Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
File:                     mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json)
Hash identifier:          401N1kz2Qs4wotJpIPvta11WIwENGAa8o0DGaiqsR1E=
Subject key identifier:   6B:38:2D:5D:37:F7:B7:1F:BC:C4:3C:0D:9F:23:FD:B3:53:2C:16:90
Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72
Certificate issuer:       /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
Certificate serial:       04B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
Manifest number:          04AB
Signing time:             Wed 13 May 2026 00:00:50 +0000
Manifest this update:     Wed 13 May 2026 00:00:50 +0000
Manifest next update:     Wed 20 May 2026 00:00:50 +0000
Files and hashes:         1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: roO4nGomYm4Uct7FoGbEwPRM24lpohQQysRJKXdpvjs=)
                          2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: 60BQUVkPwN7PgmZagFnNzoUXwo9X30Z5ovSbuJUIlzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
        Validity
            Not Before: May 13 00:00:50 2026 GMT
            Not After : May 20 00:00:50 2026 GMT
        Subject: CN=6a03bf32-a60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:24:f7:76:e7:46:c9:f9:6a:5e:96:a4:f8:
                    95:3b:7c:2b:68:4c:b0:45:3b:25:89:5b:45:b0:12:
                    ee:a4:c6:00:9f:1c:31:65:1e:59:8e:57:46:83:cb:
                    e0:e9:5e:2f:63:b3:95:34:3f:d0:15:80:d3:70:60:
                    e2:95:1d:22:70:7d:e4:2d:27:d8:ec:54:13:c6:c8:
                    a1:09:78:22:26:40:75:aa:6a:b8:dd:1b:64:b6:78:
                    60:72:87:e4:34:5b:23:a4:3e:f9:0a:d3:f8:11:5f:
                    97:b0:84:67:64:ee:bc:6c:2f:24:60:65:27:99:fd:
                    1f:aa:10:4c:52:68:54:b5:7a:30:9a:96:6e:43:28:
                    5b:25:78:ba:f6:f7:df:68:47:95:b2:58:3d:27:06:
                    4b:a4:50:e5:d3:0c:73:79:c8:f2:13:0d:42:45:4a:
                    43:60:26:bc:4f:70:bb:4f:c2:e7:27:0d:ec:f7:56:
                    1f:fb:70:ff:f6:86:2f:ee:06:40:f2:54:9b:53:9e:
                    c0:22:ab:41:80:8f:12:4b:09:01:72:a8:a4:4b:19:
                    3a:1c:6e:63:e1:ce:c4:e2:eb:7d:84:99:43:9a:9a:
                    03:a0:c7:26:cd:c1:3c:29:b0:bb:c1:c5:75:9b:cf:
                    44:4d:c8:84:d6:5a:07:7f:bf:2a:e0:45:60:ed:c8:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:38:2D:5D:37:F7:B7:1F:BC:C4:3C:0D:9F:23:FD:B3:53:2C:16:90
            X509v3 Authority Key Identifier:
                keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:33:02:51:d8:53:40:5c:52:e7:cd:de:47:74:5b:d4:d9:87:
         58:de:8d:66:a8:fb:e8:d9:42:16:3b:e9:f4:58:c8:34:d8:6d:
         61:38:d4:97:2d:9a:49:86:7b:1b:b6:65:83:dc:01:13:9f:1f:
         70:7b:34:89:b6:6f:bb:66:6a:a0:e6:94:ac:15:f1:a5:1d:03:
         2a:e3:76:fa:e2:d4:71:78:f3:e9:0d:e0:c9:36:14:25:5f:e5:
         3f:6d:ac:51:de:5a:7a:c8:9e:67:0b:f4:d2:36:02:ec:d9:6b:
         df:08:5a:50:09:b8:10:68:c6:fd:7c:fd:fe:38:16:5f:c0:da:
         67:d4:5b:6f:59:c6:f2:80:99:9e:40:99:95:2c:c6:7a:8b:19:
         fe:17:16:92:c9:cb:0b:05:e5:06:78:ae:88:6a:90:58:63:54:
         ab:b2:28:c6:67:f0:af:87:f8:c1:5b:83:b2:30:31:0b:ec:24:
         d6:59:2a:d9:51:12:af:40:43:66:1b:22:36:7a:e3:55:76:68:
         e3:bb:4c:91:4b:42:86:9e:0d:28:35:1e:9c:58:41:a4:fc:79:
         b6:be:1f:9a:1b:4b:db:5d:98:6a:93:f2:d5:fb:cf:1b:4b:b2:
         cb:f4:cf:c7:ca:3c:35:8b:7d:d5:0b:5e:30:bf:45:cf:46:c4:
         79:26:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:07 2026 by rpki-client