Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
File:                     2-mhAMSp66SyzRomcTKN73j-duE.mft (raw, json)
Hash identifier:          fCcNMrj0lxjr4gKoj+4D/GIC51domRs7MQT/udKg3cs=
Subject key identifier:   B9:05:03:BD:41:3A:A8:7D:6C:6E:35:85:B6:F9:C1:13:6E:FA:4D:79
Authority key identifier: DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
Certificate issuer:       /CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Certificate serial:       06CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
Manifest number:          06C6
Signing time:             Tue 12 May 2026 22:25:10 +0000
Manifest this update:     Tue 12 May 2026 22:25:10 +0000
Manifest next update:     Tue 19 May 2026 22:25:10 +0000
Files and hashes:         1: 2-mhAMSp66SyzRomcTKN73j-duE.crl (hash: e08nX8GqTQWa1vY3UIzbVB6S0q7VLQQh2fx1kGaENdg=)
                          2: A0D57302A33D11EBA479491CC4F9AE02.roa (hash: kb9zEE+gQtKtKJqnoxGKbZ4ZB03+JVAlcBPaLyfwBcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
        Validity
            Not Before: May 12 22:25:10 2026 GMT
            Not After : May 19 22:25:10 2026 GMT
        Subject: CN=6a03a8c6-b42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:23:63:f6:d8:8b:28:a9:48:73:47:a2:5d:32:
                    07:6f:1e:ef:93:c9:91:21:dd:04:6a:4f:39:5e:37:
                    3d:f6:c5:e6:14:84:19:12:cd:28:70:a7:76:fe:c5:
                    67:ee:ff:e5:d7:0f:89:2b:fb:de:1c:72:70:9d:bb:
                    2a:d1:c5:ec:44:7f:9a:a4:93:10:f9:b7:92:8e:5a:
                    80:8a:e0:59:17:11:41:af:39:78:e1:30:57:cf:86:
                    93:91:85:5d:06:49:d3:6c:0a:96:73:e6:6f:89:8e:
                    b0:86:f1:81:35:e6:43:53:4a:ac:1f:6a:41:c0:e4:
                    85:0f:e1:98:d7:32:ec:21:8a:79:ab:1c:c9:9f:1b:
                    bf:51:2b:8f:fb:76:80:83:42:9f:86:d8:fa:ba:de:
                    90:75:da:85:c9:47:90:7d:8b:da:75:cd:af:f8:9d:
                    e7:b3:dd:b4:8d:d1:a4:46:55:10:1d:c8:35:37:67:
                    9c:05:7b:18:85:ce:aa:01:c8:7e:7d:7c:88:21:46:
                    7f:31:75:90:25:27:52:d0:1d:a1:78:a4:14:f6:08:
                    42:2c:ba:c5:44:af:da:63:de:a7:22:02:ed:17:25:
                    63:6a:00:88:69:2c:83:97:92:89:70:d1:48:1d:62:
                    0e:9f:8d:4b:9a:03:ee:7f:6e:99:c0:e7:84:57:e8:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:05:03:BD:41:3A:A8:7D:6C:6E:35:85:B6:F9:C1:13:6E:FA:4D:79
            X509v3 Authority Key Identifier:
                keyid:DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:0f:41:69:b4:2b:07:c3:91:27:b2:33:d8:98:f5:cd:f5:
         34:7d:b0:e1:4e:e5:44:96:65:e5:d1:18:b5:65:5b:cb:7b:68:
         8d:78:a8:e9:fa:7d:9c:7e:11:5d:6b:8a:61:7f:d2:7d:09:bb:
         78:4d:c6:85:c1:0c:6e:3a:58:e3:43:98:70:88:6d:12:6d:f8:
         9a:12:0a:7e:c5:fe:12:15:10:61:7e:1e:ce:b4:40:34:7e:34:
         d2:9d:77:6e:01:5e:b1:9a:42:17:a9:e7:d1:b4:d3:8e:be:69:
         ac:6a:41:d1:7a:0c:1c:b3:61:9a:0b:47:41:3d:00:16:8e:99:
         08:02:e9:fb:d0:7d:68:5d:88:e5:71:46:91:c3:6b:1b:e1:28:
         ac:9b:d2:ed:90:b6:b1:ed:a3:93:81:8c:25:ac:ac:ce:46:b5:
         40:0d:95:0a:20:be:e9:49:2e:a4:f9:d1:ed:2e:69:bf:d0:f7:
         05:1e:e2:11:47:05:cf:3f:a0:26:bc:20:60:04:a5:8d:0e:7e:
         8b:61:19:1d:e5:18:10:38:ce:38:4d:93:d5:a7:3b:a6:07:0f:
         07:1d:42:48:fd:4f:95:f4:dd:a8:19:d3:52:79:8a:16:32:6e:
         30:a4:24:f3:93:8c:77:cf:00:13:98:d1:20:8d:a7:71:a5:7e:
         47:10:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:54 2026 by rpki-client