Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
File:                     r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json)
Hash identifier:          +NzQpDUeQqLvO8RYlrMeQY8yTr8sXnQ22TsBgUEFN6Y=
Subject key identifier:   BE:C1:DC:73:67:AD:92:4E:52:94:B8:ED:32:AA:04:87:90:5F:25:49
Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
Certificate issuer:       /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Certificate serial:       068C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
Manifest number:          0685
Signing time:             Tue 12 May 2026 22:36:12 +0000
Manifest this update:     Tue 12 May 2026 22:36:11 +0000
Manifest next update:     Tue 19 May 2026 22:36:11 +0000
Files and hashes:         1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: VfLD8z84q11H3BTWFDCB7wU7GThJmOk8rUyxHMdE06A=)
                          2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: y/Z27vWa+YdbKdTa4SvdGhrr8xeEuHl0bs5oHTVC4x0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
        Validity
            Not Before: May 12 22:36:11 2026 GMT
            Not After : May 19 22:36:11 2026 GMT
        Subject: CN=6a03ab5c-0943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:38:8e:cc:2c:48:be:14:da:23:03:fc:28:
                    d2:6e:88:41:fc:50:d4:2e:07:4b:e4:5a:92:52:ec:
                    cf:b5:a7:90:92:fb:98:f1:a1:d1:25:9a:76:59:d5:
                    27:1c:5a:dd:22:2e:10:7b:87:87:d5:5f:10:02:ea:
                    ae:b1:2d:1b:f4:1a:58:a3:65:21:2f:bf:25:fc:fd:
                    c9:5c:1f:f8:ad:42:45:0f:80:18:1e:25:37:77:5c:
                    68:5d:a3:4b:04:ce:9e:b9:c7:5a:a7:fc:ea:49:5d:
                    a6:02:82:ba:bf:46:f4:c8:e3:6e:19:a9:65:64:1b:
                    70:6b:a5:dd:be:26:59:98:16:19:1f:e1:e1:f4:07:
                    42:d8:77:70:c8:b4:1c:34:44:96:54:25:8c:7f:24:
                    c3:00:25:81:f1:bd:61:ba:59:f9:74:78:10:13:ea:
                    b0:09:21:d4:cb:7f:6c:ee:4a:14:c0:c0:d7:09:ab:
                    d1:6c:7f:5d:db:0c:1d:6f:ef:af:8b:31:a9:8b:9e:
                    a5:97:0c:c5:85:b1:eb:ed:6c:24:31:47:69:3d:d0:
                    5f:1a:9a:b7:54:be:26:89:b4:15:6b:b1:7a:e9:91:
                    a1:a8:78:6f:5f:42:17:bc:24:ea:b6:18:a3:36:68:
                    fd:6d:9c:1b:a1:e1:52:14:33:a4:e8:bb:b5:db:9f:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:DC:73:67:AD:92:4E:52:94:B8:ED:32:AA:04:87:90:5F:25:49
            X509v3 Authority Key Identifier:
                keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:08:32:21:71:01:6b:09:53:44:8b:29:fa:74:18:2a:f2:d7:
         ea:52:b9:cc:da:50:e1:fd:a5:e6:c5:78:e1:92:c1:19:ea:0e:
         0f:6f:62:6c:52:2b:f9:18:84:26:86:7e:eb:2a:23:bb:1c:b4:
         2e:8b:79:2c:d9:d0:4f:de:34:b8:ea:51:28:cc:ce:4b:2f:9b:
         a4:bf:10:6b:e1:eb:cc:d7:8f:ca:24:64:62:ba:36:4d:a0:d4:
         83:94:76:cc:87:cf:5e:b2:a2:ab:15:8e:f6:c9:e4:61:98:e1:
         39:62:0a:42:5d:f5:fc:32:10:16:22:23:f2:e4:29:d1:2a:9a:
         fa:9c:9e:50:b7:73:f0:c1:08:be:5d:f5:da:9a:e5:b6:c9:55:
         41:16:03:a9:21:f8:02:d2:68:94:cf:6c:4d:1b:3f:40:aa:3d:
         23:a1:c9:72:32:6b:fc:58:73:88:54:91:2b:19:16:c9:d4:b2:
         bf:cb:24:11:c8:d9:f2:d5:ca:d0:6c:18:56:68:a3:ca:0f:55:
         af:78:da:0d:49:3a:42:89:c2:35:ee:2e:68:ec:93:be:ee:cc:
         65:4f:3d:26:4d:46:3f:c2:85:00:e3:c3:66:53:7c:a2:42:62:
         69:28:4a:bd:87:31:db:c9:cd:27:ef:01:01:00:55:75:37:7e:
         e7:33:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:28:53 2026 by rpki-client