Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File:                     aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier:          +65Juwm9kLxYwytkzGiDXJ1VQQ+CnTb0SvmyeTVeCI0=
Subject key identifier:   C5:12:4A:7E:54:F2:0C:14:0F:4E:61:1A:06:F9:EB:58:1D:97:DA:FF
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer:       /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number:          FB
Signing time:             Mon 11 May 2026 06:21:14 +0000
Manifest this update:     Mon 11 May 2026 06:21:13 +0000
Manifest next update:     Mon 18 May 2026 06:21:13 +0000
Files and hashes:         1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: daVglqzl3baD9y4naWMVtfY0eMb9YViv9FtINwdcg+I=)
                          2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: aMh3gHoepLpqOKWWhGXWigpmXGXNEzE7D6VuL1CBkbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
        Validity
            Not Before: May 11 06:21:13 2026 GMT
            Not After : May 18 06:21:13 2026 GMT
        Subject: CN=6a01755a-d163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:73:2b:8d:46:9f:80:05:a7:8a:1b:d0:3b:
                    40:87:bb:a7:a2:f0:d2:d5:06:d9:d0:00:84:51:d5:
                    12:44:b4:87:f6:14:51:32:3b:ef:8b:4c:c9:81:de:
                    10:ae:17:b9:49:4f:2e:35:58:a2:19:00:da:ff:97:
                    a7:c6:51:75:62:49:3a:c9:e5:d1:14:04:63:5d:29:
                    c6:8a:75:05:3a:b2:60:ba:8a:91:57:f3:dd:f3:a1:
                    d1:35:d8:5c:ce:b3:cb:13:99:9b:d3:c1:25:c5:1a:
                    d7:2b:1d:5a:ee:fd:9f:f8:02:4c:ab:71:43:8e:ae:
                    27:5d:ca:27:cf:bf:cf:00:8b:1c:a6:98:20:55:cf:
                    85:e4:99:da:8a:4f:02:e8:58:87:65:51:d1:03:30:
                    60:46:48:93:2c:ee:35:c9:9e:c8:43:41:79:70:b2:
                    3d:3b:92:77:11:99:94:3d:0a:85:14:4c:f8:d7:b3:
                    ff:a6:17:ca:34:56:4c:0d:73:a1:ca:cb:83:51:d7:
                    da:61:e2:cc:ec:fc:36:82:f2:f6:ab:c0:f2:34:c2:
                    86:20:cd:53:34:35:9b:61:a3:96:b7:53:ca:84:6a:
                    c9:a4:d6:52:e6:d8:4d:a6:0f:c8:42:99:a3:7e:4f:
                    59:05:6c:19:55:90:37:51:3e:c1:a2:d5:05:26:56:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:12:4A:7E:54:F2:0C:14:0F:4E:61:1A:06:F9:EB:58:1D:97:DA:FF
            X509v3 Authority Key Identifier:
                keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:7f:33:81:30:77:d5:68:0d:01:44:d1:db:1a:10:4f:26:
         aa:d2:22:71:fc:33:eb:f4:2f:eb:2a:61:6e:bc:8d:31:17:eb:
         ed:c0:c7:65:0b:ec:62:0d:46:c9:d3:d0:0d:6e:a7:cf:e5:93:
         25:95:99:47:86:2b:13:33:cf:13:e0:dc:e8:1a:b3:98:63:3f:
         fa:91:78:1a:98:ad:7f:d2:d2:67:54:4d:eb:1a:20:05:61:f4:
         52:b0:e2:44:e6:63:f3:52:bd:4f:7b:4d:47:1e:1d:40:fd:70:
         12:e5:46:7d:6f:a9:de:de:55:25:03:7d:bc:f8:0d:a4:57:97:
         b4:17:b9:31:52:81:86:2d:16:7b:5d:f4:71:6c:bd:29:6d:58:
         92:27:72:22:ce:a4:8d:53:b0:d0:2a:aa:1b:b9:96:3e:a8:ab:
         1e:c2:d3:a1:62:e1:85:fb:cd:f8:03:fb:5a:5f:45:c0:29:b7:
         36:3d:8f:fc:94:09:6f:73:9f:0f:e1:47:1c:38:0a:b7:95:ec:
         76:95:e8:ee:fd:0b:cd:c7:d7:2a:69:8b:19:51:a4:19:7f:d3:
         b2:59:6a:df:33:e1:90:3d:74:d3:3d:18:57:ba:b6:aa:12:ab:
         86:8d:9d:6d:26:8e:53:69:33:68:17:81:a1:95:ba:d8:2a:ec:
         a9:1a:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:54 2026 by rpki-client