Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
File:                     iUKJrUDufmJvXNgvzsVAbbkeHnE.mft (raw, json)
Hash identifier:          vxq+apn0ILsv9H3HJ9PIeXHnR8BQOrKl+vnTGRzKn0g=
Subject key identifier:   D7:42:A8:B7:B6:2D:D4:96:08:55:9A:63:7C:21:40:6E:0B:AA:ED:C6
Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
Certificate issuer:       /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
Manifest number:          0150
Signing time:             Wed 13 May 2026 05:15:17 +0000
Manifest this update:     Wed 13 May 2026 05:15:17 +0000
Manifest next update:     Wed 20 May 2026 05:15:17 +0000
Files and hashes:         1: iUKJrUDufmJvXNgvzsVAbbkeHnE.crl (hash: Z28yRL8p2g1sLZifw2WfnAE08Bs9+MFjp87ivS1UKnE=)
                          2: 9EC3DA0CABC311F0B5C5583DC4F9AE02.roa (hash: oQRja5kNE1xgzFCqir1541pX0ir8ZOqbUXiW5IO5uBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
                          rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
        Validity
            Not Before: May 13 05:15:17 2026 GMT
            Not After : May 20 05:15:17 2026 GMT
        Subject: CN=6a0408e5-6f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:95:2e:5b:a3:2f:7b:8c:ab:1b:f1:dc:02:
                    28:7a:2b:53:84:04:cb:90:a1:ec:7f:3f:79:b3:71:
                    c6:d8:9d:9c:73:33:9a:a9:56:7e:82:ce:7f:66:f5:
                    22:bd:7f:ed:f4:93:d7:c2:a4:a7:d0:10:eb:05:53:
                    06:a8:ab:46:9a:e4:18:4a:42:d6:f0:bd:08:62:6b:
                    eb:57:79:fb:ce:b9:01:03:12:86:44:b4:11:40:43:
                    39:32:40:be:21:a4:a9:c4:14:23:bf:17:9e:24:dc:
                    35:4b:1d:a4:8d:ed:6e:4b:89:37:60:be:79:1a:ac:
                    bf:9e:e9:b3:54:73:35:b7:1b:54:e9:88:bc:01:93:
                    e3:73:cc:b5:0d:58:cc:6b:d5:a0:f1:56:97:b5:16:
                    67:3d:b5:fc:be:44:ff:b7:44:76:ae:a7:58:4e:c7:
                    84:ee:6e:41:a4:00:3a:be:b8:67:c1:cc:28:20:14:
                    7b:af:7c:a8:10:b7:2a:6b:09:cf:1b:06:1d:f1:63:
                    c2:9a:af:8d:77:e1:92:1a:11:4a:11:4d:0d:7f:c7:
                    66:53:97:4b:a9:81:ae:0e:9e:3f:77:b7:eb:44:2c:
                    ec:cd:58:80:bb:ce:69:a1:dd:ea:87:5e:e1:a8:6f:
                    6f:8e:e8:e2:71:58:e9:85:56:35:c7:f3:ec:91:87:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:42:A8:B7:B6:2D:D4:96:08:55:9A:63:7C:21:40:6E:0B:AA:ED:C6
            X509v3 Authority Key Identifier:
                keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e9:a8:74:91:88:ef:b9:a8:d4:ae:d9:92:ad:01:bd:72:e2:
         c1:02:f2:46:71:82:a2:c8:ac:24:cf:34:07:1b:a9:0f:d2:02:
         4f:2e:6d:ae:23:96:27:51:31:c0:d0:61:31:b7:3d:ac:50:93:
         11:71:2a:49:50:96:7b:c8:48:a5:0e:bc:38:43:55:1e:c2:20:
         d9:a4:69:8d:00:c3:98:21:85:7f:dc:11:06:1a:2a:8f:03:3a:
         13:16:28:bd:eb:f7:52:57:07:35:82:00:75:33:35:a0:ae:94:
         0c:90:ad:19:d2:a1:7d:57:c4:21:5e:92:44:8b:21:a4:e1:fb:
         fa:e9:95:43:be:71:58:97:84:1f:53:9e:56:f1:11:2c:c3:f0:
         8b:36:96:3e:23:e0:00:a6:09:e1:e2:c7:d0:9f:01:ff:e5:14:
         86:a8:65:aa:26:5a:79:91:68:15:21:87:6f:64:e1:e9:d1:c8:
         07:ee:c3:b0:71:21:7d:0f:d5:7b:37:e3:80:c4:ea:90:a5:2d:
         45:d4:37:6d:0c:6a:1b:63:95:26:96:de:e8:9b:16:16:9f:2f:
         d7:51:11:33:c4:08:36:d9:e1:48:f3:bd:0a:0e:e4:3e:ba:ea:
         7b:c0:de:f2:4c:17:e9:d1:f4:42:8a:a3:e8:81:6a:54:d0:77:
         0e:74:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:46 2026 by rpki-client