Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File:                     zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier:          DRZGnSxHmZScwChCPH9lKnTfzFQvgswcbqMpTgj4CuE=
Subject key identifier:   15:31:83:24:30:74:BF:0B:8F:3B:D0:D0:02:79:21:D5:16:78:02:BA
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number:          01A9
Signing time:             Wed 13 May 2026 04:19:41 +0000
Manifest this update:     Wed 13 May 2026 04:19:40 +0000
Manifest next update:     Wed 20 May 2026 04:19:40 +0000
Files and hashes:         1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: BRBLyG0rQy6A6/ApK9J7y/Ia+7ilH079UQg3Wn92t/g=)
                          2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: eRA3ggdDb9SZ/usM83jI/rG8aFaHS14k+X9wZnX4XR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: May 13 04:19:40 2026 GMT
            Not After : May 20 04:19:40 2026 GMT
        Subject: CN=6a03fbdd-c5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:ae:14:eb:7e:29:81:fc:89:f5:4c:56:d5:
                    04:88:85:be:75:20:a0:36:c4:b2:dd:a1:e6:9a:19:
                    76:32:5e:19:99:1d:f6:73:99:5a:83:6f:d4:9d:4a:
                    e1:19:5f:ec:3c:b4:de:80:25:04:d9:ea:25:18:0d:
                    48:38:b0:ed:92:16:6e:cc:78:6c:37:b3:56:f3:11:
                    3e:11:68:5c:13:8d:73:2f:e0:2e:22:c0:db:2f:52:
                    f3:22:1f:a4:6d:8a:46:64:8e:cc:ce:07:18:a5:e8:
                    75:95:d7:e2:a4:b9:71:97:22:de:f5:68:af:79:c8:
                    ba:9e:c1:79:ec:3b:c4:1c:08:43:4a:6f:c5:2f:be:
                    c7:19:03:d4:22:61:49:91:4e:93:48:d1:3c:c9:8e:
                    27:ea:9f:99:42:8b:e7:70:ec:6f:05:d4:b2:d3:ac:
                    6b:31:63:d0:43:be:8d:ab:ae:74:8e:46:32:48:ae:
                    9c:dd:72:07:76:20:f9:e1:2b:74:a7:28:91:9f:1c:
                    4b:65:32:86:53:16:e8:97:51:fc:3d:b4:04:10:cb:
                    0d:c5:49:85:b4:a2:30:60:e9:0e:3e:e0:ac:41:b4:
                    11:b2:9b:89:5d:9e:b6:56:a8:8e:29:4a:19:57:42:
                    af:01:06:a9:24:11:56:19:ef:ac:2b:62:bd:19:12:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:83:24:30:74:BF:0B:8F:3B:D0:D0:02:79:21:D5:16:78:02:BA
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:c8:2f:8e:bc:35:97:0b:ff:0e:ec:fa:32:43:f0:23:ca:
         2b:85:1e:af:ff:1c:05:1d:f9:ce:b1:b4:d0:6b:4e:b1:67:8a:
         08:3a:99:8b:8b:bb:45:ef:70:db:81:62:31:45:7f:02:54:85:
         2e:18:ac:c5:a3:5b:2d:c9:cd:25:d8:d9:17:b8:e2:4a:73:76:
         a0:7e:2a:ea:55:72:f6:a6:53:26:d7:e7:6a:73:25:b9:1f:00:
         56:36:6d:ae:2f:fc:74:88:ae:36:f9:e5:b0:99:36:84:cb:a4:
         e4:74:bf:3a:78:68:5a:91:85:2e:0f:5b:0f:72:f7:24:0e:80:
         12:c9:03:4e:14:39:7a:5d:af:69:8d:9a:d7:32:63:2f:fc:ca:
         3e:34:9f:cf:8a:b2:e8:37:9d:8c:79:ef:18:14:8e:c0:70:a6:
         87:ec:86:d8:02:22:c1:00:7f:8f:a3:99:70:bd:c7:be:a8:ac:
         46:49:23:f0:f0:e5:f3:24:38:92:d8:99:4f:17:4e:14:bb:11:
         ff:d6:d9:7f:67:ba:35:e6:8e:3c:1e:5c:0e:85:ab:37:aa:d0:
         a9:ee:7f:8b:ef:13:f6:12:a1:37:9e:67:1b:4b:f4:cf:d3:5a:
         4b:56:8b:de:2b:2a:35:d8:de:f6:9d:d5:a1:a1:ef:55:6c:6f:
         51:d7:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:58 2026 by rpki-client