Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File:                     jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier:          FzTFwB2I0XCGpNmbnZm+isndo52B9OEKL+LLmZaO+bA=
Subject key identifier:   7D:9D:55:01:1C:72:6A:B8:15:4B:CD:AB:EE:D5:98:E7:02:32:87:74
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer:       /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial:       0AF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number:          0AE3
Signing time:             Tue 12 May 2026 19:27:59 +0000
Manifest this update:     Tue 12 May 2026 19:27:58 +0000
Manifest next update:     Tue 19 May 2026 19:27:58 +0000
Files and hashes:         1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: t92PUZ6o65/MlE71n4hjy2nQwA8rWFxOcCPRW13ifOs=)
                          2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: /3arRZXVLdrfm4u9cutgJAx+ZHiHzLIvVvAU7Zs/f38=)
                          3: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2801 (0xaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
        Validity
            Not Before: May 12 19:27:58 2026 GMT
            Not After : May 19 19:27:58 2026 GMT
        Subject: CN=6a037f3f-1efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:03:56:c0:c3:f9:5f:04:4a:ef:1f:25:ed:
                    04:b2:e7:af:51:f4:c4:92:ce:28:ee:ba:89:6e:b9:
                    2f:2b:de:2d:80:cc:7f:22:50:2d:e2:04:e4:68:bf:
                    55:88:1c:dd:04:b2:14:ae:51:ef:ce:9d:10:93:7d:
                    79:b3:29:1b:d5:f7:5c:0d:70:45:5f:b7:dd:ff:a2:
                    2c:25:ad:97:2e:60:ee:68:55:60:b5:e9:b9:46:b6:
                    8b:60:58:2c:2d:e7:c8:94:a1:6e:f7:16:f0:24:46:
                    8e:4b:9e:8c:fe:82:89:9a:b3:15:f6:b0:25:24:37:
                    26:5e:96:fe:81:96:b1:6b:c6:b9:54:cc:09:84:2d:
                    13:d1:18:49:26:4e:39:8c:ce:62:5e:c4:10:de:f5:
                    de:69:f2:eb:1f:70:77:12:f0:bf:d3:67:a2:bf:b8:
                    ba:8a:69:05:32:84:e4:ce:59:b2:fc:e0:1f:88:af:
                    1b:cb:b8:b0:c9:90:fb:ad:31:0c:fb:b8:40:64:e5:
                    0e:50:c0:65:86:dc:06:44:72:b5:f6:e7:99:07:3f:
                    0f:07:80:95:d2:67:51:8b:02:42:a6:49:19:90:74:
                    52:36:4e:d7:9f:00:13:b2:1e:74:73:06:26:14:56:
                    a5:ba:e0:60:4e:48:ef:4a:0f:1f:f0:f9:45:49:f7:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9D:55:01:1C:72:6A:B8:15:4B:CD:AB:EE:D5:98:E7:02:32:87:74
            X509v3 Authority Key Identifier:
                keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:b9:aa:39:03:df:e7:d7:0a:88:90:f7:92:52:b9:11:a6:
         74:df:cc:6f:5c:c8:ff:7d:89:a2:46:cd:be:f5:41:34:de:e5:
         8a:a0:a8:73:1f:4d:1f:86:2a:1a:fa:84:aa:f6:12:7b:e6:99:
         6d:37:20:13:2f:13:b6:08:19:8a:ff:b1:68:96:7e:e6:f4:1a:
         25:26:26:e2:87:16:63:e9:db:1b:6a:f7:ce:14:0e:ed:2d:cd:
         ea:dd:6f:3d:bc:13:25:d4:a4:e1:41:5e:a5:dc:e2:ef:6c:6d:
         1b:51:58:a8:1e:68:ce:01:02:f9:ff:ba:69:40:b7:f7:80:e8:
         9e:ba:93:4b:c4:fb:ee:d1:62:0a:9d:c8:c9:5a:e0:30:22:93:
         0f:72:c7:b1:5f:36:02:1f:a2:2e:b8:45:58:40:ef:ee:89:1f:
         35:12:04:54:8b:3c:b9:96:ce:a5:b7:60:4a:37:6e:5c:ad:49:
         a9:35:06:ed:c4:11:ac:92:25:26:c2:cf:e2:82:af:53:07:f3:
         4c:fe:ea:17:e1:d3:c3:cc:8a:7e:86:01:d5:0d:5a:88:0b:a4:
         18:0c:33:88:4c:63:d7:58:69:cf:ba:ec:72:c2:01:ca:94:d1:
         33:d0:90:4a:50:31:9c:f1:87:30:66:08:2f:26:55:40:b2:8a:
         29:41:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:35 2026 by rpki-client