Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
File:                     ApdxaY8oNwXUpN4S5XOVhcvrjww.mft (raw, json)
Hash identifier:          +1NNwD0MslfZyJ82P9B65FUc0DVhIt2iZrml1cuTf+Y=
Subject key identifier:   0F:40:2A:5F:F6:C0:8C:CC:40:76:0E:A6:FF:9C:40:55:04:3D:63:EC
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Certificate issuer:       /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
Manifest number:          33
Signing time:             Wed 13 May 2026 00:43:12 +0000
Manifest this update:     Wed 13 May 2026 00:43:12 +0000
Manifest next update:     Wed 20 May 2026 00:43:12 +0000
Files and hashes:         1: ApdxaY8oNwXUpN4S5XOVhcvrjww.crl (hash: aKR4yYETBZN3LAxABBkrewllBl66/4jKUHXYE+3BY1o=)
                          2: 56C55F20266411F1AE95FD6DA8833773.roa (hash: hUJYmbEayh5+7CMHRvgMiSYWtpPReQpF/dZMyCcKu4Q=)
                          3: 579B4ED2266411F1AE95FD6DA8833773.roa (hash: Wh6GMEPQbJm2Jl2DMg8rLhNDPE89Mo+plpzmnnXpFTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
                          rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
        Validity
            Not Before: May 13 00:43:12 2026 GMT
            Not After : May 20 00:43:12 2026 GMT
        Subject: CN=6a03c920-87d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:48:91:cc:cc:ef:03:b2:52:00:bb:b0:22:
                    46:f9:88:cc:94:2d:97:a0:a1:63:b8:d9:90:3f:ee:
                    49:15:47:47:c1:c2:50:57:6e:61:c6:34:ff:18:76:
                    0a:0d:10:56:46:09:b0:e1:36:20:62:08:c5:9b:32:
                    59:7f:d5:75:a8:67:96:f1:02:1f:a4:69:09:ef:5c:
                    49:7c:90:05:9c:09:77:19:c6:24:06:1e:2a:47:9b:
                    64:c5:40:2b:69:70:0a:99:05:12:60:0e:87:4a:02:
                    1e:97:7b:5a:0b:52:4a:df:66:e8:fa:00:7b:af:3f:
                    1a:31:5a:66:63:84:72:01:03:02:a1:93:ac:51:be:
                    c5:21:9c:66:c4:1c:4a:6d:e9:69:4a:14:88:62:cd:
                    81:5a:da:fe:11:c3:d6:2a:65:de:2b:3a:a8:7d:f3:
                    45:98:8f:2f:79:81:03:22:ad:3f:35:2e:33:b5:79:
                    2b:a5:64:2e:45:8f:7b:d6:0f:8e:b8:00:f8:6a:e8:
                    2f:70:36:cf:67:66:eb:98:54:08:59:23:b0:b9:64:
                    8a:25:e2:e6:5f:7d:6a:4f:8a:e1:5e:50:ca:42:dd:
                    d7:e0:fc:21:49:84:b1:7e:fb:f0:8a:13:20:cb:1d:
                    a3:50:1a:94:91:cb:b7:22:2b:8f:76:00:ca:04:b5:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:40:2A:5F:F6:C0:8C:CC:40:76:0E:A6:FF:9C:40:55:04:3D:63:EC
            X509v3 Authority Key Identifier:
                keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ba:82:17:3c:48:4c:48:2f:b6:7d:d5:be:c8:a5:a5:b6:24:
         4f:73:d3:2d:d1:09:8f:b4:23:2f:0b:5b:db:3d:28:cd:16:ba:
         55:c4:67:9d:8f:1b:e6:c2:b6:38:7b:47:eb:15:e8:2e:c3:bc:
         41:54:37:e7:0e:8e:d5:83:02:85:7b:46:38:fc:2e:55:80:2f:
         34:db:d2:88:ac:5d:3f:b1:5d:d6:5e:cd:9a:93:70:ae:09:bc:
         78:3c:f0:51:25:f3:19:48:b4:ce:13:e2:79:7b:6d:eb:63:92:
         15:8d:28:0d:6e:3c:83:b8:31:74:ed:93:22:5d:1b:c8:fe:ce:
         09:f4:38:63:2a:c9:c3:0a:e9:da:4e:36:a5:d0:85:31:fb:26:
         c3:4c:ae:be:bb:7c:6f:a3:22:49:76:c5:7d:3e:c1:64:47:85:
         31:c1:d2:16:b1:c4:04:a3:28:24:25:ee:b0:6d:8a:b9:79:e9:
         ac:a8:9b:3e:cb:c7:9a:f6:51:97:09:49:d0:81:74:57:ff:53:
         07:d5:2f:13:60:f1:38:ea:f7:4a:ff:0f:b1:87:a7:d9:19:87:
         b8:5c:4d:78:17:be:48:6a:f6:67:95:a9:cd:a3:57:15:0c:98:
         79:2a:6c:11:df:b8:12:eb:7d:62:19:56:e5:1f:fa:ca:bc:6d:
         21:78:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:09 2026 by rpki-client