Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
File:                     MSV13k1GQ_rfrkiHbfRWfX18aFY.mft (raw, json)
Hash identifier:          rDBiucxV7pW2acejT7NlvA0wEN6NQStgdPv1g8e+u04=
Subject key identifier:   6A:A1:FA:57:BB:EB:3E:D1:CD:97:75:38:99:61:1C:73:A9:2F:A2:CE
Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
Certificate issuer:       /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
Manifest number:          5D
Signing time:             Mon 11 May 2026 08:14:11 +0000
Manifest this update:     Mon 11 May 2026 08:14:10 +0000
Manifest next update:     Mon 18 May 2026 08:14:10 +0000
Files and hashes:         1: MSV13k1GQ_rfrkiHbfRWfX18aFY.crl (hash: IYNGj9jZrLuhaDx7IsD8FtKwJnRI44FU7moEKkL1VUc=)
                          2: C2E6D1F63C0911F19D18A1CEB2833773.roa (hash: PLPriTbZpga1d0Ygy1kWk5OtBKo4jT5HT/wMgziotHQ=)
                          3: E9CCD3D8304711F1AA0B4944BF833773.roa (hash: Cfezb8mq7b+Due2G0DCxNN36YmA2ZvpK0RbPIVqNz38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
        Validity
            Not Before: May 11 08:14:10 2026 GMT
            Not After : May 18 08:14:10 2026 GMT
        Subject: CN=6a018fd2-bd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:79:90:36:9c:59:1d:07:b0:62:a6:99:e3:
                    5a:3b:26:3f:32:bc:7d:91:20:02:f8:d9:f2:07:4f:
                    ec:37:8a:44:9a:dc:ae:2a:7d:ac:18:56:4f:72:ef:
                    ca:85:4a:a2:c9:f7:66:b3:08:26:f9:63:4a:43:91:
                    e8:55:d2:60:35:57:e1:6c:df:5c:1e:96:a1:f7:7c:
                    42:17:04:cf:4e:78:1a:f7:07:dc:5e:6f:6b:d0:dc:
                    3a:a3:6f:a7:e6:53:d2:bc:26:29:5b:9d:e8:77:bd:
                    bf:4d:90:a0:1f:58:c7:4f:f9:a9:d2:89:c7:55:0a:
                    c6:30:04:db:25:72:bb:c9:33:f3:fa:43:2f:99:3e:
                    e9:79:7d:19:cc:0e:6e:f2:55:c7:0f:4b:35:d8:6c:
                    f0:32:d3:56:c4:38:97:70:e5:f8:c5:54:9c:50:a3:
                    27:b4:57:4a:2b:f0:08:20:f6:a3:b7:c0:00:dc:9a:
                    a8:94:ad:d4:55:bd:cf:1d:f5:f0:a3:da:66:b9:3b:
                    00:e9:b6:cc:c1:d3:78:10:a9:c9:96:d4:b9:94:4d:
                    07:fb:25:08:be:bb:ca:7c:68:33:3d:12:8c:14:35:
                    8a:9e:82:87:3c:d7:db:a2:6c:72:3f:b8:24:a9:f4:
                    70:e4:5f:f5:99:70:e0:52:fd:ce:9c:2f:ff:ae:7b:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A1:FA:57:BB:EB:3E:D1:CD:97:75:38:99:61:1C:73:A9:2F:A2:CE
            X509v3 Authority Key Identifier:
                keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:70:31:a8:ae:ff:81:27:4b:4c:db:21:49:65:7d:ad:ef:11:
         ea:4c:bf:90:90:46:7c:b7:6f:32:73:e2:ad:55:b1:9c:bb:e3:
         45:3f:e0:a7:92:a8:3a:96:41:36:06:3b:89:bf:44:b2:87:e1:
         98:b1:ac:5f:df:f0:df:de:99:12:74:13:20:d8:c7:f9:ec:43:
         f3:c8:8a:9c:3c:71:4c:d1:92:e9:92:25:e7:b0:60:8f:25:58:
         48:0a:f8:7b:20:1d:05:c6:70:8d:57:0f:ad:77:ee:08:b8:00:
         ef:a3:9f:ec:be:63:cd:eb:2c:61:1e:8a:32:db:5f:0f:07:9c:
         38:c7:6e:09:06:52:60:42:c3:6a:2e:8d:bd:44:ec:d1:ed:a5:
         f5:32:08:f2:cd:5e:dd:21:45:f2:f9:62:9b:6f:28:7d:23:ba:
         bb:02:d3:57:2f:c6:2f:15:17:38:4a:d9:03:30:6c:98:1d:b9:
         29:5c:d9:8a:0a:2c:08:f1:c1:52:7d:57:26:f0:da:f6:25:d0:
         8c:2e:33:61:2c:87:7f:74:e9:7c:36:4e:e7:14:cc:72:08:d6:
         87:1d:9d:3e:b1:9d:ac:70:c9:1a:84:3a:fa:36:51:79:f9:02:
         aa:ae:b0:d5:09:42:95:15:0b:e0:68:03:69:7a:56:5a:fc:ab:
         53:d1:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:46 2026 by rpki-client