Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          RJ68jpqaYIq8j3CJGSj2VUwE4kJGo7FbNHmjCiG+L+Q=
Subject key identifier:   35:E1:24:A4:29:8F:25:CE:2F:B7:72:0B:BA:AC:49:8F:43:E0:7D:C6
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          56
Signing time:             Mon 11 May 2026 08:21:29 +0000
Manifest this update:     Mon 11 May 2026 08:21:28 +0000
Manifest next update:     Mon 18 May 2026 08:21:28 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: 3nAZu2RTUmpTtVgpLJUqRXPZx6KaeefobmVoJdwkIUk=)
                          2: BD3AE9AC47AF11F1862D4448A9833773.roa (hash: Sa/+2RDFFnvmTt5yGyNUTGOg6sr8HGm5v/QNH+G6roA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: May 11 08:21:28 2026 GMT
            Not After : May 18 08:21:28 2026 GMT
        Subject: CN=6a019189-6bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:bb:70:cc:4b:01:bf:32:0b:2c:aa:e0:2e:
                    16:fa:d4:86:0c:c3:0d:b7:8f:88:87:18:b0:9c:85:
                    b7:9a:7b:a2:5f:9b:31:05:42:04:3d:74:d8:36:64:
                    31:5d:6a:22:bf:14:e0:a2:80:87:44:e0:c8:b9:48:
                    d4:2d:77:80:d1:8f:d0:b4:65:4a:e0:87:11:86:da:
                    e6:8f:d0:2f:a8:f1:03:34:9b:35:c9:6b:fe:8e:82:
                    d8:b8:54:cf:53:a0:6c:8d:ad:4b:26:2c:a5:ca:ab:
                    35:be:6e:6e:b3:76:f3:60:54:a2:46:90:6b:27:52:
                    ea:e8:fd:6f:4a:a4:4a:a4:b5:ca:ad:67:7b:92:7e:
                    c7:fb:83:1c:01:3b:d4:40:28:24:be:b9:75:3e:6b:
                    e6:d3:32:c2:cf:12:b6:f7:1b:84:45:9d:87:48:da:
                    4a:7f:82:91:62:14:c6:c9:1b:0c:b4:18:dd:9f:38:
                    12:28:c1:74:af:d8:36:e5:72:d7:a9:56:d3:2c:b4:
                    db:96:37:30:54:e6:0a:f2:3e:34:da:8c:72:eb:10:
                    d9:f2:c3:e5:a1:22:e7:b7:65:d0:6f:df:11:eb:10:
                    c5:2c:fe:7a:6d:d7:25:97:65:fe:1c:8e:44:43:8c:
                    21:c3:27:2f:f2:1a:a4:3d:fb:61:3b:42:84:d0:87:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E1:24:A4:29:8F:25:CE:2F:B7:72:0B:BA:AC:49:8F:43:E0:7D:C6
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:40:c6:42:c5:a7:11:35:5f:ec:e9:f1:94:eb:89:dc:cd:03:
         20:95:21:ac:e0:37:d9:2c:53:1a:9e:91:86:b9:95:6d:e2:f7:
         ba:63:5c:e1:50:33:05:df:2f:73:90:2c:2d:df:4d:d2:5f:72:
         b4:09:2e:a9:82:5b:db:53:c9:54:2c:11:51:6a:de:f3:5a:0e:
         5a:29:e9:08:e2:4a:51:a5:85:bd:6f:f5:13:1f:e2:81:b8:30:
         7d:f5:df:c9:ee:93:0c:2f:29:ea:35:ab:80:6b:2e:aa:19:d2:
         e4:30:03:8f:4e:65:6f:5d:ef:2a:29:46:be:4a:97:1f:a8:2c:
         ff:f3:68:a9:87:f5:da:03:4e:49:c1:b1:13:28:07:81:fe:c0:
         0a:8c:75:2a:30:f8:df:b3:36:63:66:0c:27:5f:25:1e:54:11:
         c9:98:f3:4c:15:c0:46:e2:9d:bd:30:53:81:2d:a8:db:80:7e:
         ef:64:6f:64:c1:9d:39:4c:5f:ca:26:0f:6a:3d:cb:c4:f6:19:
         60:fa:fa:3b:a0:22:ff:24:77:f4:24:5a:03:af:6a:05:44:a7:
         4e:9d:c6:d3:be:de:6b:c3:37:3c:da:06:7a:59:72:43:bb:7d:
         8d:56:ef:e5:84:4e:15:1e:43:fb:2f:4d:c9:fe:b1:88:7b:29:
         3c:1d:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:24 2026 by rpki-client