Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
File:                     A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json)
Hash identifier:          qoiU7/zYi3k1H+YKVJ+4hBsNexEslDmiXAI4qE3GDuE=
Subject key identifier:   B6:86:81:74:E8:DB:FE:56:BA:60:AD:64:AD:01:95:CE:0F:E6:5F:88
Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
Certificate issuer:       /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
Manifest number:          44
Signing time:             Mon 11 May 2026 08:36:35 +0000
Manifest this update:     Mon 11 May 2026 08:36:34 +0000
Manifest next update:     Mon 18 May 2026 08:36:34 +0000
Files and hashes:         1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: X4ZfDP9GKmaj3vbv//vG2xFhf/eu/V48O5KlheOGFxs=)
                          2: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=)
                          3: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
                          rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
        Validity
            Not Before: May 11 08:36:34 2026 GMT
            Not After : May 18 08:36:34 2026 GMT
        Subject: CN=6a019513-5cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:51:4f:e2:8b:7d:63:81:11:24:90:e5:c4:
                    82:98:c3:28:05:f0:ab:be:01:e9:d9:fb:c4:42:76:
                    a5:f5:2f:e3:b4:03:16:a1:3e:cf:eb:4e:a3:83:93:
                    bf:5e:21:da:bc:9c:84:93:01:61:c0:a2:b2:58:3f:
                    54:f1:53:c4:3e:e4:fb:44:3e:3d:f4:84:98:be:36:
                    a6:6d:35:d2:35:e3:19:09:13:f3:93:3a:b3:e1:da:
                    49:1f:66:f4:80:c1:94:4c:c1:3f:fe:54:9f:b9:2a:
                    26:14:0e:07:5a:c6:03:e9:80:74:6a:a1:fc:78:37:
                    4c:e5:4e:1c:9e:af:d5:1c:06:50:d2:33:3e:85:45:
                    74:45:ca:a0:9e:bd:d1:8a:c2:fe:49:23:80:2e:54:
                    d0:a4:ff:d8:0f:2e:65:d4:bb:ec:4e:b8:19:64:4b:
                    75:0b:36:41:0d:9c:b8:c8:e2:f0:63:c8:db:95:24:
                    07:16:fb:11:fd:73:56:42:f0:d3:83:cf:1c:37:00:
                    c9:1e:aa:0d:e2:61:0a:0b:21:60:55:a1:22:7d:9f:
                    69:10:e6:06:f7:ff:fd:99:59:68:52:91:f0:a5:9b:
                    93:5d:59:fa:45:0b:81:85:b0:d3:7e:37:cc:f8:c5:
                    68:7b:44:c0:46:fe:c3:2b:49:e4:3d:ed:89:77:d8:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:86:81:74:E8:DB:FE:56:BA:60:AD:64:AD:01:95:CE:0F:E6:5F:88
            X509v3 Authority Key Identifier:
                keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:da:33:c3:81:90:af:30:ac:95:51:e4:f2:81:d4:27:53:be:
         a9:82:06:a0:fc:3c:68:99:dc:7c:a0:86:ba:d0:51:e3:bb:89:
         06:50:01:5d:ae:8b:37:51:0d:b7:f9:2e:bb:d5:f0:98:5c:82:
         c3:ae:fb:5d:1d:c2:88:28:1a:d9:87:cc:7e:a1:d5:d2:a8:50:
         33:4f:d9:23:c6:d2:f7:4c:59:e2:f0:6c:34:48:13:fb:38:3d:
         3e:0c:ce:41:3e:7c:3b:59:5d:95:59:09:13:7b:7d:3a:86:76:
         58:eb:95:3b:04:bd:e1:3a:45:a1:92:fa:dd:1d:6d:e9:26:5c:
         9f:37:89:e2:22:de:17:4b:db:3f:5e:45:13:35:65:6f:d7:62:
         15:93:44:84:7f:ab:74:1c:ae:79:9b:20:f6:3b:cb:0b:ec:f7:
         1f:f6:d5:e3:94:54:9d:92:e2:15:5c:ba:86:cb:2a:2b:ee:57:
         4f:1a:e1:ba:66:9c:6a:7d:86:e1:09:bd:c0:cf:60:59:94:40:
         48:07:c6:be:0b:f4:63:3a:69:ef:b3:94:88:e8:1b:37:e7:f6:
         3b:48:a2:62:37:23:db:81:14:b3:4d:b2:77:69:1e:3d:3f:b4:
         15:d1:19:f7:9d:99:c9:e2:08:ca:ab:a2:af:18:ba:6b:4a:ea:
         51:cf:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:26 2026 by rpki-client