Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
File:                     2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json)
Hash identifier:          C2LFTqShjNoO5kvXpVo/x/w6nk9luFBOhAba/QQRguw=
Subject key identifier:   CA:D7:40:AE:67:C9:CD:4F:AA:57:02:90:DD:50:6F:05:18:01:EE:27
Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
Certificate issuer:       /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
Manifest number:          0472
Signing time:             Wed 13 May 2026 00:12:15 +0000
Manifest this update:     Wed 13 May 2026 00:12:14 +0000
Manifest next update:     Wed 20 May 2026 00:12:14 +0000
Files and hashes:         1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: PV/W4aNjXOK6Qsxzt+mrP1La9/U14ZZKzeqthMD14nE=)
                          2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: lRK5hM0+Ajz1Iu+TnpLxwj4NeRvEETgFEYDFPhqxkGM=)
                          3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: SzKheHkyXGhCU9L9E9bj5O9UK/QqaZCVghpUUMIvziw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
                          rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
        Validity
            Not Before: May 13 00:12:14 2026 GMT
            Not After : May 20 00:12:14 2026 GMT
        Subject: CN=6a03c1de-4845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:59:bb:d8:4b:5b:c7:f9:00:60:ee:ac:ed:
                    fc:f7:0d:43:d4:24:a3:98:b7:63:94:c2:4c:61:1d:
                    af:ad:0f:0b:1d:e4:49:eb:76:72:f2:f7:4c:50:e0:
                    90:cd:12:25:1b:33:6c:77:58:1b:6e:7d:22:64:da:
                    41:95:b7:39:d2:b1:f0:e1:8a:dc:f8:04:36:bb:89:
                    94:07:1a:78:39:11:34:09:d7:a7:d1:dd:86:98:36:
                    41:7b:22:92:c7:ab:6a:94:ad:87:72:46:bd:01:cb:
                    62:a5:51:ff:a7:d1:1a:1a:a0:ab:bf:7d:7d:71:38:
                    21:c3:64:38:42:6a:4f:e6:a2:ee:bf:21:2d:7d:aa:
                    40:b0:a7:08:e6:0d:88:2e:dc:23:6c:ac:92:31:6f:
                    90:b4:e9:e8:aa:18:44:40:c3:64:95:61:b3:5b:55:
                    2f:0f:fc:bc:b0:ea:37:77:80:89:ac:be:31:82:71:
                    cd:f0:4f:60:a8:6e:eb:45:1c:95:a5:1f:c4:e4:f2:
                    77:30:8c:f9:52:d1:e4:82:d4:11:37:41:9d:1d:7d:
                    7f:46:4e:17:21:e6:44:a7:1b:6b:6a:c7:ad:15:0f:
                    95:2f:60:34:b4:88:2b:b7:7c:ef:b9:44:39:ea:45:
                    04:9e:06:e9:e4:25:85:b9:67:1e:4e:e1:13:35:10:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:40:AE:67:C9:CD:4F:AA:57:02:90:DD:50:6F:05:18:01:EE:27
            X509v3 Authority Key Identifier:
                keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:11:88:08:a9:47:12:f1:d1:bb:24:be:33:61:a8:e6:7b:10:
         b6:a3:ed:2c:90:57:18:15:0c:37:08:78:81:7a:dc:67:1d:c9:
         9b:c4:ab:95:29:93:e9:b7:98:1e:0b:51:d4:a2:f1:cf:53:5d:
         20:b7:32:7e:3a:59:e8:cf:7b:e3:12:3b:9f:4e:7b:05:51:15:
         94:f2:31:d4:16:18:13:eb:5a:6c:bd:6b:43:9d:00:7c:83:f2:
         8d:f2:c8:33:d4:63:ef:8b:61:2a:fc:6f:3c:2d:ea:45:83:75:
         32:1d:1a:f6:c9:f5:f7:c6:49:78:91:9e:bc:e5:1e:0f:88:24:
         91:f6:43:79:13:9b:f7:f8:7a:fc:d6:ee:57:b5:32:92:74:52:
         8e:f4:8f:36:ef:d4:49:cb:11:43:db:98:d9:2c:ca:4c:2a:80:
         42:14:f1:f1:87:f6:64:33:d9:e6:f0:de:93:6d:b5:32:fd:11:
         43:e0:4c:5b:1e:56:6d:48:91:89:ec:10:31:24:22:d5:e7:cf:
         c6:39:c3:0d:59:b6:73:16:b8:93:e1:d4:df:25:1c:11:39:e7:
         60:50:44:75:f2:1c:c1:8f:b7:67:4e:c1:27:97:7b:21:b3:5c:
         8f:93:f5:cc:04:cd:03:33:73:64:4e:37:c8:97:bc:2b:20:02:
         5e:dc:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:18 2026 by rpki-client