Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
File:                     Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json)
Hash identifier:          PY8TbEJTWSVWgYVugyP33hcGW9BPZb36dkZtfeRlOdc=
Subject key identifier:   AE:AE:E7:96:4E:51:52:89:59:61:A8:10:D7:99:3A:09:13:87:81:AB
Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8
Certificate issuer:       /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
Certificate serial:       087A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
Manifest number:          0870
Signing time:             Tue 12 May 2026 20:46:46 +0000
Manifest this update:     Tue 12 May 2026 20:46:46 +0000
Manifest next update:     Tue 19 May 2026 20:46:46 +0000
Files and hashes:         1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: Qwd6JKJJuyCkjiy1SMZz4RPJYmxuGVLV1WhrnZ+IrSg=)
                          2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: KdzxhfaL6N8OpKtTXar6kXEIGG1BCxW71mfqiWDRui8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
        Validity
            Not Before: May 12 20:46:46 2026 GMT
            Not After : May 19 20:46:46 2026 GMT
        Subject: CN=6a0391b6-c4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:fb:8c:43:e7:50:e6:cf:da:53:2c:25:39:
                    65:a0:86:3c:e9:c9:ac:bc:27:63:5c:33:d8:44:55:
                    93:e6:a7:95:ce:6d:2e:34:01:a0:ab:8e:f2:73:9a:
                    1a:e3:5d:e1:c2:b1:e2:f7:fd:5c:f0:66:e5:63:96:
                    e6:5b:d4:2b:be:67:aa:f5:5f:d2:e0:5f:27:9d:ce:
                    6b:b2:2b:e6:37:63:ef:b6:03:06:2f:3b:51:24:ee:
                    cc:e9:84:a2:be:93:b4:4d:18:fb:ef:cf:5e:ec:ac:
                    f6:9c:dd:c2:e9:88:48:99:a5:df:53:0d:a6:5f:6a:
                    be:e3:df:d0:6a:ad:08:04:83:50:9e:ef:dc:0a:b5:
                    01:af:d0:1b:bc:be:00:0a:80:1a:51:c3:7c:07:d5:
                    79:46:d1:9c:b8:e9:85:c0:b9:7f:db:02:21:fc:f5:
                    fc:e3:9d:ed:fe:a1:77:64:8f:01:ae:9d:da:d1:7e:
                    94:88:c5:b5:44:d5:30:7e:35:a4:ae:80:37:99:04:
                    64:8e:5b:7b:35:f4:9b:66:eb:b5:4c:d2:7a:93:7b:
                    b8:91:86:63:7e:b3:25:f5:69:56:65:08:18:a0:a2:
                    b7:1c:75:b2:b2:bd:d0:34:f9:d5:b2:51:82:7b:4e:
                    e1:5c:5d:d7:00:ef:f0:7c:bd:0d:61:91:32:96:43:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AE:E7:96:4E:51:52:89:59:61:A8:10:D7:99:3A:09:13:87:81:AB
            X509v3 Authority Key Identifier:
                keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:b0:31:f3:21:2a:be:7d:85:a0:50:61:ae:b3:a0:be:8e:
         50:a0:96:fb:5c:5c:af:fa:10:8b:00:91:1e:45:f2:32:cb:28:
         cf:3b:d3:c4:2c:fe:ae:55:87:47:de:ef:c8:df:99:ef:20:e6:
         4f:19:69:4e:f8:62:ea:b2:58:8b:e4:a0:70:dc:76:1c:8e:0d:
         4e:a7:45:f1:ff:e9:ec:92:c6:63:b5:b0:7d:14:5b:b8:ae:ec:
         e9:f4:12:e3:8f:29:35:f5:fa:da:19:e7:16:3e:f4:d2:7b:9b:
         c6:ea:74:4d:d1:e0:c2:1e:1a:07:74:d7:a7:b1:6f:3b:29:a8:
         f5:fa:15:06:63:bb:2e:20:92:51:cb:57:fd:b1:a1:3d:ec:73:
         4f:83:4f:95:ec:60:e7:8c:86:c2:14:ad:1b:fb:a9:c4:03:09:
         49:20:02:32:02:e7:8f:1a:38:64:33:43:51:8b:73:f7:6b:62:
         32:da:95:cf:23:81:34:1c:f3:12:16:a5:08:c4:4e:78:5d:bd:
         e1:70:d8:cc:8d:7a:47:e1:1a:d8:bc:37:e7:76:98:d7:43:91:
         03:3c:29:ee:12:d0:3d:ec:ec:08:a9:df:45:9b:3d:e3:83:9c:
         6e:d3:92:46:5a:ad:19:c9:b7:78:e0:cd:34:ba:87:ca:1e:f4:
         34:e9:e3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:33 2026 by rpki-client