Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
File:                     sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json)
Hash identifier:          3jHi8dYRnvvBD0McPfjU3SWOtSBad6vASZeoQ54A6UM=
Subject key identifier:   6F:7F:7F:3C:9F:11:D5:D5:AA:6A:B0:B9:DD:DC:B9:BC:9F:52:B8:3B
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Certificate issuer:       /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial:       0672
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
Manifest number:          0645
Signing time:             Tue 12 May 2026 22:56:34 +0000
Manifest this update:     Tue 12 May 2026 22:56:34 +0000
Manifest next update:     Tue 19 May 2026 22:56:34 +0000
Files and hashes:         1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: 6kE/vtfCci6rtWXonNL2wnqHHQCtFzJX1yDT7Csdc0Y=)
                          2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: leZ0cCoOlR1k5yKepuZNpVBVHzz4KHAcvcnF8Cllio0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
                          rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
        Validity
            Not Before: May 12 22:56:34 2026 GMT
            Not After : May 19 22:56:34 2026 GMT
        Subject: CN=6a03b022-bf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:6f:f9:31:e7:d3:7a:95:b9:bb:68:35:e7:
                    80:8e:ff:ee:38:c7:0c:27:f4:d0:0e:62:7c:31:db:
                    c8:e5:df:10:d0:85:77:db:6f:93:c5:c1:71:92:21:
                    db:ca:dd:12:39:3d:72:15:70:19:48:e5:d1:83:d1:
                    91:e6:25:da:8b:6c:fc:aa:6d:c6:0c:eb:6c:2c:d8:
                    6f:73:ab:08:f1:b5:9c:19:48:93:f0:00:a6:1d:a8:
                    4d:37:9c:3b:86:43:68:44:d2:c6:f6:41:69:46:97:
                    bf:b2:b8:2a:42:a2:29:e3:6e:59:46:57:66:97:b5:
                    fd:5f:1c:80:89:7e:50:bb:40:0a:06:57:91:fe:ab:
                    86:6d:b7:b7:b1:dc:06:27:43:8a:9d:3e:49:0d:ee:
                    d6:f9:7d:3b:de:15:89:55:6d:d9:dc:8a:2d:3c:df:
                    8d:f7:7c:39:fe:74:d6:bb:1a:03:70:4e:12:77:52:
                    9c:21:a5:0b:f4:ac:e6:c8:72:7e:16:b0:45:47:06:
                    62:a1:da:8d:03:c2:62:34:5b:8b:5c:c9:c4:ed:49:
                    9a:1c:9a:56:a5:60:48:90:a3:32:8e:88:8b:4e:27:
                    db:ca:34:1b:03:df:f6:b7:68:54:eb:6b:27:5a:76:
                    8a:cb:64:6f:3f:08:6f:9f:2d:30:ee:c4:c7:03:f9:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7F:7F:3C:9F:11:D5:D5:AA:6A:B0:B9:DD:DC:B9:BC:9F:52:B8:3B
            X509v3 Authority Key Identifier:
                keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:ab:dc:74:c5:d6:42:ca:19:f5:84:01:55:1c:35:2d:fc:94:
         98:be:d1:40:ae:50:e5:6d:f1:51:e1:bf:63:55:f1:46:5f:fe:
         ee:89:39:76:db:a3:96:34:e8:a4:0c:45:83:e4:9e:43:62:3f:
         a4:3d:ee:14:2d:4b:57:16:88:65:b6:cf:05:6e:8c:37:b9:c2:
         40:5d:53:56:b7:b9:10:83:72:1f:a4:73:7a:be:af:35:94:22:
         c8:54:c1:fa:ad:a8:6e:63:68:6f:3d:80:95:9c:79:90:d4:ee:
         b9:5f:f9:91:b8:0d:60:64:40:b9:57:6c:99:65:4e:73:68:ad:
         f0:d7:00:7e:b8:37:2b:31:19:95:47:a0:93:c1:84:9e:d8:4d:
         1a:e5:03:26:4c:be:b3:50:e1:b7:a3:29:b0:e1:bc:62:aa:6c:
         34:95:05:3a:02:9a:b1:cd:eb:c0:49:bc:21:7d:fb:bb:b0:30:
         19:5d:12:1f:ff:46:ec:f8:6d:46:50:00:52:21:b2:21:c5:e4:
         b3:52:d2:6b:73:73:2f:14:e7:e9:ae:e0:16:e2:4b:6d:0f:37:
         24:b7:85:ad:ec:37:3e:9a:df:ca:b7:f1:cf:18:f2:03:1c:5d:
         49:9b:cc:08:73:30:42:13:72:f4:b2:13:d3:e2:4d:64:ba:36:
         49:88:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:30 2026 by rpki-client