Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
File:                     szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json)
Hash identifier:          qYkCFU+C1hVOBdAExrumMI3/AwGWTbnGkoshHjvd8YQ=
Subject key identifier:   4B:E1:E1:13:64:A1:9E:34:91:29:6B:98:11:AA:88:B2:B3:0D:73:7A
Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
Certificate issuer:       /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
Manifest number:          47
Signing time:             Wed 13 May 2026 08:31:04 +0000
Manifest this update:     Wed 13 May 2026 08:31:04 +0000
Manifest next update:     Wed 20 May 2026 08:31:04 +0000
Files and hashes:         1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: 0HBwZ7REqd178nLMgjywTVUA44y7QZtc/CWzohWlswI=)
                          2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
        Validity
            Not Before: May 13 08:31:04 2026 GMT
            Not After : May 20 08:31:04 2026 GMT
        Subject: CN=6a0436c8-7eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:42:92:47:35:d5:41:91:9b:db:fa:57:59:
                    24:85:90:f2:8e:da:ea:67:f3:15:57:cf:bc:b4:e9:
                    26:2c:ab:23:39:42:de:57:dc:27:01:50:d4:46:39:
                    d8:4b:18:0a:41:8b:88:91:a1:62:11:0d:79:d4:81:
                    87:0e:65:59:74:e4:1d:cc:0f:8a:e2:61:f6:4b:7e:
                    a7:29:c3:be:d0:7a:52:35:eb:90:c9:55:82:ac:8a:
                    c7:64:aa:83:50:8a:e7:e8:33:19:cb:a0:25:b9:19:
                    6e:87:7e:8d:0d:52:50:31:3b:b7:a6:0a:fa:2e:b9:
                    b8:bf:ee:df:fd:8a:4d:fa:43:e8:e2:15:c5:e5:1e:
                    c4:d7:5c:8d:ef:38:f4:26:97:9e:5b:76:f3:dd:04:
                    51:64:3c:40:0b:a1:c0:54:b6:db:36:66:2a:d7:6f:
                    fa:4a:f2:dc:5d:95:5b:ce:eb:57:61:18:0e:ee:84:
                    df:76:b7:70:11:d4:ad:a6:6a:47:59:df:c3:1d:22:
                    03:ef:00:32:24:a4:d5:0c:50:17:76:2e:ed:f8:b0:
                    81:60:17:e6:02:5d:47:07:f5:c9:d3:ee:12:1f:7e:
                    67:94:69:96:a9:a3:17:3f:75:73:a8:27:0a:07:09:
                    2c:0c:b3:ea:7a:13:36:e2:db:85:87:52:0e:83:a5:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E1:E1:13:64:A1:9E:34:91:29:6B:98:11:AA:88:B2:B3:0D:73:7A
            X509v3 Authority Key Identifier:
                keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:77:1c:92:ab:3f:08:c5:e8:11:a6:54:a4:c7:d9:0c:dc:ea:
         da:a4:2c:10:32:cd:5b:eb:cb:15:b2:90:7d:f0:93:e0:6f:63:
         c7:99:e0:d3:e8:9a:59:4c:37:0b:13:65:09:3d:30:48:59:bb:
         76:61:80:aa:15:8b:d4:6a:ed:83:c6:9c:c1:da:d4:05:0b:21:
         6e:53:66:de:83:d5:df:a2:ce:2a:25:bb:d3:f9:18:40:4b:59:
         2f:43:ae:b8:88:22:26:ae:21:40:4e:12:37:79:0b:0b:08:85:
         04:ee:c8:ed:a8:3f:c9:07:ad:1c:7e:3e:6e:f7:55:6c:26:1e:
         38:ed:33:1c:68:4e:5b:60:58:91:ea:00:18:33:f3:3c:ad:81:
         9a:b3:1e:9b:e9:e2:43:17:72:08:ab:a3:d7:43:27:fb:fe:11:
         46:bc:aa:80:2a:95:f0:15:a4:3a:70:d2:2d:d0:8d:a5:4e:d9:
         6d:c6:6c:64:77:40:5a:68:19:6f:8e:ee:52:d9:47:a1:fa:b5:
         83:f3:a1:49:89:7f:c6:b5:a3:0b:fd:a0:af:19:ca:8a:18:ed:
         13:2c:80:7b:ce:a6:a7:c6:fa:95:40:9d:10:3a:7e:33:90:f5:
         63:8f:71:2d:8a:42:0e:95:99:bf:ed:02:be:01:a7:17:2a:33:
         9b:e8:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:55 2026 by rpki-client