Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File:                     1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier:          TBrH+yflVTVzEdwLn7+zXANbfLOj/N/j0dEgyK9pzvw=
Subject key identifier:   E4:A2:FF:37:45:19:77:13:D2:7D:3D:E7:CA:2C:F9:BA:AE:14:5C:3E
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       0531
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number:          0527
Signing time:             Tue 12 May 2026 23:40:52 +0000
Manifest this update:     Tue 12 May 2026 23:40:51 +0000
Manifest next update:     Tue 19 May 2026 23:40:51 +0000
Files and hashes:         1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: CosOiLloeuZ5sUb7uZ7Y60UQJAuPgmmq108QDJZnNTc=)
                          2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: wBK+QyPAeSvy6asg1uEsJFk8VOo4AvH0ZR714TB55hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: May 12 23:40:51 2026 GMT
            Not After : May 19 23:40:51 2026 GMT
        Subject: CN=6a03ba84-f1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:b9:14:ed:61:57:9f:61:b7:55:57:06:73:
                    7f:b2:98:9d:07:73:c1:06:6e:a5:b5:26:b6:7c:3a:
                    50:92:1a:af:6d:ed:c7:84:a8:a9:13:e5:d0:78:78:
                    2e:5a:b9:94:da:31:40:7a:68:c9:07:eb:94:dd:6c:
                    ae:98:80:1a:fe:14:ce:10:66:a7:13:e4:b2:cb:a6:
                    b8:7a:af:b4:7d:10:1a:c5:2e:c1:a2:93:ec:8f:11:
                    48:b8:f3:bf:3f:e3:ad:bb:e4:08:33:ef:c1:a4:ac:
                    1c:3d:31:da:7b:af:7d:e5:7c:30:c1:5b:04:36:a1:
                    5d:a0:de:0d:50:b4:f5:48:61:a9:a5:ae:6d:e0:c7:
                    54:1c:b4:ab:fb:c5:fa:01:76:60:bc:46:30:b9:4b:
                    f4:71:28:ca:73:22:40:8a:51:79:b5:01:48:0b:0d:
                    31:69:24:22:36:a4:09:32:3d:03:38:13:59:a6:a7:
                    1b:29:7d:3c:00:d2:13:e4:e5:bd:a3:57:82:3c:83:
                    fa:8f:6c:af:18:86:c4:7b:1f:67:db:ce:48:4f:1f:
                    6a:a5:91:30:03:31:4e:f7:4f:0d:fe:96:67:89:2b:
                    c3:49:2b:bc:78:f1:38:13:ee:df:27:96:c2:cf:63:
                    a4:b4:f6:59:0b:bf:89:f6:78:2d:9d:99:1a:b0:ae:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A2:FF:37:45:19:77:13:D2:7D:3D:E7:CA:2C:F9:BA:AE:14:5C:3E
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:14:fa:43:ad:51:eb:ba:f4:ad:ed:da:bb:a0:e3:4c:1d:ae:
         b7:99:61:d9:da:04:1d:ef:3a:1c:32:f3:e8:68:7d:13:54:e2:
         91:36:92:1b:54:6c:26:ee:27:3a:47:5c:bc:1f:58:6e:91:2f:
         51:15:e8:d5:c8:12:ba:07:66:d3:dc:a7:a7:c6:61:d1:56:02:
         57:47:7b:af:57:88:34:63:16:fe:c0:b8:8d:66:f4:26:d3:e2:
         6c:f9:2c:b0:f0:ec:eb:33:03:2e:77:c0:03:ab:bd:a0:82:d6:
         a4:c1:bd:4e:08:13:a6:80:24:31:51:a3:aa:e9:ff:3e:99:6d:
         63:9c:ca:2c:2e:2c:22:e7:33:80:98:0b:8c:0a:2f:e1:fe:20:
         1d:71:fd:c4:45:8d:80:d3:38:2c:1c:4f:fd:fe:0e:5e:0c:ea:
         6b:28:33:0e:6c:91:88:02:aa:33:73:4f:c4:e7:78:2d:fc:27:
         b3:55:13:11:0c:ac:33:9d:91:78:cb:ca:29:88:66:4f:4e:54:
         3b:2e:0b:d8:d8:fa:f6:a5:da:08:c2:62:9a:a2:65:c7:a0:bf:
         d2:36:6b:63:5a:75:3e:67:28:4d:fc:e5:43:c6:7a:60:66:37:
         6e:48:77:cd:41:c8:11:19:89:fb:6a:50:a8:b9:a0:a0:41:e6:
         a5:d5:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:56 2026 by rpki-client