Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          77Ggdxzp3LGPbPUygsL25MEAQviUNNFSlt6UvrMegs8=
Subject key identifier:   9F:C4:E7:20:AF:EA:4F:F5:AC:14:A8:BC:15:45:FF:19:10:F0:09:48
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       0609
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          05EF
Signing time:             Tue 12 May 2026 23:07:38 +0000
Manifest this update:     Tue 12 May 2026 23:07:37 +0000
Manifest next update:     Tue 19 May 2026 23:07:37 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: NyHYjyFzM3gnHMvPFuLHiLWWNZTGtcjlaO/fFQltwCY=)
                          2: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: qTi+k35z0mHRZj7qMe2beLJhL5VMNrzBjZFMcygcHSw=)
                          3: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: May 12 23:07:37 2026 GMT
            Not After : May 19 23:07:37 2026 GMT
        Subject: CN=6a03b2b9-02ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:50:79:66:fe:64:a1:01:e9:26:56:c7:a2:66:
                    f0:55:c5:cd:e2:f6:17:86:f3:3c:42:a8:a1:da:ee:
                    f5:03:0d:8c:cc:e4:15:e4:ce:c3:75:5c:98:e6:78:
                    58:46:15:30:ae:3a:ee:ab:b9:17:fd:cf:06:63:46:
                    cf:45:58:61:48:a3:f2:ed:14:8a:c5:3a:06:00:e9:
                    be:15:86:0f:79:14:96:1f:46:99:6f:69:6a:6f:77:
                    25:b7:ba:c8:7d:9e:0b:92:8f:57:2d:15:af:02:8a:
                    2c:09:1f:5a:c4:a4:83:98:59:2f:e7:42:f8:76:25:
                    96:74:90:ad:bd:c6:56:5b:bd:07:f8:59:3e:f2:e4:
                    99:91:ec:7e:5c:57:e7:f6:fd:d7:81:b7:55:a1:36:
                    5f:be:70:ba:92:9d:3c:63:8a:b5:2e:3c:14:27:6e:
                    39:7b:07:82:46:2c:a8:ff:7e:5b:67:0b:3b:7f:8f:
                    6d:ed:c0:3b:c6:af:fb:46:21:f1:6c:9e:3f:aa:c1:
                    d0:c9:ac:f2:78:b7:7a:ee:71:dd:08:47:83:c9:cc:
                    2b:47:20:69:71:d2:82:4b:1e:ca:95:e9:89:f6:b3:
                    97:87:30:4a:c9:ec:03:1f:8f:54:66:19:48:32:06:
                    cc:a3:37:67:1c:66:14:54:ff:78:4c:bc:a7:91:d1:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C4:E7:20:AF:EA:4F:F5:AC:14:A8:BC:15:45:FF:19:10:F0:09:48
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:b8:b2:f8:90:8c:4e:76:5a:ee:15:87:a0:17:6f:48:53:
         37:af:d0:78:c0:49:02:68:a3:40:74:d7:ca:6c:bc:09:4b:9c:
         f3:e1:9b:6a:6e:3a:5a:23:69:9e:89:ef:a9:8e:38:82:c4:01:
         9d:b5:4d:96:84:70:2d:00:5e:82:00:29:5f:17:03:52:9a:3d:
         f3:88:f0:f8:81:c8:be:f8:3b:f0:65:08:45:ca:ac:f9:a6:28:
         fd:1d:f7:12:a0:a0:6f:08:43:0c:22:84:7b:24:09:a2:4b:81:
         00:ef:0d:90:3b:2c:4e:6c:2b:80:54:ee:0b:59:bc:69:63:5a:
         04:81:12:27:32:6d:f4:d2:71:40:02:c1:51:6c:61:1a:6a:9e:
         25:e3:b5:de:ad:97:41:1d:cb:5a:39:85:32:0c:7d:75:dc:33:
         47:6d:74:9e:dd:13:58:b5:8c:f4:7f:b9:a5:8e:0a:0e:00:2e:
         ce:6f:dc:4b:b7:5d:04:f0:28:e8:c8:24:61:b9:99:50:6c:20:
         04:16:84:16:11:e7:b6:be:67:0b:64:df:fb:9e:90:24:d2:7d:
         2a:22:d9:61:b7:c1:fa:51:dd:a0:0e:71:14:91:e5:cb:92:07:
         57:6e:e9:d6:14:f6:55:e4:8a:72:08:f1:53:da:fa:e8:53:0b:
         ed:ff:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:07 2026 by rpki-client