Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File:                     CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier:          VRzyfI2LyBUQhfuzdyjom+mE7nv1KDHybvt4eCGcJvQ=
Subject key identifier:   0D:B8:68:D5:97:D9:68:08:94:E4:6C:4E:8C:FF:FA:EC:60:42:66:D9
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer:       /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial:       0589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number:          0581
Signing time:             Sun 14 Jun 2026 23:18:12 +0000
Manifest this update:     Sun 14 Jun 2026 23:18:12 +0000
Manifest next update:     Sun 21 Jun 2026 23:18:12 +0000
Files and hashes:         1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: nkcmIap+flibl2oRAUvkVVP1K7HgKBgJGBWmTON+oUc=)
                          2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: W1EP3IxXiJCk2UOf11rTChQuuxRnXDrkYltbGuUo73Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 23:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
        Validity
            Not Before: Jun 14 23:18:12 2026 GMT
            Not After : Jun 21 23:18:12 2026 GMT
        Subject: CN=6a2f36b4-1716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:23:d2:68:be:49:14:dc:87:87:50:a6:10:
                    f7:5b:82:25:46:5e:23:22:dd:cb:3e:45:73:4e:3c:
                    d1:6a:e0:6d:6f:24:01:89:c9:5c:ea:89:41:c4:ad:
                    35:db:23:69:35:0b:02:2a:57:a0:1b:83:98:4c:9d:
                    e6:fe:6b:e4:a2:40:e3:41:d6:98:3d:52:0d:53:79:
                    1a:99:19:f4:f7:bb:2e:61:e4:f3:dd:e9:46:06:57:
                    e4:6d:ab:9a:a0:69:55:a4:fd:88:64:0a:75:f2:df:
                    f5:fa:15:58:6a:f4:12:1c:9e:43:54:3f:2c:e0:3f:
                    63:45:25:f5:7f:b8:da:c6:10:30:1d:d9:c3:bd:11:
                    e2:d8:79:e5:0d:0a:e0:f3:d3:ce:42:79:d6:6f:bd:
                    27:12:b6:dc:15:11:11:9f:8f:3d:70:9d:b9:1c:dd:
                    c0:f2:ec:c5:68:ab:e7:bf:ff:cf:bd:d0:49:61:1c:
                    4c:81:f7:cd:db:ac:3c:28:6d:3f:c8:0d:e6:99:e2:
                    ac:57:34:05:57:2d:6d:eb:61:6d:57:57:23:5b:ac:
                    8a:8d:a6:ea:c9:fb:f9:39:4e:c5:28:b5:6f:61:4d:
                    74:d8:23:6e:3f:62:01:53:2a:7b:8e:0b:88:c5:53:
                    71:e7:5a:67:42:0c:bc:c9:6b:37:64:88:58:df:25:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:68:D5:97:D9:68:08:94:E4:6C:4E:8C:FF:FA:EC:60:42:66:D9
            X509v3 Authority Key Identifier:
                keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c6:54:3c:38:da:8d:78:f0:ca:d4:ee:f6:6f:6f:a4:33:e3:
         19:07:16:51:96:18:93:f5:77:b1:ce:47:e7:6c:b6:64:b6:13:
         59:a1:e2:ae:4e:e6:f7:43:a4:4b:52:bf:e4:a9:a3:30:09:77:
         cb:6a:5c:71:a6:09:b0:9c:3a:ec:60:e6:5d:16:da:5f:47:03:
         30:b7:af:fe:4d:d7:f5:d3:02:dc:09:a4:5f:65:67:88:08:99:
         89:9e:80:c8:66:58:48:29:38:12:c3:48:e9:a7:60:bd:e8:3e:
         bf:9f:8c:97:c1:e5:86:e9:a0:ba:8f:aa:7c:fa:3e:f0:b2:34:
         ce:cb:76:f7:e3:d1:01:54:3b:44:bf:ce:4a:06:58:27:96:89:
         4c:a2:5c:19:60:91:b0:5b:15:5a:cf:1e:b6:a9:b8:26:c2:0a:
         b9:39:77:fd:af:8b:79:73:38:b7:8b:5d:27:d9:20:f0:b0:e6:
         c9:cf:84:dc:7c:1e:d2:03:e6:53:6b:a5:f4:44:41:a1:30:1d:
         30:9c:47:01:67:c7:4f:26:0e:f6:92:1c:2f:c3:cd:0b:50:b8:
         39:fd:8f:d3:fb:dc:a4:87:be:f3:af:4b:b6:2f:67:c3:ff:3b:
         ae:bc:df:bb:e8:ca:fb:6d:8e:5a:4e:b6:20:7e:65:4b:a6:73:
         08:25:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 09:28:48 2026 by rpki-client