Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
File:                     0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json)
Hash identifier:          tqr52hti2vpylSSOAKrb7p6NCIImikpqmVOW0Zf5zIY=
Subject key identifier:   02:EA:CA:C2:AA:F1:32:43:C5:DE:FE:7A:5C:91:6A:7C:F2:14:BD:CE
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Certificate issuer:       /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial:       094E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
Manifest number:          0941
Signing time:             Tue 12 May 2026 20:14:35 +0000
Manifest this update:     Tue 12 May 2026 20:14:35 +0000
Manifest next update:     Tue 19 May 2026 20:14:35 +0000
Files and hashes:         1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: cvF0IKYQndRyRzjTI2bVc940xYURHUv0r9fcjCBobmk=)
                          2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: zpylNEe89CbqVMFt1Qej/SgQec1Qy8+/AmkFsaHZ4JI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382 (0x94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
        Validity
            Not Before: May 12 20:14:35 2026 GMT
            Not After : May 19 20:14:35 2026 GMT
        Subject: CN=6a038a2b-10c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:2a:15:8c:bb:e3:7b:9e:5c:cd:71:b7:5a:
                    21:b3:31:16:bb:31:16:c6:22:61:81:0a:be:d0:74:
                    04:ae:19:43:57:4a:ca:3b:7e:5f:b9:1a:cf:15:81:
                    d0:63:7e:82:b4:ef:e2:09:ab:16:7e:a2:f2:57:a4:
                    23:88:d9:15:6a:3e:b5:e5:fb:a6:e2:e7:b3:9c:dd:
                    3a:a9:e5:e8:42:d1:15:83:26:67:be:7f:07:7f:61:
                    d3:73:00:8a:aa:f5:9b:7b:d0:a0:43:93:b9:a3:74:
                    62:78:f3:bd:10:13:63:4e:e5:3f:00:db:29:86:60:
                    91:e7:11:ad:96:a7:b6:8d:49:3d:9d:b4:8d:e7:25:
                    17:48:4c:63:6b:49:37:a3:b1:47:4a:36:48:25:57:
                    7d:ca:f6:78:88:5e:45:6e:2d:bc:e5:54:47:6e:67:
                    1a:10:1c:87:18:01:0b:f2:97:4f:6d:51:15:d6:8d:
                    23:ed:85:4a:d5:9f:64:bc:c0:3a:5a:75:95:a8:df:
                    39:ca:97:9b:9c:ba:b4:68:9d:e7:de:f0:5a:9f:e6:
                    db:70:8c:2c:fa:91:08:ee:a6:aa:d5:b6:2a:dd:20:
                    0a:db:ed:b8:85:80:5b:76:20:77:98:8b:59:b8:73:
                    70:fb:e5:e1:74:d5:0f:27:11:a0:f7:9c:d7:3b:10:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EA:CA:C2:AA:F1:32:43:C5:DE:FE:7A:5C:91:6A:7C:F2:14:BD:CE
            X509v3 Authority Key Identifier:
                keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a1:ec:ce:ab:3e:92:99:b8:83:22:d6:00:f6:b1:ec:53:59:
         06:bc:6d:d0:81:51:11:44:9f:24:c7:00:36:64:f2:ef:8f:7f:
         8e:bb:24:93:ba:48:5c:98:d0:ab:fc:46:15:02:08:5b:83:56:
         9d:b6:4e:ec:28:8c:b3:56:dd:eb:6d:14:68:8d:fa:78:f8:39:
         23:44:b1:df:92:5e:49:03:f0:20:86:8c:69:67:d1:cd:6b:3d:
         b0:3b:56:22:e0:07:ae:5e:43:8c:c6:28:70:e0:72:2d:36:27:
         92:9b:c3:09:20:70:55:bf:98:18:bb:89:74:d6:f5:09:48:ab:
         2d:84:d9:03:8a:c9:a5:89:5c:ec:9f:1d:26:0b:2a:83:c8:68:
         6b:30:95:03:91:19:02:8c:88:3a:8d:a5:9c:79:97:f6:5e:b7:
         e9:aa:f1:a2:c6:a8:2d:10:6c:a1:67:5a:b1:61:9d:9e:da:fe:
         61:3b:93:5f:2a:1a:7e:ec:33:07:57:48:60:28:c5:97:ed:7a:
         29:46:9b:b3:27:fd:d3:a1:83:46:97:d0:2f:fb:0a:9e:76:42:
         fb:41:95:ff:66:5e:56:d4:8c:c6:96:9c:a9:a1:33:14:c3:0b:
         7f:f3:b5:0d:69:c7:43:c1:c9:0b:f2:d7:ee:95:1a:54:8f:e9:
         a0:e7:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:51 2026 by rpki-client