Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
File:                     C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json)
Hash identifier:          5QDw+Itr6ElCGYeZ7kq829h9jbPWLxwT0qVf9ag+xEU=
Subject key identifier:   AA:DF:CC:4A:D7:30:0D:9B:6E:A7:45:01:29:9B:49:8C:58:70:4A:04
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Certificate issuer:       /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial:       0466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
Manifest number:          0437
Signing time:             Wed 13 May 2026 00:29:33 +0000
Manifest this update:     Wed 13 May 2026 00:29:32 +0000
Manifest next update:     Wed 20 May 2026 00:29:32 +0000
Files and hashes:         1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: b/i6V+J3zBbNqk4AeadK+jnSW3ArVO+zfroDmOE/bIU=)
                          2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: PEFUWPuuL2vMfvcqlcYxIw9blVOMpnd6Xf7lxivGVE4=)
                          3: E4EB20D84C0C11F08C577458C4F9AE02.roa (hash: cFFlJNrhpUbvuMCGNdE9O4VBJt7bZuHhzuPDD0tE+So=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
                          rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126 (0x466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
        Validity
            Not Before: May 13 00:29:32 2026 GMT
            Not After : May 20 00:29:32 2026 GMT
        Subject: CN=6a03c5ed-6100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:ef:46:f4:fc:ff:e8:8a:51:2a:01:73:20:
                    12:c2:f6:c1:cb:70:96:03:4a:ce:17:a4:4c:8e:f2:
                    2e:df:22:bc:61:5a:1d:22:a7:47:a4:cf:28:95:5b:
                    fa:a1:35:dc:f2:12:d9:18:8b:49:01:8b:91:a4:91:
                    bc:ed:60:c5:81:02:1a:92:4d:05:20:69:71:73:41:
                    d6:78:ef:92:ca:46:33:7a:a4:fa:55:a1:7c:99:5e:
                    ab:d9:f4:e5:0c:db:36:c0:93:14:7a:ce:ea:60:bb:
                    f1:ac:8b:ba:df:cb:47:fb:b8:38:e5:96:3d:f9:6d:
                    40:14:a4:80:f0:8b:38:a7:8e:02:08:a4:db:0f:1f:
                    4f:2c:75:8e:14:50:37:84:7a:be:6a:4e:a8:84:aa:
                    a6:91:04:98:44:f1:79:84:31:1c:1e:c3:bd:8b:a0:
                    66:71:93:cf:68:87:87:0a:10:33:af:c6:ca:80:b2:
                    e3:cd:19:0a:8e:45:a4:a0:db:a5:89:12:84:b6:89:
                    77:70:d8:44:33:b9:7f:8e:61:a0:ed:c6:59:ae:69:
                    17:4e:53:24:36:05:f2:99:10:ce:ad:7d:09:e6:80:
                    78:ee:06:ff:61:ec:1a:45:e5:a3:b4:b9:03:a0:7d:
                    08:8a:90:35:3b:5b:09:37:9b:4c:ae:b1:9e:49:b2:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:CC:4A:D7:30:0D:9B:6E:A7:45:01:29:9B:49:8C:58:70:4A:04
            X509v3 Authority Key Identifier:
                keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0c:e2:ce:e2:97:b2:c5:45:79:3f:32:bc:48:c8:50:cc:81:
         6a:09:8b:74:36:6e:cf:b6:98:04:86:ef:b3:dc:10:04:d7:c1:
         a8:5d:87:2a:7b:9a:9f:dd:b6:7a:93:e2:e7:ee:65:5f:fa:d5:
         cc:ef:8b:2f:b9:5a:28:23:b4:06:09:2d:79:26:76:be:58:9c:
         eb:b7:a6:c7:de:06:14:ed:96:5d:94:32:93:df:04:5e:bb:1c:
         13:fb:c1:88:8c:73:83:b3:0f:56:48:95:3d:17:94:00:2c:a3:
         fe:9c:80:89:8e:d7:ae:42:0a:08:48:37:cf:34:e9:9c:c5:92:
         56:b1:e4:ee:3a:d7:96:1f:93:ec:71:95:29:5c:e4:e5:d5:a5:
         9b:ba:75:cb:aa:7c:04:a4:95:4a:75:39:ac:c3:d0:d5:2e:bc:
         33:5c:3f:d9:46:df:f5:0a:11:a7:4f:90:c3:ed:93:e6:83:80:
         52:30:3f:d7:3b:b5:23:2b:e2:2e:b0:6e:ce:58:fb:b1:13:98:
         1a:10:6a:01:4c:4e:e5:db:93:b0:3b:4b:f9:6f:cf:78:0b:db:
         ec:0f:c8:c7:de:a3:95:50:04:46:92:fa:3e:82:8b:17:a6:7f:
         a3:dd:29:23:60:db:87:4a:98:52:e9:14:7f:0f:80:1e:5d:24:
         5b:99:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:43 2026 by rpki-client