Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
File:                     0PiwBllsfAN8tUkwWzlpAACq6KQ.mft (raw, json)
Hash identifier:          d0Eccs4M3epCvaJ3ANdyhRf8LwHH5hGAQ0vlvdVwgv0=
Subject key identifier:   0F:42:D1:28:E5:36:46:A9:68:6B:34:8D:67:25:09:58:79:D5:D1:89
Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4
Certificate issuer:       /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
Manifest number:          01A4
Signing time:             Mon 11 May 2026 04:12:55 +0000
Manifest this update:     Mon 11 May 2026 04:12:54 +0000
Manifest next update:     Mon 18 May 2026 04:12:54 +0000
Files and hashes:         1: 0PiwBllsfAN8tUkwWzlpAACq6KQ.crl (hash: lvtkZt6/OIAU6P/gK570UF9KcbV5L5881MOp9pflC08=)
                          2: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (hash: tbhcExPyMdasBxcbE73h7b5HlPi0div8uaJX4sMb5Ow=)
                          3: D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa (hash: CHmfasvIFMB8cvnVplF2VU1d1UcvTiGGkiQVF3TlMl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl
                          rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4
        Validity
            Not Before: May 11 04:12:54 2026 GMT
            Not After : May 18 04:12:54 2026 GMT
        Subject: CN=6a015747-218d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:39:c1:cc:40:99:87:ee:8e:82:04:4d:a0:
                    a4:fc:20:27:0f:68:65:9c:3e:b7:9b:18:25:fd:1f:
                    15:40:b9:95:84:1e:75:df:4a:1d:d3:f4:a2:59:38:
                    12:be:6e:1c:c4:83:64:f4:c7:ad:30:3c:cc:1b:cd:
                    7d:96:30:6a:cb:d5:4d:61:7c:d2:66:19:11:a1:34:
                    1d:6e:e0:b7:4b:ee:1b:d9:54:47:fc:86:31:47:09:
                    9b:a3:c7:26:f5:27:c8:d2:56:61:fa:42:ea:3f:48:
                    ed:92:d9:4d:a2:99:52:29:80:83:04:8b:28:b8:40:
                    f1:a5:0c:18:50:b7:e3:e3:4f:e3:4b:09:31:ae:3e:
                    ce:0f:c4:a7:ba:8c:f6:0f:10:b6:0b:18:d1:b3:45:
                    6a:55:29:9d:fc:94:06:58:a5:0e:92:8c:16:4d:21:
                    b4:15:99:30:0b:30:81:22:66:48:6f:9d:d0:e5:58:
                    e2:47:10:94:ff:f4:c8:47:33:40:c3:96:e7:15:6b:
                    8d:51:95:17:fb:ca:fd:56:6b:df:07:0b:d1:aa:58:
                    cd:70:4f:25:a1:b7:d1:0d:a0:0b:9e:f1:18:0e:18:
                    c1:73:68:82:d6:d0:bb:4a:6c:f5:8c:32:54:d0:70:
                    14:8a:eb:f1:fe:67:e6:38:73:c3:30:86:6f:28:c7:
                    ce:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:42:D1:28:E5:36:46:A9:68:6B:34:8D:67:25:09:58:79:D5:D1:89
            X509v3 Authority Key Identifier:
                keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:75:df:24:78:70:c6:70:23:fa:a3:03:d9:1c:d0:83:bb:7a:
         14:e6:e9:a9:48:28:4f:4d:70:78:cd:5d:d5:72:ee:9e:1a:a9:
         e7:b7:0a:a5:2a:85:6f:94:ef:e9:32:bf:f8:ed:c4:60:39:d6:
         49:e4:43:18:f0:b4:ef:26:69:21:08:1f:cf:73:3a:13:4b:c9:
         54:d6:b1:a7:e9:ad:58:ed:18:22:5f:de:0a:28:fc:5b:ea:7b:
         88:c1:2b:95:9f:25:e0:b1:aa:6a:10:2b:d9:4e:17:b7:c9:91:
         cc:73:d6:73:03:ff:1d:16:ea:7e:19:d4:c1:3b:2c:8e:46:4f:
         31:6b:56:57:04:a2:12:c2:30:8f:98:94:14:72:5d:44:78:6e:
         e8:68:fe:93:51:ca:64:89:d8:f4:85:bd:3e:77:bc:b3:f4:82:
         4b:e4:e6:11:8c:ff:cf:74:96:7a:79:43:4b:a5:3a:4f:76:cb:
         3a:c0:a8:b9:6a:23:19:86:55:87:85:45:ad:53:bc:51:6a:45:
         a9:9f:88:76:6a:98:d3:28:4b:72:32:a5:89:13:54:b8:8c:25:
         02:22:65:19:42:0c:52:e8:e5:5e:1f:62:0e:e2:0b:89:25:a2:
         54:c8:18:02:67:cb:ff:74:a8:93:22:a3:56:13:a6:78:80:ad:
         c9:0b:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:49 2026 by rpki-client