Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
File:                     e38qjYSvvYwzKp9LTmcJs65_CvY.mft (raw, json)
Hash identifier:          /pLTjE5apanue8siqtqec7++P1H8/j4Pc8Mp4fTIgno=
Subject key identifier:   57:FB:1E:C5:4C:86:63:DA:FA:90:BB:A5:6B:49:76:98:00:5E:18:75
Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6
Certificate issuer:       /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
Manifest number:          B9
Signing time:             Mon 11 May 2026 07:15:44 +0000
Manifest this update:     Mon 11 May 2026 07:15:43 +0000
Manifest next update:     Mon 18 May 2026 07:15:43 +0000
Files and hashes:         1: e38qjYSvvYwzKp9LTmcJs65_CvY.crl (hash: XV6G7hwcmRWpagAYqnjcDgPCwIqYAc3kismuegbIn3o=)
                          2: 0930CE00408411F0A6916727C4F9AE02.roa (hash: 5e7uRpjp4LbTN28bWS11lUc0oDiHjTplRVP3KjeglPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl
                          rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
        Validity
            Not Before: May 11 07:15:43 2026 GMT
            Not After : May 18 07:15:43 2026 GMT
        Subject: CN=6a018220-1c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:fc:df:9a:84:70:e8:c9:a6:74:d1:c1:54:
                    60:d1:d5:3f:fb:04:c3:2b:92:01:72:18:9f:5a:e0:
                    48:e6:7d:3a:89:49:5d:a4:68:17:47:64:67:97:d9:
                    8d:9d:61:7e:15:e0:32:73:9e:58:96:ab:7d:05:e9:
                    03:a8:b1:b7:0b:be:9b:76:10:45:37:a5:c3:66:c2:
                    30:07:ee:9f:17:d4:dd:14:94:8e:da:34:16:4f:26:
                    05:71:7d:c3:e1:14:85:85:c5:f7:3b:54:9c:76:74:
                    84:f3:ba:ec:de:ad:45:31:e4:f4:99:34:fe:0d:3e:
                    f0:f9:d2:8a:0c:6a:be:2c:39:43:dc:5d:74:be:b0:
                    77:a0:fd:bb:85:04:4b:44:88:46:b3:cb:ea:23:58:
                    73:2a:6f:4b:94:a3:80:a9:67:01:48:f9:19:9e:02:
                    28:5f:c0:be:31:23:cf:94:35:c8:8e:08:3e:44:58:
                    c3:78:4d:58:7d:55:29:77:e5:5e:4c:2f:3b:45:83:
                    16:ab:f2:b8:db:40:16:b8:35:8e:f2:ec:39:40:f9:
                    bb:ce:fb:0a:4f:d8:0e:ae:3f:14:17:b3:28:6f:f6:
                    d9:8d:cd:09:52:12:cd:5c:53:6b:11:0f:0d:5b:86:
                    8e:7c:a3:f6:26:f5:0c:52:12:83:a1:bb:2b:75:8b:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FB:1E:C5:4C:86:63:DA:FA:90:BB:A5:6B:49:76:98:00:5E:18:75
            X509v3 Authority Key Identifier:
                keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fe:99:1f:74:a1:6e:db:55:1c:7b:0c:ff:1b:2c:8a:32:b3:
         c2:7d:25:f2:5d:be:29:65:a1:96:e3:02:92:dd:ab:e5:ff:13:
         1d:58:54:62:5a:59:ce:51:d5:aa:29:9b:df:18:22:a9:8d:84:
         8d:95:d5:4a:4c:2d:93:34:7f:72:2a:36:8d:aa:25:9a:e8:2c:
         64:0f:6a:51:50:db:42:db:91:f3:68:ba:a1:7e:0c:e6:9c:d8:
         e7:7e:1f:dc:83:71:20:fa:f3:ce:d2:a5:bb:d2:5d:43:de:d6:
         0d:d4:98:66:b7:10:4c:e0:ef:f3:a7:cf:93:98:27:80:93:df:
         1c:f6:6b:db:ad:ec:e2:f3:67:bd:fc:a0:eb:83:1f:a5:d7:25:
         ad:12:71:54:98:c2:b5:e4:70:0b:58:95:a4:d0:3b:bd:95:a0:
         43:54:5b:02:f8:26:29:65:60:7e:f3:d8:1f:d6:53:a6:5d:e8:
         cb:cf:9f:89:38:5f:9d:db:ed:e8:bb:8f:cb:12:d6:b0:f2:7b:
         8c:4d:a5:cd:a3:97:ad:48:a5:7b:ac:63:54:25:90:28:8c:43:
         e2:30:cc:48:1f:bd:b5:e2:25:5c:c1:02:82:49:0d:04:e8:4c:
         c0:89:0e:19:c6:c2:44:df:bd:09:bd:8f:84:29:e1:d3:7a:f5:
         a9:bd:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:53 2026 by rpki-client