:38:59:D2:F2:5A
            X509v3 Authority Key Identifier:
                keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:3f:b0:d0:d4:77:97:21:a6:e8:06:bf:a6:64:12:56:27:45:
         f3:39:ad:86:ab:60:2f:12:c4:8d:01:d1:8c:f4:82:39:62:b4:
         73:38:3e:44:55:64:6d:8b:28:eb:db:f4:fd:c5:ab:7c:df:6d:
         aa:c6:99:fb:53:2c:43:d4:c5:82:62:15:96:36:44:0e:ba:6f:
         49:30:27:e0:3e:23:2d:98:4b:44:ab:1f:af:e3:82:73:81:f4:
         94:7f:b6:e4:44:96:9f:7e:c0:3a:1c:f0:ae:1e:0c:5d:2d:05:
         7b:43:db:48:bc:57:e1:b2:c4:0a:b0:7d:e1:49:c8:7e:fb:4b:
         f3:d6:f6:bc:35:c4:cc:ee:69:0c:4d:57:5c:59:94:a5:7d:7d:
         a2:b1:a8:e5:c9:cb:7b:6b:ab:13:68:eb:fe:be:61:a3:56:e8:
         f9:94:00:99:be:79:5f:87:d3:8d:36:14:33:00:94:8d:a3:cf:
         db:fb:a6:9f:b1:e8:ba:81:2b:e4:d7:e1:bd:ff:d9:5b:2e:1d:
         fd:c8:1a:f3:3d:50:4e:e8:54:03:4c:19:0f:e2:09:ab:f2:59:
         b2:46:c5:3c:47:eb:f4:b0:19:64:6f:76:59:91:36:a1:c4:a9:
         fa:7c:1c:33:e2:42:9a:2c:b6:77:17:93:af:08:9f:f6:ed:4d:
         f1:2e:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:27 2026 by rpki-client