Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File:                     cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier:          mYBYVBVfy4ZURYuIAE3PaiavPqp+ziOv0n6atVBIqzE=
Subject key identifier:   28:0A:A9:D8:84:A1:AE:E4:90:B9:0A:AA:2D:08:9D:3C:55:A4:94:04
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer:       /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number:          01DF
Signing time:             Wed 13 May 2026 03:33:48 +0000
Manifest this update:     Wed 13 May 2026 03:33:47 +0000
Manifest next update:     Wed 20 May 2026 03:33:47 +0000
Files and hashes:         1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: TeJCrpRU9Hx6fPup0xvAC6Xp55YI80W66rd3ZdyCEcY=)
                          2: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
                          3: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
                          rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
        Validity
            Not Before: May 13 03:33:47 2026 GMT
            Not After : May 20 03:33:47 2026 GMT
        Subject: CN=6a03f11c-1ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:35:9d:4d:87:f1:d7:b7:4f:cb:44:ba:c9:
                    a6:9b:c3:d7:67:9e:6d:c6:88:8e:78:b5:27:4d:e2:
                    bc:f2:8b:e8:e2:a4:f8:d7:33:3d:e2:bf:66:a0:b2:
                    bb:c3:b3:5b:1a:f9:86:02:93:ae:bf:06:87:5b:ab:
                    1b:1f:06:38:15:04:ac:e8:67:4d:f2:50:cb:70:2f:
                    92:ca:40:7f:a4:f6:bd:e4:93:fd:d0:50:ae:16:b5:
                    c2:12:1d:19:45:76:02:15:3f:38:a9:0c:c9:a0:05:
                    2b:d9:fe:2e:0f:9c:0e:a1:5b:54:77:0a:35:c1:34:
                    33:ca:c9:31:a9:da:3e:96:62:a7:39:ea:f8:03:b4:
                    e5:be:e8:55:13:70:0a:2e:66:28:34:cf:bf:4a:13:
                    ef:fb:19:e1:60:4c:87:bf:03:09:4a:c0:d4:5d:9e:
                    99:34:91:2f:5b:63:14:55:69:e1:b7:35:df:c4:3e:
                    ef:bb:87:02:82:70:d6:71:49:99:12:39:a3:f9:f9:
                    5e:29:50:b0:1d:d8:fc:45:d7:c3:2b:20:cf:77:c0:
                    f0:b1:eb:aa:26:f8:3a:b9:f7:75:ca:8c:b4:f7:11:
                    df:02:c2:8b:b9:c2:d2:4b:ae:7a:f8:67:3d:2b:21:
                    74:78:0d:1c:95:ae:53:bd:cb:58:64:06:30:34:c2:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0A:A9:D8:84:A1:AE:E4:90:B9:0A:AA:2D:08:9D:3C:55:A4:94:04
            X509v3 Authority Key Identifier:
                keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:4e:f0:ed:ce:fe:6e:9b:4c:f9:20:20:3d:5d:68:87:bb:
         33:e9:0b:e6:76:64:2c:6e:b3:43:48:c3:7f:42:2d:0e:b6:7f:
         4d:01:24:91:c6:01:48:0c:07:0e:32:35:a6:b9:e8:57:ba:53:
         fa:0d:4c:41:3d:2f:70:2f:7a:f8:71:df:b2:35:82:23:f9:78:
         77:36:78:44:e7:ab:72:54:46:33:4d:07:0e:78:a9:e2:ee:1e:
         55:fd:c8:0e:c8:cf:cb:75:3f:dc:85:db:3f:0a:53:ca:97:cb:
         0d:ed:16:5d:a8:22:08:62:2f:81:5d:10:49:e6:9c:cc:49:58:
         97:ff:52:00:6d:45:27:2a:65:9b:f2:be:8e:32:fc:de:c4:b1:
         67:6b:42:d7:0e:ea:16:16:5a:a7:40:3c:db:6e:f5:c8:46:15:
         50:4a:21:16:23:ba:a0:d2:8a:71:a6:48:c8:82:5b:1e:6a:9b:
         da:ea:45:46:38:76:53:e4:e1:f7:3d:46:fa:2c:31:a3:15:09:
         46:e8:9a:6e:bd:cd:f2:43:1f:27:ab:08:8a:32:88:ca:92:58:
         24:f6:71:fc:8e:fb:92:59:c1:ca:d8:a4:a2:78:32:25:a1:67:
         9f:50:4c:1b:5a:e4:03:ef:66:4b:78:40:8d:de:15:6a:6e:79:
         01:d6:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:40:33 2026 by rpki-client