Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File:                     25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier:          YU56wR9McHIIwWkDV6jJNIsyFwzRRwKpJb7GbzDSgEs=
Subject key identifier:   47:EB:3D:E8:9E:3A:56:EC:F5:62:DD:C3:2D:66:59:C2:E7:B4:C8:93
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer:       /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial:       1DCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number:          1DBE
Signing time:             Tue 12 May 2026 16:06:34 +0000
Manifest this update:     Tue 12 May 2026 16:06:34 +0000
Manifest next update:     Tue 19 May 2026 16:06:34 +0000
Files and hashes:         1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: 6I/kHYyWj2g6FzlN5w/HmxJbfm1uN4fU4/+r+fXQ9GQ=)
                          2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
                          rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7628 (0x1dcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
        Validity
            Not Before: May 12 16:06:34 2026 GMT
            Not After : May 19 16:06:34 2026 GMT
        Subject: CN=6a03500a-70df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:f4:bc:7d:8e:27:70:d8:79:14:59:e7:1f:
                    fa:e5:08:1a:5d:25:79:a6:d8:91:15:fc:52:cc:75:
                    39:53:3f:8b:f2:a9:31:bf:f8:bc:75:b9:4f:4b:a7:
                    e9:1b:e1:85:d4:bf:7c:cf:29:e0:bf:76:51:fc:cf:
                    03:00:31:9d:8c:10:70:d8:81:f7:f3:56:db:29:d7:
                    45:8f:01:42:39:24:eb:4f:d1:63:d4:08:e3:4b:ef:
                    3a:a2:f5:97:b4:4d:33:3f:48:f0:63:66:e9:5b:c7:
                    3f:d0:1b:0d:26:4a:b6:6b:15:7e:e9:d2:c4:6a:eb:
                    59:33:5c:47:d8:0f:f9:8c:fd:6d:df:56:70:93:06:
                    28:0b:65:3c:06:d2:3f:90:27:62:cc:27:35:62:d1:
                    0f:11:fa:95:27:4c:df:03:27:f0:0a:5a:b2:4d:90:
                    4d:7a:99:51:bc:8b:aa:91:d5:72:07:ca:e3:67:c4:
                    91:58:49:bc:2e:31:d0:fc:81:27:96:a8:bc:84:1f:
                    07:29:61:08:19:fa:e4:40:2a:c6:ec:df:1e:4a:f3:
                    31:f4:50:e5:ed:0a:47:5c:f2:9e:8c:9a:e7:4b:4f:
                    60:b0:06:21:b0:0d:dd:8e:06:f9:95:47:3d:8f:af:
                    c7:b3:c0:89:36:ce:08:a8:0a:40:08:ce:86:b2:55:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EB:3D:E8:9E:3A:56:EC:F5:62:DD:C3:2D:66:59:C2:E7:B4:C8:93
            X509v3 Authority Key Identifier:
                keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5d:f4:7a:2c:b2:75:42:61:df:6a:bd:5f:23:61:2a:40:01:
         cd:c5:f3:29:4d:d8:76:c8:d2:c3:5e:fd:d9:f7:de:03:a0:14:
         02:3c:5e:b3:c7:72:49:d1:bc:54:73:44:5b:3c:d5:bb:91:de:
         22:cf:7a:28:ce:47:92:e9:c2:4f:8f:4d:5f:40:0c:5e:14:8a:
         bc:81:30:06:6d:35:ce:00:7c:6a:2d:dc:0d:87:9b:ac:2d:c2:
         b9:ee:7c:8a:76:de:53:a5:b9:ec:9f:c7:17:48:f5:f1:2f:08:
         9b:3e:57:c9:66:a1:06:67:1e:0a:d8:cb:a7:d8:04:fe:6a:4a:
         ce:1a:ea:99:22:72:90:79:2c:a5:a7:77:be:cc:50:98:96:1a:
         ab:f2:ef:52:af:bc:15:b0:9c:58:0b:a9:ba:4d:db:98:f8:c9:
         e1:38:cb:c8:24:68:14:d2:65:1d:e5:f2:18:cd:bf:3e:2e:cb:
         e7:7d:07:de:29:77:1a:fa:4f:71:46:3a:8e:70:5f:b2:bd:d4:
         22:3d:3f:82:99:6f:0c:f5:3e:33:72:7d:15:1a:6e:e3:83:3d:
         df:6f:11:75:9b:ef:db:a1:9e:88:89:b4:c9:72:c3:cb:ad:48:
         a9:7c:22:5f:14:de:b8:a6:ae:ce:1f:51:eb:bf:cd:84:3c:66:
         95:b1:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:15 2026 by rpki-client