Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File:                     mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier:          FL2Yhlb2VEhiOGgITS7GxKMaWtVjXYMH0YLmzoq8Fs4=
Subject key identifier:   B7:D9:78:00:A9:4F:19:1F:1D:88:7D:8F:BC:AA:39:01:BE:E4:53:1E
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer:       /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number:          0117
Signing time:             Mon 11 May 2026 06:00:14 +0000
Manifest this update:     Mon 11 May 2026 06:00:13 +0000
Manifest next update:     Mon 18 May 2026 06:00:13 +0000
Files and hashes:         1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: /OTyDrytn4RQovq8ERVFyX0mSW81d9czTGtmRqkNnOI=)
                          2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: mdzMDwj2X3Ua3FnRlc2HjSVQDPO8dF0xSRBjaAA05Ao=)
                          3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: A2j9A1LDxFn91KRfJQkzZYzQlvghcjV9LwvRtdCgpqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
        Validity
            Not Before: May 11 06:00:13 2026 GMT
            Not After : May 18 06:00:13 2026 GMT
        Subject: CN=6a01706e-6e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:6d:a2:6a:cd:30:35:18:02:e0:f2:c2:43:
                    78:56:df:e8:64:fd:fb:ed:a4:4b:a3:fe:e7:d5:c3:
                    f6:f1:f0:e0:bc:5a:b1:7f:d7:cb:85:72:72:96:58:
                    54:6f:53:e9:57:df:af:a1:3b:f6:6a:9b:c2:90:8a:
                    a5:11:a7:cf:a2:2f:a7:ec:d7:3e:9d:b5:79:d5:e5:
                    bb:b0:9a:9e:27:41:30:d7:34:43:1b:61:71:d3:df:
                    1b:76:3b:c7:41:e7:bc:65:ab:ee:ab:00:31:e4:b7:
                    ff:26:54:12:96:c8:26:9d:db:d8:ab:e6:83:7b:86:
                    3a:92:77:37:0f:33:b9:d3:af:4e:24:51:e5:25:d7:
                    dc:1d:8c:23:6d:75:fc:b0:56:bd:8d:a3:83:c6:74:
                    ee:38:c1:d9:40:bb:92:03:c1:d6:ca:09:25:dd:6d:
                    96:dd:ea:8c:f0:09:b3:f4:84:b6:f2:0d:c8:53:bb:
                    26:8f:e0:fd:94:3a:f5:7a:98:ef:5a:1c:41:54:dd:
                    a8:61:a9:99:39:5a:47:93:5c:e1:4c:be:c4:12:83:
                    7a:51:9c:d6:f1:2a:e4:54:a8:56:cd:07:40:15:23:
                    8e:5f:bb:ad:5d:40:76:32:ce:24:e5:a5:4f:20:87:
                    75:df:99:37:6b:17:ac:61:14:17:1f:57:39:ae:44:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:78:00:A9:4F:19:1F:1D:88:7D:8F:BC:AA:39:01:BE:E4:53:1E
            X509v3 Authority Key Identifier:
                keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9c:7c:b6:5e:9c:1f:1d:d0:41:f8:c3:e9:7e:2e:95:57:5c:
         45:99:5d:66:1e:74:32:8b:62:ee:e9:e8:7f:83:3f:fa:94:d8:
         72:c7:41:24:59:0f:d6:c3:a7:95:98:3e:0e:02:09:03:2e:d3:
         97:39:10:c6:0b:ef:51:d2:12:c0:44:4d:ad:45:82:2d:cc:16:
         63:4d:27:9f:df:bb:01:1a:84:50:9f:2f:a6:36:ea:45:0c:f2:
         da:3c:c3:64:cd:d6:1c:2b:77:14:54:ae:87:80:75:7a:3a:76:
         68:61:17:6c:37:b8:39:27:90:13:b9:98:0b:46:2b:f1:68:2c:
         21:59:c9:99:f9:bb:e1:a4:ec:10:e1:c9:c1:b0:f5:13:cf:d7:
         5a:d5:a9:6d:89:7a:ac:51:ed:ff:f7:85:8e:a9:70:af:eb:21:
         aa:9e:0e:e4:4d:35:88:52:c0:16:86:54:46:49:a0:82:d7:d6:
         29:a3:9e:1d:41:04:3e:32:34:28:a1:f0:45:a6:fe:0c:bf:64:
         04:67:b0:97:4f:23:e0:3c:d3:7e:28:68:d4:0e:73:66:7c:ad:
         38:e4:e1:86:1d:15:3e:92:9b:27:76:f2:37:95:46:72:2b:74:
         b4:01:8d:e1:e6:f1:4f:42:53:00:1e:04:1b:b1:91:06:e3:18:
         24:1e:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:16 2026 by rpki-client