Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
File:                     72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json)
Hash identifier:          7ji4QqD7iC1Sv0A9kJ+OsySSG01Pcesquzh3bZMytTA=
Subject key identifier:   01:A9:93:5E:FD:BD:40:B1:AA:E1:EC:A0:03:DB:1F:4E:C5:04:84:A7
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Certificate issuer:       /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
Manifest number:          022A
Signing time:             Wed 13 May 2026 02:50:44 +0000
Manifest this update:     Wed 13 May 2026 02:50:44 +0000
Manifest next update:     Wed 20 May 2026 02:50:44 +0000
Files and hashes:         1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: J2ev1tK0jut9Qm1rXGBL7MCl9FMz1d3ICm1X2hfz2Tk=)
                          2: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: LgvzbH2Wh3cXgvtAocTygSfF5GcgHU1jmYJ8OJmW4QA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
        Validity
            Not Before: May 13 02:50:44 2026 GMT
            Not After : May 20 02:50:44 2026 GMT
        Subject: CN=6a03e704-0282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:e3:b4:c6:05:66:e8:bb:dd:c9:3d:80:77:
                    81:ce:fe:3e:2e:17:b7:3e:ab:47:61:69:e2:71:4b:
                    40:35:d9:d1:e3:2d:33:ed:2a:ee:0a:16:7a:43:10:
                    8d:db:4f:f1:96:f8:68:7b:7f:55:76:3d:8a:16:8f:
                    28:61:e7:79:9b:a3:95:32:67:23:93:83:e0:12:35:
                    59:af:37:d2:8c:1e:90:d2:d3:3c:8b:a0:ca:60:13:
                    18:be:04:10:13:34:71:0b:a9:63:a0:92:70:a7:f1:
                    33:63:db:6a:ad:71:f2:80:8a:18:84:68:f4:ad:f5:
                    6c:9b:3a:2c:37:8e:13:4c:a6:a9:4e:a7:fc:b2:a6:
                    0a:63:4e:83:8a:57:26:85:18:1e:6d:78:89:b2:19:
                    20:c5:8e:2f:d6:62:9e:a3:86:5e:c2:ef:a8:c7:2b:
                    43:2a:a6:31:7f:4b:44:65:c8:fd:fa:4d:99:7c:18:
                    58:0f:42:e2:15:43:fd:c0:b1:81:86:7b:cc:c2:fc:
                    68:26:bb:66:1b:c6:af:41:05:f5:83:6f:f6:ae:d0:
                    41:81:dc:e4:a8:34:b4:22:a6:14:c8:18:27:42:00:
                    d4:4b:e2:5a:f2:9c:13:fe:d1:a9:7e:00:e9:1b:08:
                    dd:e0:07:6c:97:9b:72:eb:7c:ef:55:a0:e9:f6:8d:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:93:5E:FD:BD:40:B1:AA:E1:EC:A0:03:DB:1F:4E:C5:04:84:A7
            X509v3 Authority Key Identifier:
                keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d1:2e:3a:5a:48:6d:fa:c2:29:8b:15:74:46:97:4c:2a:be:
         ed:49:1c:43:f1:1b:b6:28:37:b2:6b:24:ac:3e:d7:60:89:59:
         28:c2:4e:86:38:92:86:43:20:98:68:a1:cf:ed:b2:4f:7d:de:
         4d:9f:9d:d6:b2:df:93:0c:cd:8d:13:f5:9c:df:fe:84:34:5b:
         5e:ea:50:88:73:fc:7f:d2:fb:de:ab:b5:b4:a3:d4:5a:37:dc:
         06:ae:c4:c3:92:5d:c0:8b:5a:64:eb:d4:5d:97:3f:f5:2d:f3:
         60:53:45:0d:d6:dd:d4:a5:30:dc:be:ec:9f:a8:14:d3:53:ad:
         08:7c:10:87:3a:7d:22:33:d8:62:b8:f5:92:c4:01:4d:ab:48:
         f0:4b:52:e1:85:47:48:ac:f6:db:9b:90:be:13:81:6b:46:d3:
         8b:50:55:e4:e0:9f:e9:ce:6b:4b:4e:9c:d7:4f:4b:03:2f:78:
         ee:d8:47:03:b9:47:27:ca:d0:f5:b5:ee:97:f4:b2:f0:f1:0c:
         3d:81:37:a1:7f:89:f0:4d:10:e7:ef:67:db:60:8e:cb:f3:25:
         74:7a:d7:36:ed:2c:c0:22:37:3e:cb:00:4b:06:e4:08:7d:e2:
         01:a2:4b:7e:cb:e8:7c:65:22:dd:8d:97:78:c2:68:39:4c:4d:
         c2:6c:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:38 2026 by rpki-client