Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File:                     cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier:          0X8sjWlUMh1WiHURUluic6C1ixF+TyAXxWGOaGW/Vhc=
Subject key identifier:   5E:36:FB:41:9C:2E:BE:A7:8B:9C:DC:CE:43:51:CD:BD:1B:5D:7D:26
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer:       /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number:          011C
Signing time:             Mon 11 May 2026 05:54:57 +0000
Manifest this update:     Mon 11 May 2026 05:54:56 +0000
Manifest next update:     Mon 18 May 2026 05:54:56 +0000
Files and hashes:         1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: Q5nYD+0okuRkzwLcH4UakCfUwWUC+cn64kb35YjrFoU=)
                          2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: LUj3nw3I/55jfghfKNbIADhEH+zObxvm94ONzxqJb9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
        Validity
            Not Before: May 11 05:54:56 2026 GMT
            Not After : May 18 05:54:56 2026 GMT
        Subject: CN=6a016f31-996b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:a6:a6:02:f5:04:b7:34:4c:27:76:0b:4b:
                    92:ca:4f:c9:3c:51:1f:e9:b0:ab:0a:3f:2d:97:f7:
                    7e:11:c3:c7:aa:c2:23:4f:b0:f8:1a:1a:90:aa:2a:
                    da:50:12:80:cd:09:42:aa:77:8f:dd:63:62:96:45:
                    4f:f6:ca:54:77:b3:0b:ec:71:4f:ef:0a:49:75:8b:
                    73:f7:23:83:41:3f:d7:90:72:a6:a0:15:c0:2a:a6:
                    24:fa:b2:6a:18:6f:dd:d0:2e:69:a2:02:42:e7:cd:
                    9a:55:f4:89:eb:81:79:2e:eb:2b:ca:56:7d:1b:cd:
                    64:5c:bc:01:a2:e3:76:44:4a:16:af:d2:c8:fb:b2:
                    ef:59:c7:2a:d5:77:53:d4:6d:5b:ee:18:d8:11:19:
                    11:a2:bf:0e:60:f9:9c:e7:59:0b:a3:79:8d:94:74:
                    4e:68:1a:93:88:5d:8f:bd:ce:76:05:58:26:9a:1a:
                    56:b6:9d:8a:c0:11:16:8a:8a:c5:60:63:16:59:79:
                    51:a4:31:e8:22:47:da:9d:35:a0:44:89:fa:b6:6d:
                    1e:2d:dc:d2:bc:7b:89:20:04:c9:a2:ae:6b:f4:42:
                    81:6e:88:34:54:89:7e:78:9b:96:a6:8c:1d:21:c8:
                    ba:60:36:ce:af:a2:2b:a5:26:f2:2b:f7:c4:b8:c4:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:36:FB:41:9C:2E:BE:A7:8B:9C:DC:CE:43:51:CD:BD:1B:5D:7D:26
            X509v3 Authority Key Identifier:
                keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:29:8b:bf:e9:6b:72:d7:8e:21:05:c9:a9:47:02:25:32:
         0c:c4:77:25:23:19:f6:e3:55:91:43:f5:ab:b6:5d:1a:50:b9:
         b0:40:d7:c3:ab:88:7f:14:24:81:b8:52:10:e9:0c:06:35:53:
         f1:3f:94:2e:10:01:62:58:11:d2:e0:19:cd:ce:81:d8:ef:90:
         42:ba:03:7b:41:45:ec:04:dc:b3:48:76:8e:23:c9:3a:3b:bb:
         ef:c4:81:2b:3e:b3:e2:dc:78:f8:ef:2b:17:8f:63:4b:0c:aa:
         96:3c:af:a0:c6:76:cd:32:7c:92:e0:82:56:57:53:33:81:a1:
         8e:7b:af:85:ba:e5:ca:96:8a:bf:64:50:37:1b:8a:94:4f:21:
         7e:7d:6b:44:f6:3f:f9:e4:46:ec:ea:43:40:d6:fa:03:06:02:
         34:81:15:18:3c:0e:ed:31:60:aa:fb:13:e4:60:bc:40:ff:4f:
         f9:50:bf:df:e4:fb:92:fe:18:0e:d1:a2:45:09:0d:12:db:c3:
         f6:ab:24:5a:42:fe:cd:af:0c:f9:5b:c6:c9:8b:f3:60:7c:c3:
         77:a6:76:c0:cf:3b:ba:3f:27:fd:59:59:2a:a3:4d:5e:02:44:
         f0:5b:b0:de:e9:c5:8b:a0:48:2d:d4:3b:24:6d:0a:ca:a5:fe:
         2b:41:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:53 2026 by rpki-client