Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
File:                     CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json)
Hash identifier:          TOJj545IjvxNg3XcsZMc3K+iG0iS9bwHK0/AoKgGKDY=
Subject key identifier:   F3:18:EA:73:B6:0A:8B:A1:5A:32:2C:CE:56:D4:39:B5:81:75:09:5B
Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
Certificate issuer:       /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Certificate serial:       0333
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
Manifest number:          032B
Signing time:             Wed 13 May 2026 01:14:42 +0000
Manifest this update:     Wed 13 May 2026 01:14:41 +0000
Manifest next update:     Wed 20 May 2026 01:14:41 +0000
Files and hashes:         1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: GKx942/MYVAQcNxWtIckm1DMCSsotpXMFA7bbn4IMFw=)
                          2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: QM3TZDb9n+aQx7/1/HX5pDRtbQ+ME0yE/NNbiA3qbqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl
                          rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
        Validity
            Not Before: May 13 01:14:41 2026 GMT
            Not After : May 20 01:14:41 2026 GMT
        Subject: CN=6a03d082-3768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:b3:b8:a2:71:af:6c:de:8b:5d:bf:bb:55:
                    52:12:62:a8:20:88:43:79:36:06:d9:90:8c:1c:a1:
                    64:e0:52:fd:8f:da:ca:3f:87:c2:ca:3a:5e:ac:ce:
                    64:ed:22:10:94:6a:9f:98:46:f4:f9:35:44:7e:13:
                    b4:fa:b0:63:60:1e:03:49:1a:20:d5:81:c6:e9:94:
                    8f:23:c7:a1:1b:e0:7a:95:e2:b5:b6:a9:60:ba:88:
                    f0:e1:78:56:6b:0f:47:d9:59:22:12:ad:3d:79:04:
                    71:e3:5b:5c:d3:90:f6:6e:51:2d:af:cd:75:5c:11:
                    ad:17:6c:bd:30:70:20:48:9e:d7:99:8f:ea:85:c3:
                    a6:13:88:76:61:0e:14:f0:d2:06:bc:6c:32:6f:ed:
                    5f:fe:9b:6e:40:27:35:b6:65:ff:82:8f:bc:72:13:
                    0f:ad:c4:f8:fc:44:c7:a0:32:06:17:ed:05:e9:30:
                    21:2e:36:f6:51:cb:55:5c:72:27:44:60:20:ba:c4:
                    93:95:38:5e:a4:93:51:18:b8:ee:a8:1f:c6:b0:64:
                    f9:f3:9d:9f:af:95:7a:f1:e6:6a:1a:e6:00:bd:f5:
                    e7:1b:93:6b:fa:86:a8:48:d8:60:77:07:fa:12:48:
                    0a:65:f2:5e:b6:a6:d7:f3:21:ea:44:41:86:16:61:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:EA:73:B6:0A:8B:A1:5A:32:2C:CE:56:D4:39:B5:81:75:09:5B
            X509v3 Authority Key Identifier:
                keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:90:3a:33:78:9e:ec:5e:e8:ce:4d:bd:db:79:6b:09:a5:b3:
         54:91:38:32:e3:b6:67:56:1b:29:1f:25:f9:5c:60:fc:da:67:
         ae:f5:61:e6:b0:d4:72:25:9b:37:f3:b2:ce:bc:1d:db:e2:11:
         0d:e2:61:07:0f:1f:b7:c5:0e:fa:b7:e6:9b:f3:18:99:cd:e1:
         85:ea:02:98:b7:e4:b9:c7:8b:a3:0a:c0:76:c1:a1:3b:27:1e:
         e1:35:ac:86:8d:19:99:b8:6b:ef:a6:97:07:a8:53:fa:47:83:
         ee:d9:73:ea:d9:49:d0:62:75:cf:53:86:44:7a:fa:11:68:98:
         32:78:b5:1f:21:56:09:ff:b2:85:0f:d4:47:04:cc:dd:b5:39:
         52:63:82:61:19:a7:b7:04:40:1e:65:a9:90:28:ef:a8:dd:37:
         ce:ce:fe:18:48:b6:8d:a6:21:a7:48:75:e3:52:13:13:d8:23:
         04:b7:01:a6:f6:66:dd:47:f4:0c:27:62:81:b5:30:a6:6e:ae:
         27:2c:95:8a:c4:37:23:d1:4e:ca:27:69:e3:f2:5e:91:44:27:
         af:c1:29:81:d4:6d:3b:4e:e6:42:39:cd:d6:ed:b7:10:47:55:
         86:4f:48:9a:60:54:99:89:50:58:73:8e:7f:c3:7d:d2:0f:b3:
         f0:ae:d4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:09 2026 by rpki-client