Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
File:                     ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json)
Hash identifier:          aeZfT87QJleaWjNxSI/t5P/GoXJGLglHVh9BEwCfILY=
Subject key identifier:   AC:0F:A9:26:2D:1A:7E:3E:1A:74:79:15:57:15:EC:ED:6C:B4:3D:8F
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Certificate issuer:       /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
Manifest number:          011A
Signing time:             Wed 13 May 2026 06:00:15 +0000
Manifest this update:     Wed 13 May 2026 06:00:15 +0000
Manifest next update:     Wed 20 May 2026 06:00:15 +0000
Files and hashes:         1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: 9CfRWRUA7aK47ekyg1AJxqCzErsHgxKcBkn+gelk3p8=)
                          2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: ANjzdpRTnZYnb2IgP9uL0uuWKgG+fxMLmh0yV+GGQqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
        Validity
            Not Before: May 13 06:00:15 2026 GMT
            Not After : May 20 06:00:15 2026 GMT
        Subject: CN=6a04136f-f367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:58:03:64:19:52:78:4c:0e:47:ec:07:a5:
                    d4:6e:25:12:bf:4b:e5:c6:3f:66:f1:4f:09:d3:f4:
                    f8:18:41:c4:63:76:3a:0a:cb:4e:0e:11:c5:cc:d9:
                    c5:58:96:a9:dd:ad:09:58:49:44:54:b3:2e:df:09:
                    e9:b5:f6:43:6f:76:c3:37:50:8e:b1:43:51:bc:e0:
                    7d:8d:9a:81:1f:39:aa:62:59:a9:e3:40:33:95:ba:
                    d4:aa:0c:9d:5f:bc:d1:6b:3b:b8:1e:da:0b:75:fd:
                    cd:da:46:b7:37:0c:92:c1:79:d6:c6:4b:cb:37:cd:
                    ec:32:78:80:b4:63:9f:05:12:22:36:44:eb:8b:b5:
                    5e:b6:92:a6:09:66:1d:d9:aa:1c:90:e4:66:3c:42:
                    d3:c1:02:f2:f9:60:e2:7e:8b:ff:a6:79:d9:30:4e:
                    c2:61:9b:f5:ea:af:0e:8c:33:35:c4:bd:c9:0f:70:
                    83:c9:bd:ec:d7:78:25:13:b7:6c:71:d4:67:aa:39:
                    72:e3:8e:81:87:9e:25:65:40:7d:bf:d7:ab:5e:40:
                    67:40:d9:2f:92:7a:96:4d:fa:4a:2e:33:53:68:5b:
                    60:33:17:cf:c8:2a:64:3b:5f:dc:b8:84:e3:90:92:
                    95:6d:80:d0:f2:ae:d5:09:76:99:60:00:93:f2:f8:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:A9:26:2D:1A:7E:3E:1A:74:79:15:57:15:EC:ED:6C:B4:3D:8F
            X509v3 Authority Key Identifier:
                keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a6:f9:09:b0:2a:6f:95:ca:74:aa:dd:14:63:ee:ed:cb:73:
         91:bd:4c:f1:b3:55:dd:31:13:bb:a3:f7:d5:ea:46:01:6d:ac:
         d2:c3:21:1b:c3:be:3f:91:1a:96:49:6b:fd:91:68:13:a3:56:
         23:b0:49:38:89:db:60:f9:dc:1b:e7:07:cd:8d:96:d4:dc:9a:
         bb:e3:e0:7c:88:b4:94:72:39:40:d0:15:0b:b2:02:ae:8d:d6:
         08:ef:56:f1:69:3c:55:17:f7:05:a2:be:cb:f9:a0:92:ee:99:
         75:43:52:0e:8f:82:06:24:68:c3:da:09:89:0d:76:d8:7d:0a:
         66:58:98:80:3a:00:c8:5f:f7:c8:d6:27:3e:4e:26:18:a6:7d:
         77:61:6a:91:8d:13:81:f9:fc:79:8b:b2:a9:ba:70:f2:1d:42:
         c3:b0:16:58:67:d1:28:a7:bd:3f:5b:c6:99:71:1d:45:de:17:
         d4:79:57:2e:42:7a:1e:d6:b9:04:53:41:4b:e8:21:8b:62:f0:
         1a:03:a0:73:39:2c:23:a9:ef:86:ef:75:fe:0e:20:26:c4:31:
         05:f6:f2:e2:7b:f7:61:8a:79:40:48:9d:e2:d9:54:0a:e9:70:
         01:fd:e4:1d:ca:01:0a:12:b3:0a:3c:c5:53:08:01:2f:6a:85:
         82:ee:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:41 2026 by rpki-client