Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File:                     _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier:          l2suKz4r4EXhfp00rPVEBffEZJM//TK/BwePPCUt96I=
Subject key identifier:   BD:E5:32:84:E4:12:0A:7D:8E:B1:6E:DD:4A:07:D8:FF:38:D3:F3:F6
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer:       /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial:       02B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number:          02AC
Signing time:             Mon 11 May 2026 01:34:18 +0000
Manifest this update:     Mon 11 May 2026 01:34:18 +0000
Manifest next update:     Mon 18 May 2026 01:34:18 +0000
Files and hashes:         1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: yuQncwZM/hY3NP3NovT9Msc1sKLehrGLyGXlgygwpZQ=)
                          2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=)
                          3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
                          rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
        Validity
            Not Before: May 11 01:34:18 2026 GMT
            Not After : May 18 01:34:18 2026 GMT
        Subject: CN=6a01321a-3915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:ac:30:5d:1c:06:9f:a9:d7:c1:fb:e8:ad:
                    a4:8f:55:19:7a:1c:3b:d0:eb:8c:90:8b:2e:92:e0:
                    13:54:b4:2c:06:31:96:a0:dd:83:91:f1:13:a6:3c:
                    fc:80:05:d4:50:3d:20:1b:bd:bc:d7:ac:f5:19:c1:
                    25:7a:97:b4:38:c2:53:4c:bf:f5:14:47:6a:f2:86:
                    59:a4:8d:df:2e:0b:3f:5c:ae:64:76:95:7b:2d:41:
                    bf:af:3a:26:7e:02:07:eb:fc:74:18:f7:66:ae:08:
                    62:22:1a:ba:86:45:59:a1:5f:d3:2b:80:d4:46:6b:
                    fd:62:a8:b1:d7:80:d2:3d:75:eb:9d:c2:40:13:2e:
                    4d:1b:31:d9:bc:30:35:99:cf:fe:e5:e6:19:83:5b:
                    fe:bd:6e:d8:65:60:9a:15:b2:c3:01:57:bf:44:66:
                    c9:81:65:29:42:70:1c:e3:83:2b:56:bc:23:12:1d:
                    7a:c7:06:0b:3b:c3:e9:37:66:d9:e6:a4:9f:ba:11:
                    ac:2a:e5:bc:e7:7c:d2:50:05:87:cb:26:95:0e:09:
                    53:0a:ea:aa:ac:ca:4e:34:d7:6a:65:bc:3c:56:62:
                    ee:3a:e2:71:b3:03:7f:2f:63:c3:dc:63:13:47:47:
                    63:ad:98:cd:8b:48:b5:1f:32:6a:6e:a6:5b:47:ff:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E5:32:84:E4:12:0A:7D:8E:B1:6E:DD:4A:07:D8:FF:38:D3:F3:F6
            X509v3 Authority Key Identifier:
                keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:7b:cd:4a:39:83:7e:dc:b6:e4:4a:ed:7f:8b:91:89:e6:3a:
         31:96:d1:d5:3a:a6:5e:2f:44:47:de:ba:b3:68:f6:9c:79:a9:
         d8:2a:c7:67:55:f3:c4:99:dc:8b:f6:14:8d:fb:3b:eb:48:a0:
         1e:2b:8b:f3:1d:3d:f3:27:c3:e0:02:4c:3e:35:be:4a:31:88:
         db:c4:95:40:13:65:24:ae:5d:eb:b7:2c:f7:17:41:e9:f9:53:
         d8:e4:9b:55:ae:a4:c3:79:8a:cd:da:7f:e7:4e:80:bd:00:f9:
         f8:ca:45:88:9c:21:ec:b6:3b:a8:1c:15:8e:88:7f:1e:87:f2:
         42:7b:28:2f:20:3a:7f:98:52:d2:e1:67:b2:0e:fc:96:00:c6:
         da:c5:0f:65:8d:7c:77:bd:80:17:2f:f3:2b:3d:b2:5e:2f:65:
         37:f8:8c:4c:84:71:75:99:16:ba:62:ed:de:d1:95:28:d0:89:
         63:04:ed:1d:38:2d:d6:61:42:6c:48:28:f3:2c:64:47:b2:de:
         89:0d:1f:a5:85:e1:fa:69:36:5d:99:a8:59:77:c1:1f:18:68:
         63:b6:fc:a9:54:64:f4:f6:35:fe:50:e2:2e:96:e2:b1:1c:fe:
         86:a1:c3:2e:64:54:b1:49:c1:41:f4:9f:a9:9c:c4:c7:7a:4f:
         34:e8:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:14 2026 by rpki-client