Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File:                     r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier:          lVuUd22IhaAP0siqsSeJQsbB0kuaS2Q3aiKONGbgpc4=
Subject key identifier:   95:2E:8A:07:5C:1C:C8:5E:16:1E:62:11:0D:5D:C0:03:D3:C8:6C:D4
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer:       /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number:          0116
Signing time:             Tue 12 May 2026 22:36:09 +0000
Manifest this update:     Tue 12 May 2026 22:36:09 +0000
Manifest next update:     Tue 19 May 2026 22:36:09 +0000
Files and hashes:         1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: fmVuvnKkWivWirKqTshxnJ3oYuPLJndBIPaYqhewMIc=)
                          2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: ASL8/2HCWAJCmthowgFWIUdkitcmGIEB/XyIsZpt42w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
        Validity
            Not Before: May 12 22:36:09 2026 GMT
            Not After : May 19 22:36:09 2026 GMT
        Subject: CN=6a03ab59-b610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:8a:e2:6d:9d:f0:ba:e8:66:d6:04:5d:2f:
                    73:09:6a:5e:93:e5:de:89:59:71:8b:37:0a:63:a5:
                    d1:52:f2:09:aa:c4:82:51:06:d8:ad:46:d6:10:98:
                    8a:a1:83:77:7c:81:ef:52:55:b9:98:83:fe:40:3c:
                    df:d1:e6:f8:50:b6:6d:f0:11:5e:be:fd:4d:17:d2:
                    92:98:d1:90:e3:b7:78:3c:72:77:51:ba:06:b0:a0:
                    a1:72:ad:0a:0f:19:48:92:99:29:3c:f8:85:b3:58:
                    ef:fd:60:d8:68:74:0d:11:85:19:42:32:de:54:dc:
                    9c:d9:e3:91:d1:e6:33:aa:44:e1:e5:b4:cb:2b:5e:
                    da:ee:5b:93:ff:c8:61:42:63:93:16:a8:6a:e5:04:
                    cc:9b:1d:d9:59:b7:09:0c:17:3e:09:5a:be:d8:4d:
                    f3:d4:80:18:ec:cd:78:88:f5:6b:01:60:80:33:65:
                    c9:2c:55:93:79:44:a0:2f:62:5c:2f:14:0c:f7:50:
                    76:b1:34:35:28:78:12:09:83:45:f0:85:80:5a:24:
                    c3:37:64:b6:aa:13:bc:63:9c:f8:f9:e3:8b:d0:51:
                    b4:98:1e:be:20:2c:d6:2a:c6:56:08:70:16:4b:89:
                    20:52:f0:9c:50:82:fd:10:25:28:5c:77:23:3d:0d:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2E:8A:07:5C:1C:C8:5E:16:1E:62:11:0D:5D:C0:03:D3:C8:6C:D4
            X509v3 Authority Key Identifier:
                keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:9c:59:4c:66:87:92:22:e0:d1:b5:e0:97:a7:e8:fc:d8:65:
         df:51:a6:02:b9:20:27:39:10:88:af:3b:f4:a0:e0:ff:4c:20:
         00:e2:8f:25:ac:74:22:c6:a5:3f:9e:79:54:86:ad:35:7b:dc:
         3b:63:f9:89:77:01:5a:63:5a:f7:cf:bd:d6:4c:7c:50:5f:c0:
         96:84:fd:cf:e1:6d:5b:82:49:8c:57:55:0c:86:7d:61:5b:ab:
         fc:ee:f6:b6:71:3b:5a:6b:67:5d:ad:b2:0a:bf:30:b1:b9:65:
         cc:5e:b8:3d:59:55:93:1b:18:fd:99:4c:e1:c3:9e:2e:74:d0:
         59:e9:e9:e0:d7:99:dd:88:e2:96:4a:51:52:38:60:70:66:35:
         8a:74:37:18:cc:ff:a2:71:9b:0e:35:83:49:70:74:07:97:a3:
         c0:c6:4e:79:2d:ba:30:44:6f:47:2e:3c:06:51:e9:4d:1a:1f:
         17:12:97:21:d0:47:1f:03:51:9b:a9:d4:75:d1:76:9b:0c:c5:
         39:6e:4e:c7:37:1a:5d:2f:4f:c2:1d:43:17:e7:d6:30:78:30:
         86:64:ef:5a:be:73:eb:a3:7c:56:a2:4f:91:b0:9d:af:5b:47:
         78:55:cd:61:17:7b:b8:50:6d:d6:f7:0c:4a:1e:48:e4:54:53:
         fa:8f:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:30 2026 by rpki-client