Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
File:                     _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json)
Hash identifier:          l07AWFDugQGyAwp9YsKaggEhJgde2hwv81Y3OZfg58c=
Subject key identifier:   92:22:14:A7:BE:71:8F:0C:85:38:E1:88:C0:30:16:E6:33:F6:A2:27
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Certificate issuer:       /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial:       07DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
Manifest number:          07D5
Signing time:             Tue 12 May 2026 21:25:59 +0000
Manifest this update:     Tue 12 May 2026 21:25:59 +0000
Manifest next update:     Tue 19 May 2026 21:25:59 +0000
Files and hashes:         1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: Fy+zj4OdCUexNv0kukBFSjIYM/mH73BaCBM3W6IhdjA=)
                          2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: TnSaLf+xgZHXFIsS72cUr6qVZqPyupzxKL+9myIDylQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
                          rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
        Validity
            Not Before: May 12 21:25:59 2026 GMT
            Not After : May 19 21:25:59 2026 GMT
        Subject: CN=6a039ae7-b2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:53:3a:f3:5c:59:f1:f7:36:c8:34:0a:6d:
                    f4:b7:2b:32:1e:0c:cc:14:e3:51:35:a8:8b:db:8e:
                    9d:c9:f5:36:a6:fe:b6:96:6b:2a:e1:49:08:02:39:
                    47:33:7d:ea:89:14:d0:55:2c:59:ab:3f:11:33:82:
                    be:37:63:3c:bc:1a:6c:ea:39:49:d0:02:e4:a2:e0:
                    a0:a7:8b:ac:7a:d0:04:8d:2e:dd:00:3d:78:3f:17:
                    7b:dd:f0:94:59:7d:49:92:ef:89:31:f1:86:ec:ae:
                    c1:e2:f6:f7:50:cd:cb:52:70:3b:bf:0d:b4:dc:e2:
                    0c:16:8e:ad:d8:01:5d:ff:f0:bc:92:e1:85:ee:63:
                    0e:41:08:d5:e4:f4:3d:eb:45:71:d8:73:6e:fa:82:
                    cb:1b:e6:6f:6a:09:43:96:22:3f:23:f7:c7:1d:06:
                    51:5c:89:09:ae:ea:4d:74:d7:8f:c9:80:db:fc:8e:
                    3b:2d:b3:a4:1e:cd:18:0b:3b:44:9e:70:5e:3b:8d:
                    3e:92:e8:ed:cc:65:be:63:e1:1c:6d:ca:e3:6b:88:
                    72:a5:df:07:e0:ae:be:23:03:36:17:bc:53:df:c1:
                    ae:b1:68:39:4c:9a:8a:a1:fa:11:bd:13:99:dc:c3:
                    5c:1e:6f:6b:53:8a:a9:71:06:c0:44:e3:c7:49:51:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:22:14:A7:BE:71:8F:0C:85:38:E1:88:C0:30:16:E6:33:F6:A2:27
            X509v3 Authority Key Identifier:
                keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:30:2c:30:72:b5:62:7b:af:1a:88:65:fd:e3:f6:b4:c3:36:
         4b:20:54:13:0b:b9:09:90:0d:93:2c:65:53:83:19:af:fe:c6:
         97:80:b7:c2:fa:97:3f:e4:a4:e4:a4:9a:8d:27:8f:7d:0d:5a:
         7f:43:9a:d2:56:e0:dc:26:a5:50:b6:4a:82:8a:4c:db:55:9a:
         c7:cd:56:79:8c:99:d7:5b:cb:42:bf:b0:f8:a7:27:e3:37:ef:
         f6:8a:fb:66:9e:80:2c:e6:50:25:8a:b2:db:25:2e:3f:cd:ae:
         0b:19:f7:ef:33:69:7c:28:3b:86:63:77:8f:c9:5a:41:d2:ae:
         a1:85:3f:14:a7:d7:08:89:e4:72:f4:bd:4c:cf:52:51:7e:44:
         12:72:27:f9:2d:3a:3d:f3:ab:39:bd:c7:6a:f0:78:f6:bb:98:
         59:df:b9:53:4b:c2:e5:6c:30:c8:1c:11:7a:12:c6:4a:c6:67:
         6e:37:7e:ed:41:a6:7b:04:c8:ab:93:4b:50:4c:5f:43:e8:83:
         e7:91:a9:57:6c:57:5a:d4:c0:59:8f:f7:eb:4e:35:49:b9:d1:
         e8:a4:0e:09:a1:01:38:15:55:f7:57:d1:a3:f6:67:51:1a:5b:
         d4:e5:2f:25:78:96:23:1a:0e:a8:6e:9d:15:7f:ce:f7:fb:d3:
         df:d5:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:20 2026 by rpki-client