Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
File:                     rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json)
Hash identifier:          v+06HS3QQD98CoNCnGdY2yN9+wSbTwxsigE0EAh6Auk=
Subject key identifier:   8F:0D:2A:3F:F7:C7:77:0D:76:31:3E:E8:01:AD:10:E5:FF:71:AC:3A
Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
Certificate issuer:       /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Certificate serial:       09BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
Manifest number:          09AC
Signing time:             Tue 12 May 2026 20:01:05 +0000
Manifest this update:     Tue 12 May 2026 20:01:04 +0000
Manifest next update:     Tue 19 May 2026 20:01:04 +0000
Files and hashes:         1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: K4W8sCbbzsBvtcc/rbhWig32l6y3MYH4vM86gdYNv0M=)
                          2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: PQw146eyKjPqxP/GNGS/hIkUi+lf/ZqFvVQElnQS1VQ=)
                          3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: QVfdEdXCocoSVGgWS+Yl9hl7mgDFeG4r0nSsOh9ZTOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl
                          rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495 (0x9bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
        Validity
            Not Before: May 12 20:01:04 2026 GMT
            Not After : May 19 20:01:04 2026 GMT
        Subject: CN=6a038701-766b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:78:ad:39:c9:e0:e9:71:9d:92:c8:1a:08:
                    7c:67:08:ce:c8:b0:21:64:8e:d2:3c:ba:40:c1:62:
                    b0:0d:f6:d0:7f:50:42:b1:f2:99:35:3b:3b:7a:2c:
                    4f:62:f6:5c:92:31:37:3f:5d:36:eb:0f:f7:ed:46:
                    f5:33:27:b1:fa:dc:08:de:ae:4f:9f:75:d2:55:a6:
                    4d:d9:fe:a5:3c:0d:6d:0c:a7:77:7b:1b:b8:32:16:
                    75:c3:db:0b:b3:40:a5:26:ac:7e:8e:33:7c:26:e1:
                    75:29:06:4b:0f:4e:31:63:5e:e3:41:f6:8d:2a:8e:
                    30:70:9a:ff:34:c3:c2:66:08:86:02:38:b3:b3:70:
                    5d:52:3c:17:0b:6c:b1:96:58:6e:74:72:3f:53:7e:
                    c4:3b:e8:8b:ff:8f:c9:39:b8:ec:93:78:8e:fd:0e:
                    58:b3:6e:88:95:37:33:cb:ce:04:76:e9:0b:9a:52:
                    33:5c:19:5d:0e:4f:a4:e1:7a:33:65:17:cd:31:da:
                    57:7f:a2:99:4c:7e:72:32:3e:13:26:2f:a6:2d:f2:
                    e7:e4:f7:84:9b:f3:0f:fd:52:32:0e:e7:3c:b6:74:
                    d6:01:b0:a9:d5:4a:98:b8:73:99:4d:62:c6:4e:ca:
                    5e:a0:53:35:6b:4f:71:5c:01:58:0e:f8:44:39:9f:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0D:2A:3F:F7:C7:77:0D:76:31:3E:E8:01:AD:10:E5:FF:71:AC:3A
            X509v3 Authority Key Identifier:
                keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:86:fc:7d:31:65:ed:9a:77:70:4a:6e:dd:03:95:1b:23:
         47:86:81:c3:a2:7d:5d:1f:c1:0e:82:32:1d:da:97:a7:08:c5:
         a5:f0:44:c9:ec:f1:3a:ee:83:ff:92:49:57:6d:d1:e4:20:01:
         3b:aa:27:4b:06:7b:27:fa:88:7a:bd:bf:fc:76:20:50:3b:ea:
         16:d1:23:06:fa:db:70:6b:87:f6:a6:88:07:27:66:3a:0d:a2:
         8d:b4:7a:ce:d4:ac:b0:56:dd:38:2e:9c:68:1e:21:98:b7:00:
         40:6c:a8:8f:71:63:9c:64:49:75:4e:4c:f1:e8:4d:4b:b0:3a:
         83:72:3d:4f:8c:25:6a:5c:ce:05:4f:32:63:90:9e:d3:3a:ed:
         49:50:f9:ab:09:95:83:9c:46:c3:0e:21:fa:8d:b5:8c:62:5a:
         a5:70:cb:f3:06:79:8d:0f:4f:bb:b3:31:cb:39:7e:52:28:f8:
         da:85:75:66:90:78:04:ef:63:55:8c:4b:f3:db:25:3f:4a:cb:
         56:f1:f5:ca:4e:2f:4b:bf:f2:6d:be:b5:fb:7b:8e:70:76:3d:
         ce:07:08:f1:a6:1c:92:4f:62:90:6d:a9:f7:15:eb:98:84:78:
         36:60:82:c2:18:4a:e7:ec:c1:30:64:eb:99:6f:b6:02:73:9b:
         41:0c:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:44 2026 by rpki-client