Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
File:                     K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json)
Hash identifier:          vMy9MKfP1NO7w+9dXWZLYYuczXf7TrSQ484OA0fbKtI=
Subject key identifier:   1F:AE:E1:56:00:BC:7F:DE:D0:A9:2B:F3:EC:AE:F5:63:49:9A:F0:30
Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD
Certificate issuer:       /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD
Certificate serial:       0C28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
Manifest number:          0C1D
Signing time:             Tue 12 May 2026 18:50:00 +0000
Manifest this update:     Tue 12 May 2026 18:49:59 +0000
Manifest next update:     Tue 19 May 2026 18:49:59 +0000
Files and hashes:         1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: 1i25ZXU99675hT8H0VAcwMrycKwHCyChY2Np0L5KVOU=)
                          2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: bPIRgHEZY9rLQvrwabu6nPsfSsBA8Z8Wnu5AlQzU9KI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl
                          rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3112 (0xc28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD
        Validity
            Not Before: May 12 18:49:59 2026 GMT
            Not After : May 19 18:49:59 2026 GMT
        Subject: CN=6a037658-73fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:3c:fb:37:4d:3c:20:d5:3c:26:fd:db:90:
                    89:73:83:48:3c:02:0c:9e:dd:b8:5a:f1:59:86:cb:
                    b5:7e:c2:71:a0:f9:00:4e:86:1b:c6:b5:38:6f:8b:
                    99:14:83:7e:60:eb:84:71:bf:ca:c6:7f:99:2c:d7:
                    7c:78:2f:9a:8e:79:25:65:19:88:31:82:cc:c7:15:
                    6c:7b:bc:84:f6:2a:3d:9f:98:9c:e4:10:a7:85:67:
                    8e:d1:59:63:5b:de:96:7d:92:c7:8b:0c:d3:f7:6f:
                    da:b5:97:cc:7d:38:28:65:5b:1a:48:26:bf:11:0e:
                    1f:df:f2:79:34:5a:37:8d:49:c7:22:ab:84:6e:c9:
                    ce:1c:1f:ef:98:b3:70:53:e2:fd:aa:9d:f2:b2:d6:
                    9b:c2:01:5e:ec:76:c9:de:b6:8c:2a:26:23:8f:d7:
                    87:e4:71:c7:c1:e7:54:67:67:10:6a:8a:56:31:11:
                    b9:3a:ae:77:4e:97:5e:7f:fc:72:34:d8:3f:56:13:
                    e1:0a:d4:e6:33:b3:ed:b7:bd:63:bf:6a:b8:09:eb:
                    6a:73:d4:12:7a:1c:06:f2:69:14:94:86:b1:e5:ed:
                    c4:ec:15:86:9f:0c:61:d3:1e:88:46:0d:17:5a:26:
                    96:1e:9b:2f:ab:d2:44:d9:8c:15:13:f4:2f:1c:1f:
                    c5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AE:E1:56:00:BC:7F:DE:D0:A9:2B:F3:EC:AE:F5:63:49:9A:F0:30
            X509v3 Authority Key Identifier:
                keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:41:33:ae:32:f6:e4:a8:d6:d0:40:ac:82:7d:6f:b5:6f:
         14:87:1d:c4:f3:07:8b:7d:4b:53:42:ff:1e:3c:4f:06:45:bd:
         6a:e5:69:99:f0:3c:74:78:99:c2:6e:09:7f:b6:13:d3:64:47:
         1d:82:56:f7:49:22:c3:a2:b4:9b:bb:70:43:74:91:98:eb:f5:
         b8:ae:fb:ee:8e:83:03:da:13:df:ca:0f:d6:0d:74:1e:d7:3d:
         bc:9b:7e:77:dc:be:20:b1:bc:7d:d7:ae:10:e9:1f:5d:71:39:
         4e:57:bb:c0:29:b0:56:2c:9e:3f:5d:fc:ff:e4:50:40:90:9b:
         70:09:3c:ae:9a:df:54:f0:6f:56:5d:a0:12:96:0f:df:22:42:
         c6:81:f4:05:97:b8:cb:58:1f:3f:5d:8b:24:4b:8e:93:de:3b:
         62:70:3e:22:89:1e:44:7f:5b:22:d7:a9:ed:29:a3:a0:ab:b7:
         37:f4:b9:22:78:48:73:c1:39:11:7b:d7:75:f8:4e:0c:19:06:
         ce:c5:5b:d8:3e:d0:21:ff:1e:06:5d:8e:1c:35:bb:69:24:90:
         4f:6c:ed:62:77:a8:99:16:f5:18:ed:9e:7a:0e:6c:15:1d:61:
         97:ec:e7:18:28:9e:53:fd:3a:bd:d6:52:d7:a7:6a:47:61:7d:
         3f:5e:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:54 2026 by rpki-client