Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
File:                     2K83cS1WsbaT720D40bADPPwST4.mft (raw, json)
Hash identifier:          g92sPhLHM75GrKYVYm4JbFu2VyfKtU+oAGUcP1Q/XBE=
Subject key identifier:   AF:21:E5:68:50:96:D0:D7:F0:92:51:62:E5:49:21:27:11:32:46:62
Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
Certificate issuer:       /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Certificate serial:       1027
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
Manifest number:          1009
Signing time:             Tue 12 May 2026 17:29:40 +0000
Manifest this update:     Tue 12 May 2026 17:29:40 +0000
Manifest next update:     Tue 19 May 2026 17:29:40 +0000
Files and hashes:         1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: 1az8nbEtTTFC4q2jOtZCn+kLRAVPVAFApiVMp3zFZ6g=)
                          2: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: LMzi/nUop3Zg3Ri+ttMW1AIJQZt36oNcqeMlHwO8Bco=)
                          3: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: 1K8MV4sIj8T9zYYuz63dsbeo/qY6X7HrLn7VydAG5JM=)
                          4: AFCF76ECC43411F0982E427DC4F9AE02.roa (hash: jArh+Kx+M9ITkZfnTl8gN4nLiWXlDhetGK8juVgx8K0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
                          rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4135 (0x1027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
        Validity
            Not Before: May 12 17:29:40 2026 GMT
            Not After : May 19 17:29:40 2026 GMT
        Subject: CN=6a036384-18b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0d:d8:3c:f1:c2:04:ca:13:cc:64:e0:9b:e9:
                    bf:e2:37:6b:63:c2:7d:06:8b:4b:0c:85:87:1f:e9:
                    95:89:ca:a3:fd:e1:a1:86:4a:88:d3:47:99:b8:1d:
                    af:5c:f4:55:c8:a5:9f:3a:35:e1:9a:1f:4a:67:e2:
                    e4:48:0a:a7:2b:1d:14:f2:fd:d4:91:e9:da:4c:c7:
                    ac:70:87:f9:80:f9:cf:26:cc:a4:23:38:e9:e9:50:
                    41:1b:62:65:6d:dd:5c:6d:36:a7:e7:86:e1:26:52:
                    61:d8:5e:b5:a9:77:f6:3e:2c:77:60:61:e4:15:ff:
                    e6:8d:9d:0f:6b:ef:b2:60:cd:e6:1e:93:1a:e0:0d:
                    7e:72:8d:f9:5a:f0:e4:8e:92:b8:89:a0:b4:eb:f4:
                    b1:e9:89:b6:42:6c:8e:56:d7:a3:78:bf:40:85:b6:
                    8e:94:a1:e9:a4:00:b7:b5:d9:9c:e8:35:54:55:27:
                    a7:20:91:42:c0:8e:2d:4e:e4:62:58:d1:fa:6e:05:
                    d1:3e:fa:d3:d3:eb:1a:2d:d5:29:e1:59:dc:ba:f4:
                    6a:72:37:77:25:ca:a4:fe:6a:79:a0:36:fc:9c:e8:
                    f7:d0:9b:20:a5:a6:3a:4f:45:44:18:d5:b9:da:70:
                    fd:d8:d7:a0:7f:4b:74:31:f1:99:9a:33:4f:a4:7a:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:21:E5:68:50:96:D0:D7:F0:92:51:62:E5:49:21:27:11:32:46:62
            X509v3 Authority Key Identifier:
                keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:58:f7:a1:07:d3:25:31:fa:24:c2:13:32:8f:31:21:f2:ea:
         d0:72:3b:4f:30:d7:79:89:5c:75:0a:0a:1c:07:02:d4:2e:bf:
         c6:0b:33:5f:57:11:c6:23:91:3d:d5:3e:ed:73:c1:bc:7e:5c:
         fd:95:7c:bb:a2:e3:e3:32:ed:e0:45:d1:6e:7d:f0:57:59:07:
         45:e0:1a:fc:0b:fb:5b:a7:d1:53:97:cb:94:dc:ca:1f:8a:07:
         db:29:9e:2b:15:94:71:9a:d4:d2:7c:0e:eb:a3:f7:ac:37:37:
         4e:21:97:77:fb:6d:55:d3:9c:6a:86:96:f2:0d:64:64:94:86:
         ed:aa:ee:ea:4c:45:e8:91:ad:05:d3:1a:6e:47:d6:08:6f:6e:
         fe:47:f0:45:7e:59:24:a5:eb:e8:a9:be:34:cf:34:32:43:5f:
         44:f3:88:a0:ce:80:7e:05:25:4f:c3:9b:7a:27:cb:ec:5e:df:
         58:bd:4b:32:14:c9:70:18:4c:d4:15:41:31:77:30:26:7b:e0:
         87:92:3f:32:73:93:56:e8:f7:e5:ea:9c:42:8c:9e:14:8d:48:
         1f:c5:60:1e:0d:d2:9b:f3:a0:c7:04:49:3d:4c:61:ad:73:32:
         ea:c1:5c:b1:f9:35:23:51:e8:94:4b:10:b2:b6:6d:3c:40:c9:
         dd:c9:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:12:48 2026 by rpki-client