Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File:                     KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier:          7srVwwG22bQYUPfQHu9Zuo1e/GMC4r7mY04+vyydDtE=
Subject key identifier:   D8:2E:16:C9:22:E9:5B:90:73:14:57:56:19:56:AE:AF:8C:65:44:C7
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer:       /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial:       03B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number:          03AD
Signing time:             Wed 13 May 2026 00:49:11 +0000
Manifest this update:     Wed 13 May 2026 00:49:10 +0000
Manifest next update:     Wed 20 May 2026 00:49:10 +0000
Files and hashes:         1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: e3NGsuhO4dUxL0P3Y6AL9g3Dtl5wGoQaQTobmzewaP8=)
                          2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: noY77zuBNX8xTUWwrf35ANzxZz07dvvKvq+tI08iw0s=)
                          3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: DXFn9IbM02w7n1eFZzgRJrQaHr06yYFyVzCtJliHjPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
                          rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
        Validity
            Not Before: May 13 00:49:10 2026 GMT
            Not After : May 20 00:49:10 2026 GMT
        Subject: CN=6a03ca86-7a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:ae:7a:83:63:79:d6:37:0c:10:c2:c6:9e:
                    9e:25:8c:a0:a5:9d:03:68:66:c6:8d:4d:76:60:a5:
                    45:73:72:28:f3:d6:06:a6:99:d6:ee:a2:45:a2:27:
                    d0:28:df:63:69:6f:3c:f4:3d:9d:f0:32:56:cd:b5:
                    aa:a0:6b:d1:7e:18:1c:ca:8f:bc:86:7a:f8:ac:fa:
                    4d:ca:b5:b9:58:b7:76:fb:02:b6:60:7a:ec:6b:e6:
                    8a:fb:7b:5a:6a:68:a5:f6:b1:48:b8:61:83:06:18:
                    43:d2:7d:72:8a:68:70:5e:f5:03:f4:17:f5:09:e0:
                    35:74:3a:41:e0:10:6a:dd:13:ef:02:13:d1:3f:f3:
                    d1:5f:90:f4:cb:1c:49:37:8a:53:b0:12:6a:94:d3:
                    d5:4a:dd:10:d4:93:cd:af:46:ec:b8:28:14:da:69:
                    af:1b:32:3a:91:bc:e3:71:db:e9:cf:8f:57:9c:c5:
                    28:88:02:79:4f:38:c4:d9:ee:b0:ee:20:db:b3:df:
                    35:73:a1:f7:99:50:20:a5:c5:8c:42:3d:18:9e:1e:
                    0b:fe:bb:a7:43:59:09:b2:2a:8f:3f:55:49:12:9e:
                    4c:e8:3d:c1:71:e4:0b:bb:c5:eb:6e:1b:87:da:bd:
                    30:d0:25:5a:24:da:6b:97:71:ea:01:2a:9e:07:12:
                    dc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2E:16:C9:22:E9:5B:90:73:14:57:56:19:56:AE:AF:8C:65:44:C7
            X509v3 Authority Key Identifier:
                keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b3:b1:4e:a2:76:cf:b0:67:b1:ef:b4:a4:66:89:8c:41:f0:
         05:01:0f:56:00:87:48:63:fd:95:eb:d7:dd:dd:bd:7e:2c:7e:
         e0:5a:66:e6:ff:ad:81:d6:99:0b:69:d0:51:8a:45:d4:bf:6a:
         6a:12:91:38:21:e0:b1:7d:b7:ad:bc:14:43:ec:cf:06:ce:fc:
         d5:76:18:f9:90:93:1c:ac:b7:51:59:11:0a:fe:80:d9:82:9f:
         4c:a4:9e:e5:1d:41:af:cc:f0:bf:6e:8e:4b:00:47:95:e6:a0:
         c5:78:07:88:3c:f0:45:67:30:69:5a:4b:52:11:9d:57:1f:3f:
         48:1a:fb:0a:64:af:8b:ac:e2:81:c1:6a:d6:71:5c:31:45:e5:
         c0:e1:95:41:8c:62:db:4a:0f:63:35:ad:dc:31:e0:36:8f:bb:
         0d:d4:a5:06:04:5f:af:fc:22:dc:85:fd:ae:c8:b0:5e:2b:41:
         63:2b:a1:cc:95:bb:7a:56:11:65:98:b9:65:c0:90:62:1a:39:
         f3:3b:62:da:31:f0:69:f4:2e:83:19:40:aa:77:cf:70:0d:43:
         64:ad:28:95:7c:4a:15:88:7f:f8:51:17:61:02:d5:e8:ae:1f:
         45:7b:5b:de:8f:48:07:94:b9:f7:f9:e6:f2:7c:0a:a1:c0:92:
         c3:7a:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:29 2026 by rpki-client