Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
File:                     zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json)
Hash identifier:          gNqz0yErx0egm26yvbIG4VJonJhqukh9BKgA7jKKQjM=
Subject key identifier:   46:EF:BE:0A:1B:65:95:67:C1:0F:29:4A:7A:9A:7C:CA:43:85:79:18
Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
Certificate issuer:       /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
Manifest number:          0271
Signing time:             Wed 13 May 2026 02:06:18 +0000
Manifest this update:     Wed 13 May 2026 02:06:18 +0000
Manifest next update:     Wed 20 May 2026 02:06:18 +0000
Files and hashes:         1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: FPFwm0q9EX0XisBXZQwffv+3JKO2DemYLl9ptf1K1LU=)
                          2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: LRMRyi0qfmTYKdZdAepsqYbHljuHFX08sxSWDEzvATE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C12, serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
        Validity
            Not Before: May 13 02:06:18 2026 GMT
            Not After : May 20 02:06:18 2026 GMT
        Subject: CN=6a03dc9a-2fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:60:26:89:40:c5:73:72:9c:74:dd:cd:b6:
                    cf:bc:dd:cf:7b:79:7e:fd:49:e6:7c:d4:7f:ab:df:
                    29:5b:62:e0:38:43:5e:2e:c0:a6:1a:7c:3c:66:7d:
                    6c:6c:87:2e:f0:2f:22:89:ef:8e:17:6f:1c:76:ee:
                    b7:0e:a7:3e:a7:c1:42:aa:db:97:8c:7a:ad:9b:dc:
                    e3:69:c0:0d:c9:c4:e2:24:0b:1a:20:85:ce:11:34:
                    ce:42:c1:20:5e:a5:e1:b6:3c:b5:26:a6:66:ca:b3:
                    f8:dd:60:b1:2f:2b:e5:4a:e6:0a:e3:15:ab:43:a8:
                    77:f0:a7:c1:31:d0:e7:48:e1:95:3c:11:55:84:37:
                    37:7b:ac:c6:ab:3a:32:b8:11:5f:14:df:ae:92:79:
                    60:26:ad:b8:92:e7:1f:96:bf:9a:53:d0:6f:c3:bd:
                    25:58:10:90:b6:2a:66:4e:13:51:2e:1a:5c:2e:0d:
                    6d:d9:36:cd:69:3c:4c:9a:d3:9d:d8:0f:40:2f:e6:
                    d4:ea:d6:cd:4d:7d:a3:3c:f6:11:f2:5c:47:94:11:
                    7d:34:0a:f6:95:b2:1e:c1:07:03:d3:df:54:42:c3:
                    8d:84:6e:51:e5:7e:8a:ef:90:ca:48:74:2e:ce:ad:
                    db:1a:a2:ee:7c:2b:23:cc:1e:90:14:f0:d6:b6:b3:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EF:BE:0A:1B:65:95:67:C1:0F:29:4A:7A:9A:7C:CA:43:85:79:18
            X509v3 Authority Key Identifier:
                keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:65:20:54:72:d9:18:c5:df:8d:23:be:1d:22:19:8b:a5:c2:
         f4:23:c5:53:ca:e0:98:84:3e:d8:3b:28:4d:eb:fe:25:d5:c3:
         4a:60:c3:c9:02:e5:02:b9:ee:0a:f5:c8:c5:77:40:77:3f:2a:
         18:3d:09:82:c5:c8:e0:67:d8:c9:ca:6c:d1:e5:67:66:b8:f7:
         8f:1b:27:9a:2a:4c:d2:a2:04:bf:24:a3:31:ad:fa:a6:b8:82:
         41:49:d6:5a:1a:11:8a:53:8f:8d:60:74:6f:e6:88:5d:d8:73:
         57:58:44:55:c4:06:a8:2b:00:86:d4:76:98:24:74:d8:4f:91:
         c8:b5:73:a0:00:55:71:88:fd:08:8a:f6:7a:cc:40:3c:48:0e:
         0a:2c:2a:51:15:c3:30:32:9a:2c:d9:a1:a2:02:ea:95:36:39:
         9a:da:c1:7f:7b:3a:92:04:08:fe:5f:ec:6f:79:2d:15:e1:76:
         d1:62:4b:ec:c9:f8:74:59:1a:c0:dd:f6:27:cb:b0:8b:f2:94:
         c0:99:9d:c7:d4:1a:f8:8d:ee:29:fb:98:4f:83:4a:d9:d2:c3:
         5b:69:a5:03:7e:5b:11:06:2d:4a:2e:da:3f:23:20:f5:76:4c:
         0e:aa:64:3d:e8:84:78:a2:4b:c0:34:af:92:59:69:ab:d0:86:
         e9:65:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:18 2026 by rpki-client