Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
File:                     E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft (raw, json)
Hash identifier:          aFZiSkTDllKadSNQXreLir3nkOWGDmvs7oQlRsZWsLw=
Subject key identifier:   D1:29:C4:2E:05:00:15:08:42:06:04:5F:5B:FE:3B:45:F9:D4:D3:FD
Authority key identifier: 13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
Certificate issuer:       /CN=A91A68C0/serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
Manifest number:          41
Signing time:             Mon 11 May 2026 08:37:59 +0000
Manifest this update:     Mon 11 May 2026 08:37:58 +0000
Manifest next update:     Mon 18 May 2026 08:37:58 +0000
Files and hashes:         1: E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl (hash: e4PRC9HG66NxNCT0BzqyoS34tTCkYlcrK1m3gKmvNEY=)
                          2: 53134072F0E511F09202A4D23F6F56BC.roa (hash: 7QaNcrtRXFfDvmT/IQFQ8jEHpmg7vJSCEBEkxGI5xTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl
                          rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A68C0, serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
        Validity
            Not Before: May 11 08:37:58 2026 GMT
            Not After : May 18 08:37:58 2026 GMT
        Subject: CN=6a019567-eb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:e2:1d:6c:69:c3:7d:a2:ee:54:dc:54:1b:
                    e0:4e:f8:cd:bc:60:20:5f:c9:7b:d3:f6:d5:d8:f9:
                    8a:83:01:68:6d:df:4d:3c:28:d6:c7:84:f3:3b:9a:
                    b4:9c:15:d8:7b:ec:d2:a5:56:e0:55:84:40:5c:52:
                    42:83:bf:c9:40:4d:b4:68:e1:8a:00:7d:86:9d:c7:
                    d5:47:b4:f1:1f:9b:67:f2:ce:b6:ef:65:5c:7d:3a:
                    ed:f9:39:b8:f2:99:dd:85:d5:6c:4f:67:aa:0a:7a:
                    65:70:6b:e6:36:4f:15:cc:99:98:88:03:36:9e:3d:
                    1f:ca:31:0b:92:48:f8:e0:80:ad:ca:99:02:18:00:
                    98:04:c0:c9:9e:fd:69:96:1d:71:8a:0f:2d:26:62:
                    6b:bd:45:6d:d1:df:4d:8f:02:70:a7:7e:08:56:2d:
                    9c:79:be:b1:06:f0:e1:a3:30:4b:ce:dc:4b:67:10:
                    2c:33:c1:49:e5:70:3b:65:c4:e3:e0:fc:82:4a:22:
                    10:71:2b:e9:c8:3e:d6:72:34:f9:94:98:aa:3d:f9:
                    be:24:7f:6d:50:fb:9b:6f:78:4d:11:07:5b:99:08:
                    c5:6a:d8:78:5e:9e:2c:1c:a5:6f:77:de:2c:ef:1d:
                    e2:ef:dd:2f:e5:c9:19:7f:bb:36:be:67:b9:f7:85:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:29:C4:2E:05:00:15:08:42:06:04:5F:5B:FE:3B:45:F9:D4:D3:FD
            X509v3 Authority Key Identifier:
                keyid:13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:12:9e:7f:21:38:ec:4a:88:1c:13:a5:9f:db:dc:69:c8:
         0c:84:c2:c5:86:ff:a5:0e:50:9c:cc:ef:a0:cd:88:69:61:8a:
         f3:5a:30:8a:28:92:62:25:62:fb:38:5c:fd:1f:5e:15:01:a6:
         2c:55:5c:d6:56:12:54:9b:dd:59:ad:0c:b3:69:42:70:a4:5e:
         91:2b:d1:4c:ce:3b:89:59:b4:9a:44:3f:51:63:93:2b:67:fe:
         e8:f1:78:5b:eb:25:db:80:b2:dd:5a:79:3e:18:74:92:9d:82:
         01:6a:6b:b1:a6:0d:45:2c:bc:27:98:95:ae:1e:37:0d:50:ff:
         55:40:04:b2:b6:9c:1b:a6:a7:db:c5:49:4b:09:c9:66:9c:40:
         98:bd:58:d1:cf:8b:a3:cd:93:16:91:4d:15:d7:dc:e3:d9:48:
         55:9f:f7:8f:2d:80:28:94:0c:58:c2:2c:4a:67:74:3e:9e:ce:
         ad:c5:1f:ca:63:63:ef:60:99:b4:0d:50:c3:fb:4b:4f:e9:80:
         74:73:aa:e3:fc:40:2c:58:bf:2b:1c:70:b6:ad:58:17:90:dd:
         ef:0a:b5:af:6e:f0:1c:37:0e:12:e6:a2:cf:15:93:38:9c:03:
         78:00:d6:88:4c:54:6f:36:19:c1:fb:48:e7:98:88:83:9a:39:
         a1:01:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:28 2026 by rpki-client