Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File:                     j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier:          DdPhWQaW3JBddDtrqpBAAzF/r0u/3/rw8oQuQvo5QUE=
Subject key identifier:   CA:AB:4D:66:F6:E9:B7:36:6F:E2:5A:E8:4C:2B:C1:D8:C5:6D:55:CC
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer:       /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number:          0221
Signing time:             Mon 11 May 2026 02:50:21 +0000
Manifest this update:     Mon 11 May 2026 02:50:21 +0000
Manifest next update:     Mon 18 May 2026 02:50:21 +0000
Files and hashes:         1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: 9OU52S177innwgwnFazQXh2nlraX9VlvdC6UZJ83zFM=)
                          2: 87695D32591811EE973B1058C4F9AE02.roa (hash: OI2+qJAVneFLGz/M4RVXmY/qZKzcprsapI3tIgHwYvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
                          rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
        Validity
            Not Before: May 11 02:50:21 2026 GMT
            Not After : May 18 02:50:21 2026 GMT
        Subject: CN=6a0143ed-3557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:25:18:3f:c7:21:3d:35:62:a0:dc:3a:b6:
                    06:be:73:0c:91:df:93:d4:76:04:d6:d7:77:23:56:
                    16:2b:8e:f1:36:50:9d:4d:b1:01:3b:5b:1a:14:78:
                    5c:15:8c:33:7c:b6:a7:5b:ea:d7:b9:51:a9:11:02:
                    bc:b3:05:c7:96:06:20:c6:c1:f6:2e:31:74:86:0b:
                    97:9f:51:d3:1c:5e:86:94:b6:4e:82:bb:67:7c:bc:
                    29:a9:82:7d:ee:d7:44:93:7e:80:48:40:50:44:6e:
                    a6:d3:ce:36:07:4a:e5:5e:90:1d:fd:01:96:5a:fa:
                    1d:98:85:cb:9d:cc:1b:c4:f9:c6:f4:f3:87:c8:b0:
                    42:59:52:84:bb:23:85:e0:93:dc:e8:ea:41:7a:ba:
                    15:5c:64:54:a0:de:79:ad:5f:f1:73:30:c7:65:fe:
                    1e:67:bf:ec:e6:b6:07:0c:b7:25:dc:97:1f:06:64:
                    75:6a:26:af:a5:77:b9:c6:bb:83:c5:aa:54:92:dd:
                    b5:c9:1a:df:85:53:d1:92:da:ee:68:8a:7e:f5:da:
                    14:50:c4:2e:8b:07:e9:b3:8e:d1:fa:8e:78:39:3d:
                    a8:c7:ec:0c:c9:83:22:52:06:0b:56:db:53:aa:06:
                    c7:5f:cc:78:04:7c:f0:a2:22:3d:97:9b:6c:83:92:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AB:4D:66:F6:E9:B7:36:6F:E2:5A:E8:4C:2B:C1:D8:C5:6D:55:CC
            X509v3 Authority Key Identifier:
                keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:72:75:c1:8b:24:ac:0b:05:f8:90:e0:2e:a4:53:82:4c:
         bc:0b:72:3a:46:a4:2d:1d:d5:c5:c6:ce:10:13:95:59:ac:48:
         ee:28:d5:2d:a5:a7:cc:b1:89:c1:f5:1c:be:20:5b:fc:90:ad:
         e7:7a:01:98:c0:83:97:24:0a:9f:ac:8c:c2:91:47:d2:ff:ad:
         5a:48:87:8b:e2:99:b0:dd:a1:c3:3d:38:96:50:7c:f3:78:36:
         85:7a:39:35:64:57:3e:3d:55:69:5a:d4:78:a5:de:42:57:26:
         23:c5:81:0c:8a:8f:7f:22:e7:9e:81:e1:cb:1f:e2:02:91:24:
         47:a1:01:99:0a:c4:a3:a9:86:69:41:54:7f:cd:40:06:aa:78:
         87:89:dc:b0:80:26:80:4a:0f:6b:29:90:24:f9:0d:58:20:83:
         79:65:c2:08:44:4a:66:6a:48:c7:ff:0f:a0:71:7e:84:ce:86:
         7e:84:2b:35:a5:1d:0e:92:c0:5e:6e:ec:f8:a2:7a:a9:12:b4:
         93:6d:85:53:dd:90:ab:cf:af:95:8c:eb:a4:54:51:35:0f:a0:
         3c:dc:9e:1e:6b:c3:77:89:b0:a6:2e:c4:5a:21:b9:b2:85:fd:
         18:28:1c:96:60:d0:65:6a:19:9c:2d:42:a9:1d:4d:e7:fc:57:
         9e:4c:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:26 2026 by rpki-client