Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File:                     mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier:          G1Q2586qXvKDlbdekQ9yVctNmxGjy/heR/uyTh4623k=
Subject key identifier:   F9:BD:44:39:AD:05:52:3D:87:16:18:54:CD:FC:B0:72:BC:99:DD:16
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer:       /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number:          028D
Signing time:             Tue 12 May 2026 16:03:12 +0000
Manifest this update:     Tue 12 May 2026 16:03:11 +0000
Manifest next update:     Tue 19 May 2026 16:03:11 +0000
Files and hashes:         1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: /XGDB2nGsyTxuAv+iQMS3OMx/lAoL4pzH8Y3ZJOvmSw=)
                          2: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
                          3: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
        Validity
            Not Before: May 12 16:03:11 2026 GMT
            Not After : May 19 16:03:11 2026 GMT
        Subject: CN=6a034f40-7e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:ec:a2:5a:14:0c:85:b8:d0:f4:39:08:ec:
                    01:d4:85:1a:85:e8:6f:f9:97:90:c8:ec:99:3f:bb:
                    cb:fe:18:dc:03:f6:ee:84:86:f1:43:e0:08:ed:bf:
                    f3:66:1f:c8:3f:80:a2:09:df:8a:1a:da:20:cd:61:
                    fe:3a:41:e6:42:64:9a:e8:f0:9e:59:92:5d:6b:e1:
                    4c:3a:a3:a6:78:8c:a1:1f:61:3c:99:fd:d1:80:9d:
                    19:ff:e5:9c:f1:48:79:be:a2:91:83:b2:c4:f2:16:
                    39:e5:12:8a:7d:96:05:dc:6f:bc:8d:d5:d9:28:26:
                    69:9a:12:1c:81:82:21:53:b7:f7:92:44:fb:50:ab:
                    fc:e7:1d:8d:01:b1:79:9f:69:74:a0:ea:d5:bf:75:
                    ab:b2:dc:0c:78:9e:57:7e:d4:25:87:a4:c5:a8:c4:
                    3c:3b:de:35:a2:6a:c2:7a:df:eb:d5:bc:f8:39:a9:
                    1d:e0:e4:cc:ba:9c:e2:e0:cf:10:bb:e5:e1:a7:a9:
                    d7:39:dc:57:18:6d:07:84:7e:d8:a8:37:ee:62:ac:
                    a1:09:d5:09:bd:20:ac:7f:a9:59:46:51:d1:fb:36:
                    0c:16:c0:b0:17:6f:e5:eb:60:70:b4:4d:ef:10:59:
                    cd:8b:f8:56:36:9d:8f:21:8f:82:c4:08:16:29:02:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BD:44:39:AD:05:52:3D:87:16:18:54:CD:FC:B0:72:BC:99:DD:16
            X509v3 Authority Key Identifier:
                keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:63:86:46:f8:ea:26:be:07:86:9c:03:cd:29:59:62:db:44:
         52:c7:5d:22:04:2d:a6:5f:9a:f5:3a:a5:30:07:80:9a:8e:af:
         be:61:48:96:5b:7f:da:14:e1:c3:d4:dd:0c:cf:94:6f:02:7f:
         ea:b9:1b:57:9e:cd:8c:e4:63:ca:75:0d:be:7c:78:71:e6:7f:
         8d:fa:1e:cd:0a:e4:8b:0c:8c:fa:56:31:9e:5e:d6:fb:8a:10:
         b2:34:a3:ee:3d:3b:f9:75:aa:c0:d8:b1:80:13:bc:03:ee:70:
         21:50:f1:56:b4:60:5b:77:cf:a7:b4:e4:7e:6a:b3:0e:71:92:
         a4:3e:fb:1f:8e:da:3f:ca:0b:9d:f6:a8:1e:91:05:21:52:92:
         b1:ff:d9:4a:c8:50:a5:73:a2:91:18:ee:11:12:30:e8:46:a9:
         ac:bf:56:89:c3:61:03:97:ad:23:f6:79:3c:a6:86:86:db:4a:
         9d:2d:d0:0a:bd:57:98:86:92:2c:10:78:e7:a9:35:9c:47:05:
         58:12:87:ea:38:a4:fd:a4:eb:4d:a8:13:72:10:c2:a9:23:88:
         5f:20:f8:7e:d4:06:bf:f7:f2:98:c6:f2:cc:9d:d7:26:f6:97:
         f8:54:d4:02:d5:aa:b8:c2:49:46:10:38:bc:27:ea:ca:37:51:
         dd:f3:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:54 2026 by rpki-client