Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File:                     R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier:          xCqQmiiDkDDOJMKVEXQ7lyN18eQrxYU3ApNqJjBPAwA=
Subject key identifier:   D2:E3:3F:2D:86:E9:3D:CF:3C:31:FB:42:CE:BE:90:4F:16:71:8B:48
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer:       /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial:       0333
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number:          032B
Signing time:             Wed 13 May 2026 01:13:28 +0000
Manifest this update:     Wed 13 May 2026 01:13:27 +0000
Manifest next update:     Wed 20 May 2026 01:13:27 +0000
Files and hashes:         1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: qdWlMIEctE0ep+Mb1K7rJB7EAMiRyucrai6Jofab3iA=)
                          2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: QgXgIU4iewVv/gvtM7nRh4tylfGnpHiAGu1ZYVRzjpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
        Validity
            Not Before: May 13 01:13:27 2026 GMT
            Not After : May 20 01:13:27 2026 GMT
        Subject: CN=6a03d038-a24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:60:c8:e9:db:df:48:ab:c6:2f:a9:cc:20:
                    9a:0f:80:3c:c2:63:8b:c3:de:ca:89:e1:dd:33:a0:
                    16:b4:a9:cc:5d:ca:cf:38:b6:d7:b6:af:de:02:94:
                    85:52:9c:90:d3:b8:85:f3:83:30:87:0a:48:41:d2:
                    81:3f:1c:99:11:20:df:5c:84:10:76:02:b5:dc:f1:
                    ed:b3:4e:01:cf:48:f9:d1:8d:30:f6:39:47:d0:2c:
                    04:a2:6b:f4:30:5d:88:4c:1f:19:08:c9:2c:3f:9b:
                    67:f9:6c:3c:20:08:17:22:7d:3f:92:6e:d4:d6:ca:
                    40:fa:01:c7:36:ce:d1:9a:2c:39:f2:f4:4a:a7:cc:
                    89:b3:c2:13:b5:ae:d3:88:68:a2:fd:88:48:f0:32:
                    90:b2:5c:e2:57:b5:ce:60:68:c9:ae:05:8d:9e:20:
                    a7:39:c3:05:3c:4d:af:f8:b5:a5:06:55:12:25:19:
                    16:10:21:73:c2:b2:9e:47:3f:e8:9f:26:6d:30:b5:
                    d2:b7:6d:9a:c6:47:d8:3a:df:25:5c:4d:65:ac:52:
                    ee:69:22:68:d6:53:e0:31:b2:e8:c3:bd:0d:fa:ce:
                    9b:64:b3:1c:a8:a0:a5:b4:13:1a:89:0d:eb:4b:89:
                    6b:9c:05:f8:f5:4f:72:f6:29:d8:fc:2b:85:85:50:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E3:3F:2D:86:E9:3D:CF:3C:31:FB:42:CE:BE:90:4F:16:71:8B:48
            X509v3 Authority Key Identifier:
                keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:cb:38:90:c1:8a:1c:84:90:81:eb:b5:0a:1d:b3:39:a7:53:
         04:5e:f8:a7:45:99:84:b0:19:e6:07:7a:be:dd:d7:35:de:1f:
         6c:09:ed:dc:19:1c:26:19:0b:67:4e:c9:d0:18:9f:55:c9:71:
         5a:26:8f:9a:b6:ce:79:6b:1e:4a:c2:0f:fc:a0:ac:fb:09:9e:
         47:65:b9:4c:bd:09:f2:6a:ab:75:80:77:45:9e:e2:d0:d6:0e:
         e4:16:3e:f1:21:97:71:b2:40:ff:39:d5:1a:02:f1:c1:d4:eb:
         bb:2a:7b:d3:b4:a6:b4:ee:44:b7:db:63:00:5e:ff:79:03:d7:
         8f:f3:a4:5e:6f:80:5a:d9:1b:45:ed:ea:27:b3:19:cb:e1:46:
         a7:a9:56:9b:bc:a0:c1:91:fc:89:a2:33:69:f3:d0:24:ba:0d:
         6a:de:f4:3f:6c:9c:b8:34:e4:37:b5:5c:b6:5b:d3:a6:7c:56:
         ff:2a:9e:80:5d:42:b9:5a:3e:0d:a7:47:9f:5c:9b:c6:a3:e8:
         96:7f:90:c1:c0:bf:be:4f:b7:d0:66:e8:03:e2:49:c6:1e:ff:
         96:11:2d:ad:84:31:2a:ea:e1:e0:81:54:76:b7:fd:32:59:ff:
         7e:9c:31:c6:5b:33:01:07:18:22:f3:8f:3d:65:7c:b9:0c:d0:
         66:15:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:57 2026 by rpki-client