Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
File:                     AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json)
Hash identifier:          kDRb2nHpYULjfY+n3V2ZzI24NszC+FmDRozfRkoWQM0=
Subject key identifier:   5C:99:3F:C9:D9:92:19:BD:08:E8:D8:54:BE:BB:D7:F2:09:1B:A9:B7
Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4
Certificate issuer:       /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
Manifest number:          015A
Signing time:             Wed 13 May 2026 05:08:47 +0000
Manifest this update:     Wed 13 May 2026 05:08:46 +0000
Manifest next update:     Wed 20 May 2026 05:08:46 +0000
Files and hashes:         1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: 4kJqQ8xvN3Xs6Xln9oViktB491AL3Zp0VV/r89H0Nr4=)
                          2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: YmYTcwhgDvKWuwVdE5g0+SEXv17ijbphmsKcmV8ZajM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
        Validity
            Not Before: May 13 05:08:46 2026 GMT
            Not After : May 20 05:08:46 2026 GMT
        Subject: CN=6a04075f-0a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:67:64:e4:cd:81:c9:04:17:5e:05:6b:37:
                    d3:f5:5b:59:bd:35:db:04:90:d8:66:2c:d5:ef:af:
                    b4:c1:88:d5:ec:35:57:d2:dd:b5:a6:7d:af:0d:35:
                    4d:a4:86:d2:e9:53:2a:a2:47:ca:f0:55:8c:5f:59:
                    d7:1b:4b:d2:b4:f1:54:98:1d:88:54:11:94:04:56:
                    b3:7e:a4:af:6b:79:56:e7:12:2c:0c:8d:d9:f0:39:
                    51:72:e5:b2:14:f7:1a:28:cd:a9:75:99:de:1c:ea:
                    20:ef:eb:a5:c2:02:8b:5f:10:d3:ea:39:ca:58:39:
                    a5:e3:13:b3:7e:6c:bc:79:53:b7:76:bb:7f:e9:82:
                    13:f2:57:7a:50:3d:a8:e5:87:d5:c1:48:56:ca:3f:
                    0c:4e:a0:76:e8:61:b2:14:28:a0:b6:52:f8:ce:22:
                    06:d8:68:32:30:51:d8:db:ac:b3:67:f3:d1:01:9b:
                    8d:6f:fc:2a:29:d3:7a:2c:9e:da:96:33:36:81:0b:
                    be:7e:4d:9e:59:82:51:3d:45:02:f8:e8:28:75:31:
                    57:74:94:fe:27:9c:55:cc:84:99:2a:96:d2:05:06:
                    a2:2a:de:0a:6a:77:c9:57:3f:b8:60:35:78:d0:72:
                    d9:5e:2c:33:55:d7:96:fe:26:49:b2:37:fc:84:9b:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:99:3F:C9:D9:92:19:BD:08:E8:D8:54:BE:BB:D7:F2:09:1B:A9:B7
            X509v3 Authority Key Identifier:
                keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:7e:9e:01:43:0d:61:e4:3b:13:72:14:8d:de:8d:32:09:8d:
         19:cc:4a:25:b2:0b:20:5d:dd:c2:ce:e7:b8:8e:0f:12:7f:df:
         fb:26:5d:58:de:21:fd:09:17:93:2e:42:f5:9f:b9:2e:4c:e0:
         8d:ee:e5:5d:c6:9a:12:ac:7b:66:25:26:f6:ed:33:5b:7e:2d:
         d8:da:5d:c3:6f:81:26:65:42:b1:6e:24:d5:9d:68:26:1c:44:
         f8:ea:ab:1d:40:e6:2d:49:74:7b:61:ee:23:4f:f7:73:b1:01:
         4b:d9:22:ed:d8:30:37:34:35:a9:f6:90:e6:42:d7:c2:c1:7f:
         58:8c:c2:4d:2e:17:16:a0:85:50:bd:ad:4d:ea:f8:90:1f:4f:
         d7:75:c0:c4:5e:50:0a:97:c0:16:81:71:53:4c:e5:49:8a:bb:
         16:6c:0c:cc:c7:ff:ae:2d:b0:61:24:2a:1a:c5:19:18:1f:a0:
         15:48:25:ff:c5:95:1b:ce:ff:ec:70:08:f4:b4:5f:ee:e8:1c:
         c9:8e:99:bd:b2:5e:99:40:3d:90:80:29:e0:74:1e:07:bc:47:
         72:9b:c4:cf:b0:5d:8b:51:46:07:2a:4c:a6:57:8e:ed:48:eb:
         2c:57:37:27:f8:66:a0:7d:f4:6c:35:4b:b6:57:9b:e6:41:ca:
         d8:1b:5a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:43 2026 by rpki-client