Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File:                     jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier:          uni5FUZCRXqauKdbGXH2xY+yypFVvC3wLmkEsAGrmQc=
Subject key identifier:   B0:5D:11:84:15:1A:1D:CE:3E:93:67:CF:2F:08:90:8E:10:43:83:86
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number:          01B3
Signing time:             Mon 11 May 2026 04:03:32 +0000
Manifest this update:     Mon 11 May 2026 04:03:32 +0000
Manifest next update:     Mon 18 May 2026 04:03:32 +0000
Files and hashes:         1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: V9PHGnT0yRDu3cka1/HAcg+fGgR0ynQoimKsKbB7yPo=)
                          2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: May 11 04:03:32 2026 GMT
            Not After : May 18 04:03:32 2026 GMT
        Subject: CN=6a015514-c915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:b9:47:31:1a:88:5a:f2:23:a3:da:35:2a:
                    d7:4e:87:21:12:93:d1:9c:11:99:57:ed:a7:e2:6c:
                    ae:20:5e:86:ba:65:81:35:af:a3:36:93:b1:17:08:
                    38:5d:93:a2:6d:e8:f8:c6:66:ef:3e:f7:92:d5:42:
                    2d:e6:09:bb:f1:82:d2:9a:19:32:e9:53:87:da:9e:
                    82:d2:37:19:a4:87:58:4b:e5:7e:77:d7:16:c4:91:
                    ff:9b:a0:c1:e1:e6:4e:e2:94:82:27:99:bc:27:8b:
                    ed:de:d6:22:70:81:0e:cc:6f:51:4d:75:6a:2a:e7:
                    fe:ec:1b:07:cc:42:87:73:6f:9e:aa:6e:06:3b:31:
                    84:0b:b4:4a:64:f8:ba:6e:c1:59:9f:11:09:ab:f5:
                    e8:14:6e:4f:b9:bf:b3:9c:b8:55:38:99:49:ac:b0:
                    87:0c:c7:32:08:61:fa:bf:7b:de:83:cf:b0:48:a7:
                    e6:16:db:53:d2:a6:b5:6d:63:52:33:ea:7b:76:cb:
                    92:d6:3c:c9:5c:a0:5a:79:a8:76:e1:8a:9b:99:a7:
                    f5:cc:8e:6d:07:f6:07:a7:c3:19:f3:ed:8f:5f:73:
                    d2:18:a0:60:c5:b6:e0:68:e9:1c:8e:89:03:1b:f6:
                    5a:d0:42:5a:dd:1b:28:69:af:52:2e:ac:33:c8:23:
                    4d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5D:11:84:15:1A:1D:CE:3E:93:67:CF:2F:08:90:8E:10:43:83:86
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:d6:4f:dd:c8:39:d0:4d:39:08:aa:02:a2:5e:99:a7:f0:
         16:d3:cc:b4:80:b1:81:af:d3:cc:ad:b3:5f:f0:fb:61:b9:4c:
         e5:d7:ed:6a:5f:42:83:0f:41:c3:29:28:3c:52:54:7b:79:99:
         1a:c4:31:1d:14:de:49:30:cc:ef:45:75:97:66:96:c7:7e:57:
         bd:34:0b:c4:32:8c:d5:4e:fa:96:3d:e3:77:ce:e3:2c:bf:52:
         57:bd:ac:1f:41:63:bb:7e:e5:9a:82:a8:7f:b1:16:aa:91:18:
         88:0c:81:0e:62:d5:5f:b2:f8:aa:6c:02:14:7e:7a:c0:a7:23:
         e5:7e:3e:eb:d5:50:ef:b9:1a:da:ef:27:3d:be:1d:75:8b:7a:
         c4:9a:d0:1f:63:6f:79:01:1a:d1:a1:f8:63:fd:74:0b:41:4d:
         58:14:0a:c8:6d:03:a7:38:d3:57:72:1b:66:cb:65:02:1c:d5:
         cd:9d:65:20:d6:be:4e:48:a0:6d:d0:05:dc:bd:6e:82:c1:80:
         1b:66:3b:97:52:7f:0f:eb:f0:df:52:47:8c:2d:b2:3d:37:7a:
         2e:c0:00:07:4e:5a:b9:5a:a3:5a:99:d4:9c:2d:0e:c8:cb:5f:
         28:9e:29:1b:3f:5f:fd:7f:04:6a:70:18:a5:5c:aa:15:fe:d1:
         ab:a3:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:31 2026 by rpki-client