Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
File:                     saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json)
Hash identifier:          6/VT4djzavXEZ3ieyVby41mxVbyknKKzgbGbufX1NxQ=
Subject key identifier:   9E:6B:D2:AB:37:08:EF:8C:DA:E7:C2:F5:97:2D:E4:A6:D4:23:B4:A7
Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
Certificate issuer:       /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
Certificate serial:       3551
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
Manifest number:          3542
Signing time:             Tue 12 May 2026 14:35:17 +0000
Manifest this update:     Tue 12 May 2026 14:35:16 +0000
Manifest next update:     Tue 19 May 2026 14:35:16 +0000
Files and hashes:         1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: IJpr6NJbQOxZrgmug+VcaL6ItB+joD1IezR3txQN+MM=)
                          2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=)
                          3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl
                          rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13649 (0x3551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
        Validity
            Not Before: May 12 14:35:16 2026 GMT
            Not After : May 19 14:35:16 2026 GMT
        Subject: CN=6a033aa5-f4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:8e:2d:d7:dd:10:b5:2e:8f:88:71:6d:f4:
                    a0:fd:48:60:0d:a1:0e:4c:1b:a4:09:04:02:aa:4e:
                    a9:6e:aa:7b:4e:7d:2f:89:50:dd:4d:01:7d:d1:a2:
                    02:5e:b2:fe:fd:c8:e5:93:d0:db:30:c7:f8:4a:9e:
                    b9:e9:87:e2:53:e3:0e:03:dc:bb:fb:3e:5e:ac:a8:
                    0c:44:52:bd:88:79:cf:7b:06:4f:0c:ab:1d:25:af:
                    44:93:da:7a:73:6e:76:4b:fd:e5:c9:f8:35:de:08:
                    90:8e:b2:e0:3a:58:71:64:db:e2:39:c4:46:27:bb:
                    db:ac:09:84:22:7b:b3:c4:cb:db:1a:bc:32:82:eb:
                    cf:76:b7:8f:bd:5d:d4:66:99:db:d6:e2:66:f6:21:
                    3f:a0:f3:29:df:44:a5:0e:3a:50:7e:8d:5a:4d:59:
                    68:eb:b7:7c:70:8b:1b:6b:f2:2e:1b:ee:13:33:53:
                    06:30:a9:98:28:2f:63:71:a2:a4:fc:ca:99:75:5a:
                    a6:56:c8:55:e6:ec:e8:ee:02:af:81:3f:da:fb:2c:
                    24:ef:41:d5:d2:a8:16:01:22:58:fc:e9:51:fe:e0:
                    78:69:57:de:3e:fb:8d:75:e6:1b:81:f7:1d:0d:ad:
                    dc:5d:16:0e:34:c6:7e:94:0a:e8:3a:62:75:72:46:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:D2:AB:37:08:EF:8C:DA:E7:C2:F5:97:2D:E4:A6:D4:23:B4:A7
            X509v3 Authority Key Identifier:
                keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4f:09:e8:1c:3d:a6:45:7c:36:20:71:88:a6:99:fa:69:42:
         b2:2e:83:07:4a:5c:41:50:61:1f:66:26:a6:0a:0a:7c:e2:25:
         3a:5f:7f:08:a9:41:fd:1a:0c:58:81:65:e2:fe:65:8c:18:2e:
         50:11:7f:7a:d6:cf:e7:8b:f0:32:22:31:0c:28:0b:22:c7:b8:
         aa:71:e5:88:3a:c0:aa:63:be:ef:9f:58:80:01:9a:fc:70:e5:
         cf:77:a7:0c:c9:c3:cb:86:29:30:1f:06:98:d6:87:d2:cd:dd:
         d1:cb:36:70:47:40:48:93:12:43:6c:66:7e:9f:fa:4e:a7:98:
         88:0c:a6:14:93:34:af:29:94:43:3e:36:c8:4a:85:b2:df:e1:
         34:ff:7a:19:cd:03:c6:98:5c:af:70:2d:1d:69:36:61:5c:0d:
         51:d1:b8:84:a6:af:0e:23:df:64:d7:ac:d6:90:04:5a:20:bb:
         3f:50:f9:57:8b:f2:db:f3:34:8f:2c:e0:1b:67:d3:fe:33:a0:
         45:3a:ab:a0:16:9d:4c:0e:b7:88:bf:85:ae:80:b4:7d:8a:1e:
         98:35:6c:fa:db:90:d3:36:7f:b6:23:7a:95:4a:a1:c3:41:a2:
         e9:f3:85:05:a3:f6:d7:bc:28:51:b7:ff:f7:24:95:e1:c8:b8:
         21:9f:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:56 2026 by rpki-client