Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
File:                     l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json)
Hash identifier:          CELAhBx81vxQ0AuzoizXov85YFguOekTGd+zXu8tzmE=
Subject key identifier:   55:B6:03:81:21:0A:2A:A4:1D:07:EF:7E:EC:BF:CA:AD:0E:A7:EB:32
Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA
Certificate issuer:       /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
Certificate serial:       0BFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
Manifest number:          0BE8
Signing time:             Tue 12 May 2026 18:56:33 +0000
Manifest this update:     Tue 12 May 2026 18:56:32 +0000
Manifest next update:     Tue 19 May 2026 18:56:32 +0000
Files and hashes:         1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: NjoY9UjcAjZvHGBzhz1WrcTtpZooYpCmnKk6E3U2R6E=)
                          2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: 9OFSK2ChXxMiDwCW+T5F/rViLCQZW9lND/if0koTJTw=)
                          3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl
                          rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3071 (0xbff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA
        Validity
            Not Before: May 12 18:56:32 2026 GMT
            Not After : May 19 18:56:32 2026 GMT
        Subject: CN=6a0377e1-ccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:11:bf:e1:7d:9b:cc:ef:cc:fb:cc:e7:43:
                    98:ba:d3:70:0a:81:62:41:7e:1c:16:ca:04:88:e3:
                    fc:c8:1b:87:98:97:fb:dd:c9:a7:2a:8b:44:66:9f:
                    ef:a7:5e:b6:38:ad:dc:3a:95:29:65:f6:a3:f6:69:
                    23:d8:d3:22:5a:97:36:be:dd:55:36:8d:07:d1:e5:
                    f1:b3:17:8e:4f:11:3d:f1:b0:36:93:70:43:ff:6f:
                    13:7a:80:ef:4a:dd:3d:1f:6b:d5:89:e7:d8:9c:fb:
                    0b:c4:db:ad:35:48:5a:f0:2e:4d:1b:36:38:88:11:
                    7d:09:c2:97:2c:91:f3:ab:2e:06:76:1d:97:5d:1e:
                    ca:7a:1c:3d:55:91:fb:56:c0:ff:25:ae:56:83:15:
                    6b:1c:1d:0c:37:4d:c9:42:90:ad:4a:69:52:9f:85:
                    82:21:61:77:db:85:5f:5d:ce:22:5b:e0:6c:5d:f6:
                    a2:48:5b:a1:e9:17:86:17:64:11:32:ec:6d:8e:9d:
                    95:1f:e2:c1:4c:e4:d1:18:33:74:a9:b8:cd:cd:39:
                    b2:b3:ba:13:20:26:1f:72:07:a8:58:4f:58:8d:fa:
                    d5:cd:64:ee:d5:f4:3d:c8:a6:d4:65:1a:25:f0:4e:
                    dd:1a:10:8a:63:36:7a:90:a8:50:a7:7c:9d:2d:a2:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B6:03:81:21:0A:2A:A4:1D:07:EF:7E:EC:BF:CA:AD:0E:A7:EB:32
            X509v3 Authority Key Identifier:
                keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:31:cd:5d:5c:71:55:9e:15:a9:52:22:e3:19:08:18:11:
         6c:50:f9:e2:87:ff:2f:63:b2:7d:98:05:a1:ac:33:ef:20:fd:
         4a:7a:de:c7:87:6d:ce:0c:96:8f:49:44:8d:fb:23:56:c7:32:
         cd:e5:86:00:07:25:81:bd:bd:94:1e:d3:9a:68:c9:9a:ef:c6:
         e3:ad:3a:f3:77:76:c7:55:ef:ca:2a:4d:36:c4:2c:4d:84:1e:
         8f:ad:69:be:16:bd:6f:1b:0c:eb:77:23:17:c5:1e:e6:fa:7c:
         43:05:bd:c1:cf:4c:cc:83:5e:60:32:ea:ab:51:fd:1a:9e:cb:
         1d:80:35:07:a4:94:7f:94:30:af:b2:e7:9f:fa:35:f4:bf:1e:
         4b:e7:30:e8:02:f6:e4:5d:39:8f:68:70:9e:8f:4b:af:3a:38:
         da:77:68:13:92:4a:c3:7a:6f:23:0d:0c:3e:b4:68:85:b9:00:
         5b:7d:9f:c5:08:f2:75:91:70:f5:90:f7:6f:4d:0f:88:c2:81:
         97:b6:b9:d8:da:92:b9:33:0f:d9:60:bb:ae:90:34:69:5b:db:
         07:1d:a4:f0:9e:c0:4a:d6:50:1e:41:6e:a0:90:7f:42:fc:74:
         02:13:7d:86:65:b4:f7:31:48:f9:de:06:26:50:37:72:aa:e5:
         ca:3d:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:09 2026 by rpki-client