Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File:                     kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier:          qksGZkMAfave6/EgqQBiGnq927NKb3mhOwF6uTUVyzI=
Subject key identifier:   31:E2:CD:99:FB:53:68:9D:F8:E0:0B:A0:45:06:5C:DD:53:9A:8A:89
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer:       /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial:       0B61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number:          0B57
Signing time:             Tue 12 May 2026 19:18:06 +0000
Manifest this update:     Tue 12 May 2026 19:18:06 +0000
Manifest next update:     Tue 19 May 2026 19:18:06 +0000
Files and hashes:         1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: 9b2ecICyD2YIADHVymWHPhDzM/XB4Zya2iAdZ3FDIJ8=)
                          2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2913 (0xb61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
        Validity
            Not Before: May 12 19:18:06 2026 GMT
            Not After : May 19 19:18:06 2026 GMT
        Subject: CN=6a037cee-4ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:e6:7a:fd:46:26:48:ea:f8:d4:50:06:2a:
                    32:e1:8d:03:76:fc:6d:1f:df:e9:25:66:7a:20:68:
                    53:dd:c1:e9:91:47:15:d6:2c:94:33:ed:f7:36:ae:
                    db:87:87:72:c6:7a:48:5a:c2:11:5a:08:7a:12:1c:
                    c1:b7:d7:d7:38:c1:44:80:29:44:50:9d:e2:a8:f1:
                    28:59:f5:4c:ec:a5:48:3f:1d:3e:e1:ec:0e:33:45:
                    d8:20:9c:1f:e2:5e:78:2c:70:8a:6f:ef:66:c6:88:
                    eb:3f:1e:60:d9:e1:5d:2e:20:41:58:16:c5:54:cc:
                    1d:b3:42:a0:f8:52:fd:52:ad:cb:6a:46:4f:46:a5:
                    fc:23:dc:89:f2:ad:d8:a2:50:5b:36:99:68:d1:9d:
                    e7:56:ba:f3:44:5a:6c:19:9a:d4:a7:38:9b:62:28:
                    22:cb:fa:bb:55:6d:ed:82:98:99:55:a1:5b:e7:41:
                    6e:cd:10:6f:88:37:a0:63:1e:3d:f7:06:11:d5:47:
                    9f:ba:a0:92:e5:45:9b:f4:ed:c4:83:5b:a2:0c:6b:
                    b6:86:c1:d9:f3:d4:61:83:96:0d:2a:5b:23:a6:70:
                    a2:11:77:eb:09:a3:c9:da:90:1f:82:04:36:b0:9a:
                    3e:31:54:07:ba:d8:6c:e9:bf:81:90:58:e2:ab:9e:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E2:CD:99:FB:53:68:9D:F8:E0:0B:A0:45:06:5C:DD:53:9A:8A:89
            X509v3 Authority Key Identifier:
                keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a9:7b:8c:e5:0e:7c:78:04:44:1c:d5:59:bd:48:68:09:3d:
         f2:0e:24:af:52:8d:5f:06:a0:46:18:0d:4f:75:ab:af:b8:0e:
         0b:1c:67:54:32:cc:bd:df:e2:47:34:a5:43:ba:0b:80:c0:38:
         93:be:d6:47:c6:e6:66:4b:57:af:9d:c6:2c:0f:fe:ba:64:65:
         23:4b:05:1a:30:68:f9:1f:3c:22:2f:a8:5e:15:f1:50:89:14:
         63:15:5e:ba:64:4c:c7:f1:45:fd:c5:95:d8:b4:70:7c:51:0c:
         7b:1d:d6:c3:fc:3e:31:d6:f9:a8:ae:64:b8:d1:2e:15:ad:a1:
         30:53:e9:f2:af:48:9b:05:ca:96:6c:80:58:8b:ff:45:b6:66:
         77:f4:b7:c6:8b:dd:59:0a:02:e2:5c:bd:cc:c4:3d:f5:25:a3:
         04:51:35:6c:4a:2e:38:9d:9f:df:0d:40:c2:6e:e0:76:6b:6e:
         a6:7b:0f:02:6e:80:8e:41:55:2f:38:36:49:62:a7:6e:4b:2c:
         79:0c:61:cd:d6:ed:ab:17:34:5b:67:e9:1c:04:3b:aa:25:cf:
         15:39:5f:07:e6:7e:fd:25:4f:77:9f:07:0e:ec:56:38:6b:9e:
         87:76:7d:e6:58:ad:98:80:ba:4c:0e:3e:e6:2c:8f:8e:60:ec:
         09:69:bd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:45:21 2026 by rpki-client