Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File:                     nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier:          NWKcsXFr+jc6eqdwPZ5fYl0b+0SquMtRYGbjKT4FpZg=
Subject key identifier:   50:04:1E:6A:2B:A9:80:AB:37:81:A2:69:1A:9A:69:45:A2:E4:87:2A
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number:          CC
Signing time:             Mon 11 May 2026 06:57:45 +0000
Manifest this update:     Mon 11 May 2026 06:57:44 +0000
Manifest next update:     Mon 18 May 2026 06:57:44 +0000
Files and hashes:         1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: Bsy1JsNX8hE1dzeyRpirKn30lyBRaI5ZCEQizOx//VI=)
                          2: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: nnqJ8G7VjssukS+0G1GxoQBw1mxaaAbrJ8au5Om0Jj4=)
                          3: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: PGiX+wx067z9cwIv48GLAtfIhUtJveteXDe5HO2XbGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: May 11 06:57:44 2026 GMT
            Not After : May 18 06:57:44 2026 GMT
        Subject: CN=6a017de9-fb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:41:67:ad:69:7f:7d:5b:0e:58:85:53:3c:50:
                    62:0c:92:db:0b:66:8d:d7:b0:ac:e4:e5:25:17:1b:
                    92:7e:1a:21:36:94:3b:64:15:11:0a:73:56:cc:46:
                    d3:42:ed:e3:4e:2f:ab:c4:fc:5c:3a:70:b8:3e:81:
                    ae:2c:61:87:90:b9:a1:e0:d8:bb:2b:b2:42:22:e6:
                    96:5a:1d:2d:1d:36:fb:ed:28:60:26:e4:15:9e:1d:
                    25:ce:13:b0:bb:b8:cd:cf:dc:20:de:6d:c1:f6:eb:
                    78:77:52:ff:90:63:05:de:83:c9:95:4e:9e:f8:68:
                    cc:87:84:79:d8:2b:2c:da:60:c8:44:b3:ed:b3:39:
                    8b:db:a8:ab:d2:d8:b6:d3:5f:6d:fb:b1:9d:cd:0a:
                    4a:a0:ff:18:de:4a:50:4d:4b:60:eb:b9:43:36:a6:
                    5b:f1:a7:e6:78:06:fa:95:d9:a1:64:b6:82:4c:51:
                    63:fa:c4:d0:fb:ff:3d:0d:3b:2b:68:a6:51:1e:aa:
                    ba:fe:4f:55:9f:5a:e8:5a:42:62:87:ee:97:c3:a2:
                    c7:fe:e9:6a:a7:6b:69:5b:50:8c:41:f2:fd:7c:01:
                    f2:17:c1:ec:88:c2:ab:4a:0d:3b:31:4c:1f:4a:1b:
                    a8:9f:ca:54:ec:ed:9d:be:f6:7d:9b:e1:b3:c2:06:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:04:1E:6A:2B:A9:80:AB:37:81:A2:69:1A:9A:69:45:A2:E4:87:2A
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0f:23:a7:54:f5:29:88:db:fb:e0:fb:27:6c:ae:d2:7c:51:
         99:85:5e:78:82:40:e3:bd:55:0e:78:d5:9a:c5:92:ef:1c:9f:
         8c:38:f5:c7:0f:6f:3a:10:af:a3:52:1a:74:99:08:d3:43:66:
         2a:04:eb:54:e8:05:23:92:47:45:37:f2:07:71:e2:89:7f:6a:
         b3:92:48:21:2d:f2:38:8f:81:42:ae:2f:08:59:ed:d5:f1:fb:
         b2:e0:4e:36:18:08:86:b4:0e:66:89:bf:0e:ba:53:c3:18:44:
         77:9b:39:8c:20:7c:54:d0:4b:c1:f1:0c:e5:8a:85:a1:b8:94:
         16:67:fc:7f:d8:cf:e4:79:a7:36:2e:c2:64:b3:aa:67:fc:c5:
         73:21:b0:ba:cb:9f:e9:8e:2b:40:08:08:9e:90:8e:9d:84:f7:
         33:b8:e1:bb:48:61:e6:ea:0f:27:da:2e:17:df:13:f3:0e:32:
         ca:ed:d9:53:e7:b6:69:bb:a3:ed:5a:74:35:44:5a:3b:72:fb:
         b7:29:22:3d:3d:a6:4f:a4:05:28:e8:6f:9b:e5:09:9f:76:6f:
         ee:e1:4f:d4:ac:4e:15:b9:b7:97:81:1b:81:ee:0c:c6:05:58:
         83:97:8e:7a:95:e2:38:0d:ba:34:84:44:37:d4:78:13:ee:92:
         e1:0f:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:04 2026 by rpki-client