Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
File:                     MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json)
Hash identifier:          LG85r29wXywKYbpS6sMUDYY2NcuFOvsppAPYPX9Eqpo=
Subject key identifier:   48:4A:E3:35:F2:57:E1:AA:38:89:5C:B7:6C:57:5E:FA:71:43:34:0D
Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
Certificate issuer:       /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Certificate serial:       0720
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
Manifest number:          0715
Signing time:             Tue 12 May 2026 22:27:33 +0000
Manifest this update:     Tue 12 May 2026 22:27:32 +0000
Manifest next update:     Tue 19 May 2026 22:27:32 +0000
Files and hashes:         1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: s0xG1BHIjuXxbhdXUgRausKZe26oS6qcPKKiIMTx+lQ=)
                          2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: 8JZr4p8tDw2q0HSfdxMhPTA6AUc7o+7D8niSR2gOHHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl
                          rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
        Validity
            Not Before: May 12 22:27:32 2026 GMT
            Not After : May 19 22:27:32 2026 GMT
        Subject: CN=6a03a955-7514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:14:e7:3c:b2:a1:ff:af:36:70:85:45:c1:
                    0e:39:b9:02:f9:c3:87:bb:f4:9d:44:f8:fb:0b:07:
                    5f:95:44:8e:f5:f8:b1:4a:bd:64:8d:9a:98:5a:25:
                    20:06:6a:fc:6e:0d:cd:1a:e6:31:8e:83:be:14:2e:
                    56:9d:3f:00:e7:3d:a4:62:51:52:a3:c9:ff:de:01:
                    5f:80:22:c4:98:e8:4a:57:50:c2:df:e9:cd:4d:d7:
                    95:3f:de:ec:e3:80:d0:93:d8:60:e9:7f:6e:d0:47:
                    1d:34:3e:52:f5:d2:4e:84:85:cd:99:19:e8:f8:fa:
                    6b:6f:1c:c6:28:f7:8c:da:ac:e5:cd:35:e5:aa:16:
                    c8:f9:a2:17:e7:ee:f4:f6:ff:94:29:2a:f8:de:7f:
                    1f:d3:8d:8b:a1:e6:18:6b:92:54:05:63:27:9c:93:
                    ca:66:9a:f8:e4:db:56:1f:3d:6e:be:ed:95:58:b4:
                    a1:0c:52:6a:1e:51:6a:09:9d:42:25:18:e6:51:27:
                    71:9d:63:37:40:d8:c5:19:f9:de:b7:d9:15:9f:cc:
                    d8:df:ce:f2:f5:85:df:17:ad:9f:cd:02:20:31:99:
                    92:88:03:8a:ec:f9:77:dc:30:78:67:49:67:85:30:
                    03:96:11:d0:fb:fa:ce:4f:fd:b3:22:69:52:90:72:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:E3:35:F2:57:E1:AA:38:89:5C:B7:6C:57:5E:FA:71:43:34:0D
            X509v3 Authority Key Identifier:
                keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b1:3c:a6:18:05:e1:f7:23:47:8f:e4:0b:75:fe:da:8b:8e:
         18:35:ec:a5:a5:cb:fc:db:4e:dd:c4:55:c8:48:be:ce:4e:5b:
         58:3b:fd:fe:df:61:2b:39:99:63:8c:b2:8b:85:98:3c:be:e4:
         5d:10:f9:89:22:47:57:30:aa:8b:5e:3e:db:66:ce:61:63:c6:
         6f:2b:75:a6:b7:72:0b:b8:d4:83:b5:77:0e:f7:15:73:15:6b:
         ff:0b:27:cd:59:c3:68:2b:e3:67:3c:87:07:5a:29:71:10:4c:
         d3:e5:20:9f:d5:32:bd:e7:dd:7a:29:50:51:c7:f9:3b:fe:64:
         4a:7a:5d:97:f9:73:7f:b9:3c:00:ca:cd:02:6d:bf:59:51:c4:
         ef:87:bb:e4:57:ff:db:ba:39:ec:5f:10:93:f4:0f:b5:fc:67:
         b4:29:c7:f4:d3:36:1d:d9:f2:bc:8d:66:46:b1:a0:9d:2c:7f:
         b2:cc:07:4e:7e:a7:56:a0:b1:66:0f:e0:aa:36:8e:09:98:af:
         12:77:3d:1b:02:96:4f:12:d5:50:85:8b:dd:7b:64:67:f3:1e:
         53:f1:44:06:95:7e:7d:86:7d:5e:9c:a3:bf:f9:d4:cb:20:41:
         3d:c5:74:30:b9:76:ef:c3:54:d1:e3:de:83:8b:af:2e:69:c9:
         00:48:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:39 2026 by rpki-client