Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
File:                     p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json)
Hash identifier:          YEJpH1Vy89kKejzs80p1sculUHv/eGI0yIPh2YoF5xM=
Subject key identifier:   C7:D2:AD:DD:FB:A5:7D:BD:ED:AE:85:6F:11:FE:9F:95:3E:94:48:C0
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Certificate issuer:       /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial:       0E0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
Manifest number:          0DFD
Signing time:             Tue 12 May 2026 17:52:29 +0000
Manifest this update:     Tue 12 May 2026 17:52:29 +0000
Manifest next update:     Tue 19 May 2026 17:52:29 +0000
Files and hashes:         1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: QtoHn5PAIAaIIWa7ZN8xiScpqkXESot7I7DBjzNa3Ao=)
                          2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: egC6j0/L+vNrahwqS7R8sgu3NxXeX9dmJPD7oQ0uOyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3597 (0xe0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
        Validity
            Not Before: May 12 17:52:29 2026 GMT
            Not After : May 19 17:52:29 2026 GMT
        Subject: CN=6a0368dd-48b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:30:20:e0:fb:5d:2a:6f:eb:c3:66:e0:e2:
                    43:f9:29:1c:8c:4c:7a:da:96:a8:be:8a:c2:a2:61:
                    77:b6:46:33:1a:fa:32:50:7d:b6:b8:60:15:54:f4:
                    5e:0b:5e:8d:09:12:79:ce:4d:1f:c6:ba:d3:e3:06:
                    21:b5:ec:f5:cc:7d:1a:d2:a1:17:57:73:f3:01:39:
                    4c:fa:99:97:f3:13:bd:33:46:7d:8f:c1:6f:a8:b9:
                    06:fb:40:3e:15:44:11:05:dc:c8:d9:f0:1f:8f:0a:
                    0d:c5:38:9e:96:47:c1:28:30:11:ad:05:f8:13:81:
                    4c:4c:38:d4:e3:55:42:2f:95:d7:dd:0d:b8:6a:48:
                    f5:03:cc:3b:59:f5:d7:88:69:b5:8d:0b:5e:ad:27:
                    06:66:87:d9:08:bd:37:34:d4:8b:c2:28:10:a4:05:
                    80:0b:7d:52:9e:07:0c:72:77:82:cb:b5:59:ba:1b:
                    59:a9:bb:fe:3f:06:83:9d:98:46:ce:4e:14:ec:c4:
                    52:a8:76:f7:9e:26:64:0d:f9:91:28:e1:a1:6d:b8:
                    b2:50:ee:5c:da:b2:87:72:0d:5c:f6:7b:4a:0f:0a:
                    0d:22:f5:7b:04:c2:56:ff:77:82:cc:c9:b3:1f:57:
                    1c:89:d6:16:71:0a:85:07:e6:29:7b:f5:39:d7:43:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:AD:DD:FB:A5:7D:BD:ED:AE:85:6F:11:FE:9F:95:3E:94:48:C0
            X509v3 Authority Key Identifier:
                keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f0:ad:d9:c1:e0:64:d6:c8:39:5d:d5:55:e0:ef:a8:fb:44:
         20:db:3f:c0:95:51:e8:fe:3e:e9:a7:32:f6:8b:14:f9:64:68:
         08:fa:1d:33:67:c4:0e:5a:ec:48:a4:05:9d:e2:d0:7f:4c:cc:
         14:54:2e:bc:86:db:d1:67:2d:e6:a0:04:d7:0a:a9:64:f9:cd:
         7d:8e:2f:22:ec:38:4c:1c:a0:ee:15:f6:11:ff:1e:1a:cf:65:
         45:fc:48:2a:60:5b:95:07:01:1c:0b:b0:53:67:6e:c8:1d:96:
         9c:34:ab:10:25:3e:2e:e6:a2:32:e0:94:a7:13:7f:25:57:f2:
         31:cd:af:fa:eb:88:67:70:a9:16:35:b6:b1:0e:36:07:ee:2e:
         71:6a:04:9e:88:74:fe:51:4d:c7:a3:06:b6:81:ba:04:76:42:
         f3:75:50:a4:7f:72:21:0f:8b:fd:54:fc:3b:ce:29:10:59:83:
         e6:63:cf:8c:2a:bf:9f:3b:d0:58:46:b0:e9:2a:74:36:e6:94:
         96:07:91:18:09:63:5c:3e:83:3e:3d:32:15:0a:e4:53:43:78:
         62:9c:5a:c4:31:4a:cd:f7:64:02:1d:e1:c5:38:bd:b8:53:d5:
         bc:05:ae:b9:c3:27:fd:be:fe:c5:e4:ac:d5:b8:c9:18:7b:bb:
         e9:5b:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:25 2026 by rpki-client