Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File:                     _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier:          hPlSu+foJmSiYiUoxXTHS3r81Zj5nP4xbgBpK6IJ6OU=
Subject key identifier:   C2:86:19:B2:AC:37:C9:5D:AD:A8:AE:38:15:5E:6F:67:3B:68:D2:0E
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer:       /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial:       0B92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number:          0AD1
Signing time:             Tue 12 May 2026 19:46:07 +0000
Manifest this update:     Tue 12 May 2026 19:46:07 +0000
Manifest next update:     Tue 19 May 2026 19:46:07 +0000
Files and hashes:         1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: RSeLqGxWR9B0myWQ9FCcPzYjMBPPPR4coCkP11XYKvQ=)
                          2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
                          3: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
                          4: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2962 (0xb92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
        Validity
            Not Before: May 12 19:46:07 2026 GMT
            Not After : May 19 19:46:07 2026 GMT
        Subject: CN=6a03837f-30be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:5f:86:e0:95:32:2d:24:a1:87:6d:c3:d4:
                    89:c4:e4:a1:1c:d8:70:da:80:f9:35:fe:46:85:c2:
                    b8:b8:53:8b:f5:4a:15:83:66:34:36:07:dc:df:4d:
                    36:b6:8f:98:93:e3:30:83:79:28:cc:63:dc:a0:2e:
                    32:37:16:d1:60:06:0c:07:1d:c1:64:65:2d:08:9a:
                    c5:14:b7:e3:7f:14:10:a9:16:ea:24:7c:db:3e:7c:
                    bd:67:30:47:05:1e:2b:6e:7e:1b:ab:09:04:83:8b:
                    a0:c2:a0:f2:8b:8c:fa:be:8d:14:80:ae:db:f8:63:
                    3d:6d:2a:2f:56:d8:6d:e3:66:3a:69:d6:bc:6a:c8:
                    83:75:55:df:75:5d:78:3d:82:64:7a:3a:b7:66:a3:
                    e0:c3:65:e7:1b:69:ff:35:9c:e5:ef:d7:a8:96:45:
                    85:65:4f:1f:e1:fc:5d:be:11:fc:e0:86:70:bf:6e:
                    1e:74:39:9d:4c:bd:c7:e0:12:f5:17:d4:5b:03:ce:
                    1f:4e:df:ba:52:56:4e:13:65:f3:a2:a3:6e:e1:c6:
                    a5:a9:3f:f5:b0:8f:a1:99:fe:d3:0b:1f:b2:a8:9e:
                    51:22:59:70:87:bc:da:ec:96:4e:fc:1c:75:62:d4:
                    a1:a4:03:8c:94:ea:47:42:08:64:cb:7b:d7:56:04:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:86:19:B2:AC:37:C9:5D:AD:A8:AE:38:15:5E:6F:67:3B:68:D2:0E
            X509v3 Authority Key Identifier:
                keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:99:e4:92:68:c2:d7:42:35:d1:72:e0:fa:95:a2:dc:8a:
         16:69:a4:ca:37:7f:7c:36:11:1b:99:c6:1c:fb:f4:1e:ec:df:
         91:b8:4f:c8:fa:43:3b:88:14:91:5c:26:7e:b2:27:07:4c:b0:
         07:24:f1:42:6f:54:e1:dc:46:4b:08:88:27:ab:76:06:d8:66:
         11:4c:05:0d:39:4a:84:23:dc:12:16:fa:44:0b:e7:fc:e4:b5:
         af:8c:0f:5a:1f:f5:22:43:35:eb:6a:81:52:fb:28:97:a1:dd:
         9f:19:bf:e8:6d:bd:05:24:c1:fb:78:a2:7d:1e:ef:3b:52:84:
         bc:e6:59:5d:68:37:f4:8b:5f:0a:3f:ff:4a:92:e3:63:6a:52:
         df:ef:fc:21:af:cb:12:ce:8b:b6:20:3b:6c:8f:59:81:1d:4f:
         c2:06:91:93:0f:58:f5:29:92:b1:5d:0c:23:fa:07:8b:0e:9d:
         57:a2:eb:fa:89:c4:65:db:11:19:fb:6c:9b:9e:4a:2a:b4:d6:
         4f:e3:13:d3:4a:01:02:a1:50:92:25:e0:0c:f2:ed:8a:15:bd:
         10:6e:a6:40:2b:55:c5:e9:9f:01:94:53:28:67:80:0e:f1:78:
         ee:8d:02:78:11:2e:c3:5f:96:12:af:51:7a:10:7f:93:46:c1:
         c0:4d:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:55 2026 by rpki-client