Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
File:                     glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json)
Hash identifier:          N+AWGB1eTQl4ckQtTYPvCpRwoaf32GKyWH6GPtTgwj4=
Subject key identifier:   E2:47:A9:F4:86:F1:C2:A8:66:94:5D:AA:A2:B4:2F:C8:AC:EA:0D:C4
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Certificate issuer:       /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
Manifest number:          02A1
Signing time:             Wed 13 May 2026 01:38:10 +0000
Manifest this update:     Wed 13 May 2026 01:38:09 +0000
Manifest next update:     Wed 20 May 2026 01:38:09 +0000
Files and hashes:         1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: qiy9HlkiReyYDoq+mRnDc581C+buiLHWpfUyOjyqw1I=)
                          2: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: VEI8px2anVG8cZfCHh405MajK0/zl7ELNzRvGRaIcvk=)
                          3: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
                          rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
        Validity
            Not Before: May 13 01:38:09 2026 GMT
            Not After : May 20 01:38:09 2026 GMT
        Subject: CN=6a03d601-db19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:a0:92:c4:b5:7d:1b:70:59:19:55:fc:ea:
                    4e:84:14:af:4c:7c:5f:d6:48:3e:79:11:2e:75:24:
                    42:f3:11:ec:cb:9a:25:95:fd:05:b0:6c:26:79:16:
                    3a:3a:ef:bd:66:2a:7e:96:18:cc:60:d0:3e:9a:16:
                    38:dd:c9:82:ff:04:5b:81:96:bd:95:33:8d:8d:6f:
                    df:f4:3f:d9:f2:23:30:df:ea:f4:d9:ad:38:98:89:
                    2c:a7:dc:a9:ec:a9:fb:8f:fa:ab:da:dc:70:88:1f:
                    69:98:15:4d:0d:f5:ba:8d:8c:1d:35:26:b8:c3:b3:
                    e6:c3:97:52:18:f0:bf:78:de:d5:88:b9:e9:cf:ed:
                    0d:99:5f:31:2b:4f:e4:3a:dc:05:c7:24:bc:81:b5:
                    73:8c:0e:61:5b:8b:c5:02:a7:54:0f:49:5b:91:14:
                    94:ed:20:bd:de:2a:6f:46:2c:8d:99:3c:7e:c1:a5:
                    ee:76:d9:d9:6a:d8:9e:40:24:86:50:05:14:2c:4f:
                    a7:60:8a:b4:f7:ab:99:09:59:44:96:90:4b:8e:68:
                    8e:46:11:2b:f3:69:3b:89:a6:ce:48:b2:51:e7:49:
                    ba:38:10:df:b7:ab:a2:b2:f1:e9:a9:03:5e:6a:14:
                    5f:03:24:00:e5:47:ab:f3:87:15:87:78:f8:9e:24:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:47:A9:F4:86:F1:C2:A8:66:94:5D:AA:A2:B4:2F:C8:AC:EA:0D:C4
            X509v3 Authority Key Identifier:
                keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:25:ca:c2:20:fa:2c:5f:51:a2:27:e2:81:c8:3e:97:6f:
         b3:32:6b:65:25:d6:c7:59:ca:ee:92:f9:7c:16:4d:90:7a:ab:
         ca:1e:03:5b:63:fc:11:e7:ce:34:de:a2:70:e3:b2:b4:c7:f5:
         00:5f:45:41:f4:29:57:48:7a:c3:79:54:c5:99:22:22:22:57:
         b9:01:07:ba:64:2b:f4:86:ef:c0:6c:c5:b3:6a:93:fb:ac:91:
         43:71:66:e3:7d:39:d5:c0:0d:f5:e0:27:7a:a5:10:67:f0:2f:
         73:71:e4:42:3b:bd:0f:b7:3a:9f:6c:4e:20:83:81:5b:12:1d:
         39:b5:75:77:c0:e3:74:5e:67:11:fd:53:d7:75:9f:f8:ca:92:
         cf:f3:40:ac:15:82:3a:f2:49:dc:6a:64:e2:ab:24:c1:56:ce:
         0d:cf:fb:8d:c8:66:33:90:d8:4b:87:e1:6e:ef:7b:67:9e:8c:
         ab:3c:a1:f8:7a:37:6f:90:74:eb:0b:89:a8:4d:d4:26:0f:bd:
         f9:50:6e:c5:67:cd:eb:e1:d7:07:d2:4d:89:d2:bc:93:44:0d:
         8d:ea:d2:98:ab:f5:a4:6b:ac:c6:42:23:03:f3:96:d0:07:08:
         3b:01:d8:02:1b:f7:a4:43:01:69:f4:02:c7:57:33:7e:a4:38:
         6b:8c:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:39 2026 by rpki-client