Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
File:                     keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json)
Hash identifier:          wlAOiEZXOQfjN8fSdBtZ8La56teUllLNv2MOiPGMjFk=
Subject key identifier:   EE:6B:54:D3:97:09:00:20:6C:0E:94:04:9A:AA:47:0E:67:62:C2:EA
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Certificate issuer:       /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial:       057A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
Manifest number:          0568
Signing time:             Tue 12 May 2026 23:30:19 +0000
Manifest this update:     Tue 12 May 2026 23:30:18 +0000
Manifest next update:     Tue 19 May 2026 23:30:18 +0000
Files and hashes:         1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: JqUnsROawSB+8Cck9Cn+d/DWF77H6fKONF26GaHGSpI=)
                          2: 1295B5943FA611EF94664041C4F9AE02.roa (hash: hapzzVKt9oxlCLEwYHK4MTLp4PI8BfiasqodqBtyfb4=)
                          3: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: ly19W/Muv8BDmpRPmS2Fe3o0q7TToeFH9ObD8f2QW9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
                          rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
        Validity
            Not Before: May 12 23:30:18 2026 GMT
            Not After : May 19 23:30:18 2026 GMT
        Subject: CN=6a03b80a-a1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:6a:93:1a:65:08:56:28:31:eb:ae:16:b4:
                    c0:cd:d3:21:79:7a:ab:f6:9e:97:f7:e6:c2:3d:a9:
                    a7:aa:0f:5b:b2:ca:f0:08:fa:da:a1:3e:02:3a:3b:
                    03:8b:1b:48:6d:c2:f8:5c:e2:07:5b:86:bd:ae:b8:
                    6f:f7:71:93:71:56:c7:06:45:10:ea:cf:eb:7b:38:
                    db:df:42:1e:0b:5b:10:c3:e9:01:7f:c0:d2:64:7a:
                    09:f9:1e:4d:44:61:09:e0:2c:5c:5a:c3:93:24:68:
                    ab:06:21:c4:97:4c:06:b4:52:1c:df:31:68:2e:23:
                    7e:e4:d3:ea:cb:92:e8:0a:77:33:50:89:aa:38:ac:
                    8b:70:7d:32:b8:7f:f9:9c:8b:49:8a:bd:b5:ff:61:
                    4f:f7:34:24:57:6f:89:50:db:ff:2e:80:b6:38:94:
                    a4:c2:18:35:16:9c:e8:53:0f:e5:b0:2b:8f:1e:e3:
                    5d:e2:b7:26:fa:d9:13:10:78:8f:20:5d:26:2e:2a:
                    5b:f5:32:7d:0b:29:47:37:01:3c:70:9e:4f:31:b4:
                    54:f8:90:80:08:12:ec:c1:b4:06:cf:f1:3c:fd:14:
                    2a:01:af:c6:ba:9a:e2:04:06:5b:02:d2:da:5d:50:
                    ab:4f:68:9f:1f:4f:69:a4:7f:ba:23:a8:f0:39:9f:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6B:54:D3:97:09:00:20:6C:0E:94:04:9A:AA:47:0E:67:62:C2:EA
            X509v3 Authority Key Identifier:
                keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a4:8c:5a:ae:67:e6:41:37:cf:f6:e0:86:34:c9:09:dc:d7:
         ca:e6:d1:12:c2:25:87:54:56:e8:a8:75:55:35:d4:39:da:b3:
         8a:55:b1:6f:42:a5:0e:28:3e:4d:f5:1a:58:33:f1:38:bd:4a:
         02:17:8c:c1:55:e0:ba:fa:d7:6b:69:7b:f9:3b:62:3c:29:9e:
         ac:b3:b1:dc:d6:4a:bf:c4:e9:9f:dc:b7:45:80:72:9f:2e:9a:
         5e:10:bd:6d:12:ae:27:27:ce:dd:48:04:bb:79:c6:f7:30:d6:
         cb:a9:9b:23:e5:c1:c3:aa:8f:bb:9b:39:2c:4e:e7:43:d0:b0:
         f7:4f:7b:40:ac:e5:de:e0:f7:c4:ce:86:be:05:6b:24:a3:3e:
         3d:2a:56:75:a5:c0:a2:ec:40:a1:4f:65:34:c0:65:7b:ac:80:
         83:39:c6:17:02:fa:9b:2d:a4:a5:a1:ad:b3:3f:98:61:a1:59:
         dd:92:bf:89:c0:3a:d6:77:2a:50:98:17:bd:e9:91:77:43:83:
         92:70:18:1f:9c:f7:27:12:e9:13:f5:47:e6:ff:8f:cf:44:46:
         32:f0:c6:0f:0a:0e:e5:6d:91:65:42:63:dd:63:7a:f2:18:6e:
         ad:23:ce:30:02:a7:77:d9:b8:34:8a:5e:2a:06:72:4e:79:94:
         a5:09:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:56 2026 by rpki-client