Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File:                     U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier:          H7yn5vNiM07xsk5pq1/dUpmusN3BWJfkZNq8UBKZ5t0=
Subject key identifier:   7C:0C:F7:1E:F9:9F:34:C0:3B:D3:E0:57:CD:29:64:C7:A0:78:3A:66
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer:       /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial:       05FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number:          05ED
Signing time:             Tue 12 May 2026 23:02:21 +0000
Manifest this update:     Tue 12 May 2026 23:02:21 +0000
Manifest next update:     Tue 19 May 2026 23:02:21 +0000
Files and hashes:         1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: A6RHQmtCfU8LVxAXbMA+lBNSxMGHwLC+ZhD2Qj7SzsQ=)
                          2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: 3Myni48C8MqbnkMOucThNgI8mHbpIgv3RcenlXVut6k=)
                          3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: n7blhtr8CeB1GQILH2tbTNGZrE0mtz4/kPdd9dFJxPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
        Validity
            Not Before: May 12 23:02:21 2026 GMT
            Not After : May 19 23:02:21 2026 GMT
        Subject: CN=6a03b17d-fd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:7e:6a:aa:6a:3d:57:2c:a2:ed:77:5a:81:
                    c2:89:59:b4:b6:b8:d2:67:cc:cc:22:fa:74:8d:a0:
                    32:56:14:70:69:e4:72:b2:67:84:52:e3:79:2a:d1:
                    10:79:62:cf:42:3b:32:3a:e8:ca:72:86:68:b9:5a:
                    2a:b8:8d:82:e9:3e:58:18:13:e2:75:c4:7b:23:c3:
                    ce:1f:c2:13:08:f4:fb:e6:fc:a4:5f:a0:71:52:a3:
                    9d:bd:04:18:17:6f:87:4d:a9:74:24:ba:f4:35:cd:
                    1c:e7:b0:39:0c:f8:58:76:61:d5:52:97:03:80:2a:
                    7f:30:9b:37:a3:e8:27:e9:22:3f:33:1b:e6:42:17:
                    41:5b:25:c6:ff:8f:fc:09:1a:fc:78:a2:5e:ca:66:
                    41:71:b6:c5:21:0f:de:db:aa:1f:91:e4:a5:f6:11:
                    e1:ac:7d:ba:26:18:d4:b8:a0:14:61:fd:46:f9:09:
                    8a:9d:de:63:46:fb:ae:3c:51:7d:65:10:60:85:48:
                    a1:4f:82:f6:21:6b:2b:e2:b7:01:f3:7e:a8:5c:64:
                    8e:78:84:9d:e5:d9:16:ff:5c:1e:3b:2f:66:0a:e1:
                    3a:e9:dd:6d:bf:40:3a:17:24:47:5b:97:d5:14:f9:
                    16:d5:94:26:5d:41:ed:77:6c:f0:97:11:70:3c:4b:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0C:F7:1E:F9:9F:34:C0:3B:D3:E0:57:CD:29:64:C7:A0:78:3A:66
            X509v3 Authority Key Identifier:
                keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:de:34:72:56:c4:c2:a1:9e:ba:e9:ab:ea:63:95:3a:40:28:
         d0:58:17:15:ac:6a:08:47:49:c4:76:88:62:48:2d:9a:20:9b:
         cb:3d:e9:26:66:2b:18:8e:e1:2a:77:ef:98:d8:fe:aa:f4:b0:
         da:16:57:16:2f:0e:ec:2f:5a:2a:c0:23:75:f2:de:3f:72:54:
         63:3e:8a:22:17:c2:45:ce:64:2b:d3:9a:e2:16:f9:61:2a:2b:
         34:72:4b:3b:59:1b:fb:44:ee:93:f9:91:98:32:a3:e5:d4:c7:
         c1:3c:16:da:2f:35:83:83:d0:a2:53:d4:63:6f:a5:ff:52:e0:
         97:09:80:a4:3a:a9:7e:14:6a:6d:04:ff:91:9d:9f:1a:ed:4c:
         6a:d0:d4:4b:52:88:2e:60:65:53:a4:01:a0:b1:bd:58:29:73:
         f4:87:dc:cc:49:e1:5c:be:96:44:13:57:30:86:32:98:e6:d3:
         d6:32:76:d6:9a:37:48:4d:20:a0:e5:77:62:ab:54:d6:d7:f7:
         1a:2f:fa:f7:21:64:44:34:e9:eb:1e:a6:e8:28:47:09:38:1f:
         94:a1:55:e5:12:9f:8b:c2:ec:de:67:0f:aa:6a:12:83:11:28:
         7d:d7:bc:98:9a:4c:17:51:f7:09:f7:fb:e8:b1:f4:7a:ef:ca:
         b1:1e:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:21 2026 by rpki-client