Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
File:                     M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json)
Hash identifier:          dRAyeLlBxqFlTLtdq7QIVZhdg+JtBoi7ywDK6scg+bo=
Subject key identifier:   4F:40:21:01:8C:52:B6:86:F9:12:85:69:A8:E1:BF:1A:E7:65:16:36
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Certificate issuer:       /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
Manifest number:          70
Signing time:             Mon 11 May 2026 08:00:58 +0000
Manifest this update:     Mon 11 May 2026 08:00:57 +0000
Manifest next update:     Mon 18 May 2026 08:00:57 +0000
Files and hashes:         1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: jOOQt/27Cs7pGr7w0jdjaCuKMk1PBtizaCnb8Wx0mtk=)
                          2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: WD0gErJJmyclFhmJaTMcOF1Ei1LTHwTNpBBdF8taqIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
                          rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
        Validity
            Not Before: May 11 08:00:57 2026 GMT
            Not After : May 18 08:00:57 2026 GMT
        Subject: CN=6a018cba-6dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:ea:13:11:eb:b6:ac:e3:94:6c:e4:fa:d4:
                    e9:ba:23:a4:cc:ba:34:a3:0f:46:6d:a8:a0:fb:76:
                    9b:07:73:cb:0c:b6:e2:c6:83:a7:86:9e:c9:0c:8c:
                    53:6f:35:6c:3d:dc:49:d4:3a:e4:12:2a:35:5a:b9:
                    b5:d5:73:04:fd:b8:08:93:fe:4e:ba:0b:63:4b:6d:
                    0e:50:d2:92:cf:6e:2b:02:ad:44:19:49:73:3b:ef:
                    44:07:ef:82:1a:53:12:fc:56:5a:99:09:dd:84:10:
                    4a:0e:e0:d7:a6:5f:b1:e4:d7:63:ca:ab:fc:d7:83:
                    b8:a0:03:de:f0:27:35:45:aa:1d:b8:50:72:fa:f8:
                    2c:bd:48:4c:cd:32:02:45:22:c8:b6:97:d3:42:e9:
                    01:7f:f4:9f:67:b7:8d:37:0e:e5:85:38:6f:8d:10:
                    87:c8:30:08:1a:65:79:29:60:84:6c:4d:7a:b1:28:
                    6c:b8:b8:ae:a4:51:89:3a:ba:02:f1:2a:40:fb:5d:
                    2b:ce:c1:4b:59:c2:42:15:e9:9c:ce:3c:fe:d0:9c:
                    32:4d:49:9b:bb:b8:95:4e:33:a3:5a:c4:30:79:c2:
                    a4:2e:7f:5b:52:7b:13:0f:b2:95:8d:f5:85:89:98:
                    af:f0:ba:61:ed:05:15:0e:8a:59:0a:b6:0f:b3:be:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:40:21:01:8C:52:B6:86:F9:12:85:69:A8:E1:BF:1A:E7:65:16:36
            X509v3 Authority Key Identifier:
                keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:5d:cb:bb:dc:ca:ea:07:4a:fe:33:5a:a1:a9:26:b6:47:
         45:35:ad:60:e1:5c:51:4d:3c:ad:b3:d6:35:e6:60:df:d1:94:
         47:7e:6f:c7:c9:5d:40:ed:d3:dd:8a:5c:a9:dd:09:82:8a:63:
         52:2d:15:61:70:bc:b7:7e:09:a3:c8:22:e9:1e:41:91:93:3a:
         bf:2f:29:04:12:3a:54:ca:a0:db:22:54:f2:83:dd:e7:63:7f:
         be:5b:29:39:1c:04:2a:49:37:eb:dc:45:54:e8:37:79:d1:bc:
         e2:62:f8:5a:a5:bb:df:84:8e:2a:48:c3:55:32:af:3a:48:65:
         6d:89:de:ea:3b:b4:36:a8:a5:39:6a:f0:8f:7b:a4:72:19:09:
         a6:13:e7:27:8e:20:f4:d4:be:51:c4:ef:9e:40:10:96:0e:ec:
         b9:9d:59:c2:9f:2f:44:23:70:38:08:fd:16:ea:8d:74:4a:57:
         32:b6:4c:6a:6a:9e:5b:3d:94:4c:81:02:53:75:6b:99:18:f2:
         54:67:65:2a:25:22:90:94:66:d9:77:b5:73:72:2a:16:49:8d:
         9d:4e:ed:a1:ea:fc:60:09:13:58:8e:40:89:44:62:20:e3:46:
         2e:17:c9:42:80:2c:ba:17:84:1a:ad:ba:6f:ae:57:70:3b:83:
         bd:97:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:50 2026 by rpki-client