Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File:                     Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier:          Zh9msPU6UqTHYy/KjJksjZeVA8c8EBxq+xK2shpfHKg=
Subject key identifier:   F0:8A:A6:D5:2A:B0:7E:2B:27:3F:5A:5A:51:DA:77:83:3D:32:DB:DE
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer:       /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial:       29CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number:          29AA
Signing time:             Tue 12 May 2026 15:35:37 +0000
Manifest this update:     Tue 12 May 2026 15:35:37 +0000
Manifest next update:     Tue 19 May 2026 15:35:37 +0000
Files and hashes:         1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: 6otKRLUJ4A8fW7hFvuAC5BkiLXwRd9WgoJ2sasyBFWY=)
                          2: F4246CDA561811E98A165872C4F9AE02.roa (hash: 2dvRnm4pfzjCtWstN3B5/ymv7Hda5U6DYqNjAuMZVLY=)
                          3: 58292E96774111F0A079543BC4F9AE02.roa (hash: +OItqlvFi/OJz28aPTkH59gdOncbNOxJz2Bk3pv0y/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10703 (0x29cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
        Validity
            Not Before: May 12 15:35:37 2026 GMT
            Not After : May 19 15:35:37 2026 GMT
        Subject: CN=6a0348c9-554c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:bf:60:3b:24:1e:12:43:28:25:91:21:17:
                    8c:96:db:07:e4:6f:ca:b9:3e:6d:68:d2:20:ab:18:
                    77:2f:aa:6e:51:b9:3a:40:f6:cd:e5:3c:76:6a:48:
                    ee:5c:0b:e0:39:2d:cf:6b:2c:61:0e:5b:6d:f2:20:
                    f2:cc:3a:a0:db:82:70:ee:6b:95:42:08:58:64:c0:
                    32:32:f2:35:27:76:87:2b:63:cd:3a:bf:f4:1f:e2:
                    9f:2e:21:92:c9:81:2c:33:b8:60:bc:51:af:bf:2a:
                    97:07:cd:f8:f9:b8:5c:c7:c9:93:f2:b8:08:e7:b3:
                    fe:7b:40:20:da:31:27:cb:cc:7f:b1:0d:16:5c:b6:
                    cb:95:e0:73:8c:5b:6b:09:c0:7b:e1:8f:b0:11:7f:
                    da:7c:d7:0d:38:85:0f:6a:f9:69:aa:fd:92:26:bd:
                    ff:21:57:14:a7:aa:c1:3e:94:90:11:56:0a:2f:77:
                    36:6d:9b:25:67:a1:61:42:10:91:1f:f4:74:ef:2d:
                    d6:9e:c2:d3:9b:cb:47:8b:d9:ba:05:f5:cb:f4:c6:
                    c1:28:fb:e0:81:36:74:04:0f:a2:22:7d:29:16:c8:
                    8f:d3:50:8c:06:0b:f6:5f:29:0b:8f:07:24:9f:c9:
                    04:b1:0f:36:25:07:5d:af:33:75:77:74:4f:e5:b0:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8A:A6:D5:2A:B0:7E:2B:27:3F:5A:5A:51:DA:77:83:3D:32:DB:DE
            X509v3 Authority Key Identifier:
                keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:9c:21:80:94:9c:db:e9:4f:df:30:3a:06:9a:b6:30:05:1e:
         d4:bb:2c:14:1d:2e:29:b0:69:13:04:a4:79:81:8c:5f:e6:8a:
         e4:a6:37:18:a0:a4:f4:67:78:af:12:53:9a:ee:68:64:08:95:
         a6:b4:8f:13:c0:40:b5:8e:e0:a7:19:7f:d7:81:fc:31:23:7d:
         3f:06:3d:de:e2:39:3b:84:56:92:28:98:9e:21:2b:54:de:43:
         d3:82:77:13:f0:c4:0b:6a:b4:cf:11:3e:a8:ef:10:cc:1b:73:
         c3:91:e7:7c:de:0f:3b:4e:aa:e7:5d:23:60:df:df:86:70:66:
         8d:7b:46:5b:c6:32:86:9c:3b:9a:b4:b5:a7:51:eb:f9:1a:d7:
         f6:d6:1e:da:10:f8:ca:23:cc:08:3a:3f:1a:7c:5e:04:2b:3e:
         9c:e7:98:79:bb:fc:3f:10:b1:8d:e3:f8:fd:08:b5:c8:74:7f:
         8d:96:fe:04:d7:0f:f8:c6:55:05:62:37:fd:4d:8f:d2:a2:b7:
         fc:ee:3e:9d:ce:b7:9b:07:2a:89:b4:e0:7e:20:1e:f0:f7:2d:
         86:9b:9a:3d:cc:60:8e:97:2a:8e:1b:7f:1f:f4:07:18:cd:d1:
         48:66:d5:50:c3:64:00:a0:40:67:15:46:4c:b2:ea:ea:9c:b5:
         0d:9c:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:23:06 2026 by rpki-client