Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File:                     5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier:          O5Z6hI5XIlzL0cAr9Nw5ZzCEI/cGxAmQEohS/mnu18o=
Subject key identifier:   58:BC:AD:ED:10:66:89:7B:68:C9:21:F8:EA:7B:02:E0:0F:07:A6:02
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer:       /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial:       07C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number:          22F4
Signing time:             Tue 02 Jun 2026 15:55:49 +0000
Manifest this update:     Tue 02 Jun 2026 15:55:48 +0000
Manifest next update:     Tue 09 Jun 2026 15:55:48 +0000
Files and hashes:         1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: Y20995s1W/5c7G9sJQ/TMmnpGSzkTPAn27VNt4bxYEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986 (0x7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
        Validity
            Not Before: Jun  2 15:55:48 2026 GMT
            Not After : Jun  9 15:55:48 2026 GMT
        Subject: CN=6a1efd05-9ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:03:6c:1b:92:99:14:ad:d0:23:42:e9:aa:
                    d5:bb:1e:dd:b0:47:e4:79:4f:29:58:61:6d:f8:6f:
                    89:0b:b5:73:93:41:a4:70:31:a7:81:7b:9f:b0:4d:
                    f7:d7:07:ff:cf:25:42:9e:b6:52:8f:e0:52:53:6e:
                    0c:5c:1c:8d:41:79:d1:a2:ba:38:3a:42:01:12:22:
                    4b:c7:7f:26:05:98:0a:38:f1:64:db:ec:67:94:a1:
                    6c:55:69:69:58:6b:25:b8:7d:90:2d:c8:4d:07:1c:
                    91:af:bc:26:fb:89:1b:e5:76:44:a7:e1:84:ff:6a:
                    64:96:79:7c:59:8a:f5:a5:7d:92:7c:f1:eb:31:e8:
                    91:59:b4:9d:d6:7c:6e:3e:65:aa:b2:69:0c:7a:c1:
                    6b:5a:cd:9b:41:4f:bd:a5:5b:6e:e9:05:d9:3e:28:
                    55:04:f9:fd:fa:18:ad:da:2d:c5:ce:4f:7b:14:1c:
                    4f:f5:55:cd:ea:b8:9c:67:47:5d:25:29:88:1a:77:
                    1d:47:5a:be:ba:90:b5:90:81:22:02:2f:0a:6a:34:
                    28:56:2e:fd:26:96:39:14:1c:e7:f9:2c:ff:db:3a:
                    8f:91:06:bd:03:54:4a:bb:9b:65:1f:20:1d:6b:aa:
                    6f:e1:83:92:3b:ad:23:f1:27:d7:53:54:d9:66:54:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:AD:ED:10:66:89:7B:68:C9:21:F8:EA:7B:02:E0:0F:07:A6:02
            X509v3 Authority Key Identifier:
                keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6a:4a:93:38:26:cd:98:66:cd:9f:47:ea:71:d1:68:d5:60:
         3e:f9:92:b3:5f:8e:a5:98:dd:64:da:93:1a:7b:bb:45:04:32:
         9d:df:9c:d1:0f:3d:f4:d7:37:4e:32:6c:d4:49:93:e6:6e:3b:
         9c:9e:af:8f:41:20:65:a5:f1:0a:6f:5f:a8:1a:70:6c:49:a5:
         e1:1a:c4:f4:a2:92:93:17:2c:0b:64:e2:38:46:d7:cd:b1:a1:
         bd:70:d4:42:eb:69:5f:50:36:80:53:62:84:7d:6b:99:00:ea:
         80:eb:61:60:53:27:bd:b5:24:f9:23:c4:72:4a:f2:5a:89:c4:
         24:c3:c7:02:63:f8:d7:3e:4c:98:72:29:9e:70:4b:02:a0:c2:
         35:54:87:d6:a4:29:a6:b7:9c:3a:2c:de:00:7f:6f:a3:ca:eb:
         d4:85:20:af:8d:12:3d:c0:b2:21:23:ea:ec:28:28:c0:73:fa:
         70:0f:8e:8a:56:83:43:7d:76:db:e1:8f:ad:d0:1c:af:8e:6e:
         d2:82:69:4f:6e:2b:85:3d:02:f9:c7:17:d8:51:c6:35:a5:9a:
         ba:33:15:8f:83:1b:07:d5:45:85:5b:6d:d4:1d:82:e0:a2:58:
         b8:e7:1f:7e:b0:d3:e8:a4:5b:fb:c1:d0:c5:7a:fd:3e:a2:40:
         20:4e:5d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:32 2026 by rpki-client