Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
File:                     _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json)
Hash identifier:          +IiEpMj9FA40WgQQouuOZbP1ibJOQ4E2XtlgKdBC0u8=
Subject key identifier:   42:B4:D1:E7:4C:01:A6:65:4E:58:12:98:72:5B:48:C4:28:5D:0F:23
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Certificate issuer:       /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial:       0728
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
Manifest number:          071E
Signing time:             Tue 12 May 2026 21:59:33 +0000
Manifest this update:     Tue 12 May 2026 21:59:33 +0000
Manifest next update:     Tue 19 May 2026 21:59:33 +0000
Files and hashes:         1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: LadDrAPVFYGqLsFI6VIbauVSwQyO1uCJHQoIjxnzSQQ=)
                          2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: aA6Dw3R9kVAHSoiUlastCf/DMZ8hslWGyzDMB+ksQeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
                          rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
        Validity
            Not Before: May 12 21:59:33 2026 GMT
            Not After : May 19 21:59:33 2026 GMT
        Subject: CN=6a03a2c5-19e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:c2:97:39:b9:47:00:cc:be:5d:da:6b:7f:
                    17:83:39:55:d9:7d:2e:51:1e:b1:d7:a7:0b:02:29:
                    9d:66:f8:b5:94:82:58:58:45:f5:e3:7f:84:c0:0a:
                    b6:f1:1a:76:12:9d:83:64:e5:a5:3c:c2:ad:e1:9b:
                    d1:95:a7:4a:f0:c9:99:d5:f5:22:55:3e:53:63:d7:
                    86:2f:42:80:1a:c6:e4:ad:cc:a3:bf:7a:e7:14:d9:
                    37:6c:5c:dd:58:2d:e7:03:3d:c2:9e:6f:3b:0c:d4:
                    5b:3c:38:2f:81:42:2e:77:ff:d9:60:69:56:23:de:
                    c4:87:53:e4:07:2f:63:b4:17:7c:7f:b5:18:7d:01:
                    dd:a9:f6:17:13:0c:ec:b1:61:58:69:94:b1:8a:5f:
                    d7:34:6f:a4:d1:39:82:67:13:e0:c6:00:cd:ef:1f:
                    74:a4:9f:e2:89:c4:a6:40:54:19:58:90:63:bd:a9:
                    ac:50:9b:1b:e0:95:fc:27:0a:2b:00:40:a1:49:f8:
                    d7:f9:c3:26:db:db:22:6c:71:5e:50:a8:8c:70:8e:
                    bf:55:93:eb:2f:d3:b8:35:ef:ab:cc:b7:e7:18:f9:
                    56:86:d0:e3:51:9c:54:aa:bc:7b:b9:66:17:56:18:
                    a3:79:e0:a7:8c:32:87:b1:d7:62:e9:e1:1e:5c:a5:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B4:D1:E7:4C:01:A6:65:4E:58:12:98:72:5B:48:C4:28:5D:0F:23
            X509v3 Authority Key Identifier:
                keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b7:43:46:0b:e5:f8:be:23:8b:de:a2:21:9b:d3:e1:02:85:
         81:f6:ae:18:1a:3c:f1:bf:d2:57:42:c9:08:8a:ef:1a:a6:36:
         f8:22:00:57:25:ed:7d:c8:80:4b:d1:1e:7e:69:4a:4e:21:04:
         ce:67:a7:0d:c1:20:f2:03:2e:6e:b5:80:6c:63:d5:fe:8a:0e:
         7d:27:23:13:16:1d:b0:09:0c:f2:68:7b:d4:03:a0:06:50:e9:
         a0:d9:e4:13:f6:b5:f4:82:fb:a3:ef:0f:a2:cd:e6:9e:51:b9:
         bd:3a:b0:0f:29:15:6b:07:40:ac:d9:1e:b4:f2:19:17:fc:03:
         09:f4:0f:3d:7a:70:5a:80:50:84:03:81:d5:42:c6:ca:62:2c:
         84:e7:8b:7e:70:83:d7:9d:d5:9a:3a:3d:f1:5c:61:ec:d2:b2:
         d5:b5:af:25:d9:a2:49:b8:10:c6:26:32:39:0d:8c:29:f3:5e:
         0e:57:30:f9:35:fb:fc:22:31:e2:80:63:b9:95:00:5a:e9:7f:
         26:bf:f3:6b:1c:f3:96:c6:5a:0d:14:f0:c9:37:f8:ae:c8:cd:
         59:d7:f0:6b:a0:e9:d1:0d:84:63:c0:d5:79:14:be:55:00:17:
         03:95:fe:8a:38:4c:92:0c:6c:cf:e0:b0:bb:5b:56:22:b4:b3:
         32:b7:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:26 2026 by rpki-client