Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File:                     pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier:          bv6ITOB3Qdda0475zkUd8EzS+NDC2d2yGgptD5ucOsk=
Subject key identifier:   DA:6E:11:07:D8:4E:07:0E:43:7D:D0:62:80:32:EF:97:B1:B1:BA:6E
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer:       /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial:       05EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number:          05E7
Signing time:             Tue 12 May 2026 23:03:22 +0000
Manifest this update:     Tue 12 May 2026 23:03:22 +0000
Manifest next update:     Tue 19 May 2026 23:03:22 +0000
Files and hashes:         1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: nOJRWkFBjw8E9fnlExkqQuSZBcXDGdDq8GaWjzBXBWU=)
                          2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: F6f3sqC/VrCexYL7KiqhHMWOLZTVDuTXvmAuEtkPuPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
        Validity
            Not Before: May 12 23:03:22 2026 GMT
            Not After : May 19 23:03:22 2026 GMT
        Subject: CN=6a03b1ba-a6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:5d:1f:2a:87:01:e9:6a:5f:3f:67:06:df:
                    3c:e6:a0:96:b9:9b:f0:7b:e8:27:12:7a:7a:77:84:
                    3a:0e:dc:cd:0b:b6:fe:1d:f5:e4:cb:c6:1c:d5:86:
                    77:d4:d0:84:f8:0c:15:e5:25:90:f1:4a:cc:d6:e4:
                    75:77:f0:83:df:9d:80:ef:f3:2a:ad:52:05:ca:f9:
                    bb:9c:59:3c:bc:40:2d:c8:4f:09:8b:86:d8:9c:d7:
                    64:fa:9a:1b:ef:a7:11:01:ed:e2:1f:09:fb:d2:0f:
                    f3:92:aa:aa:27:8b:20:64:db:4a:ad:85:7d:39:fe:
                    a8:b8:77:1e:19:9c:67:28:55:31:7f:62:7b:6b:2d:
                    22:70:02:56:be:71:20:1b:68:d7:8b:64:4f:f4:d3:
                    cc:7f:1f:11:e8:88:15:b3:77:98:4e:b0:43:af:54:
                    63:0b:f7:04:6b:31:88:92:2a:ee:ec:63:3f:c7:c9:
                    b8:d2:05:4a:54:d7:a2:6c:da:40:1e:93:20:fa:9a:
                    8c:ff:e8:3d:28:9d:a8:0b:3a:43:97:67:c4:5d:21:
                    fd:ef:df:2a:5c:fb:57:f2:f1:7b:8e:c7:aa:3b:a5:
                    b9:38:8d:90:26:fb:11:28:f3:99:f3:b7:01:f6:0d:
                    04:22:36:80:dd:8b:26:66:33:c7:12:2c:91:7d:9f:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6E:11:07:D8:4E:07:0E:43:7D:D0:62:80:32:EF:97:B1:B1:BA:6E
            X509v3 Authority Key Identifier:
                keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a4:0f:19:76:f7:1e:12:7e:6a:f0:fd:40:2c:7f:11:57:42:
         b5:49:d9:42:7b:c5:f4:28:2e:54:76:b0:3b:62:90:e8:c7:49:
         b1:ba:46:6d:2a:08:06:25:a3:9f:86:59:ec:74:1a:72:8b:35:
         8a:d8:3d:67:70:9f:a4:91:08:29:91:4a:23:e1:26:8a:d7:f4:
         85:77:6c:29:07:fe:f9:65:b2:a1:3a:9b:0b:30:0f:a8:a2:f5:
         2e:70:f5:bd:3b:2b:95:6e:48:48:45:4c:a3:39:cc:af:64:b3:
         9e:d6:98:8e:e2:13:46:18:e1:ed:5e:00:b0:92:3c:c7:59:4f:
         74:ee:dd:d8:68:70:61:f2:9e:9e:b5:30:90:9b:0a:5f:48:cd:
         a9:ad:69:bb:0d:8c:d2:0c:21:22:d4:e2:8c:b5:06:5f:5d:df:
         11:5d:60:e3:9d:46:7a:fe:70:bf:4d:ce:28:99:d9:5d:f2:9c:
         79:88:c6:82:93:d6:3b:61:29:82:00:85:61:ce:18:47:c4:17:
         d6:4c:be:58:1c:3c:01:ec:fe:7b:bb:5a:99:c0:7e:45:b4:36:
         28:61:d7:51:fd:05:05:8c:92:e2:20:fc:5a:db:4f:ce:69:43:
         b2:b3:b0:e9:33:01:80:53:03:83:ab:c3:9a:b7:5e:10:5c:75:
         20:8c:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:31 2026 by rpki-client