Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
File:                     9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json)
Hash identifier:          3KAfneaCf5FvjybvluT/s+PfsHD88rQnmnleOBSxb6A=
Subject key identifier:   2E:1A:EC:CB:C4:C4:80:4E:90:93:E2:18:F4:58:98:27:79:41:E4:1A
Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E
Certificate issuer:       /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
Manifest number:          028E
Signing time:             Wed 13 May 2026 01:46:35 +0000
Manifest this update:     Wed 13 May 2026 01:46:35 +0000
Manifest next update:     Wed 20 May 2026 01:46:35 +0000
Files and hashes:         1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: b/0TSLY/5/yVtbbPbJF7BhZgkgjwE2YG6pwyzOzg8b0=)
                          2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: TY+42nSG6nPIUiuSiCcpnQzJo+Ss4QVY3rFCGRIL9ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
        Validity
            Not Before: May 13 01:46:35 2026 GMT
            Not After : May 20 01:46:35 2026 GMT
        Subject: CN=6a03d7fb-cdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:de:9e:4a:c9:ec:da:60:21:9f:35:ed:00:
                    eb:36:69:24:0d:ea:af:33:89:50:e9:b4:8e:3d:03:
                    10:74:c8:d0:f8:63:ab:db:51:d9:89:d9:c3:39:ea:
                    dd:50:f6:2c:02:92:8b:b9:42:06:5e:cb:77:c8:15:
                    3b:b2:d4:b8:dd:ec:dd:38:2d:1c:d7:87:ec:b2:1c:
                    02:00:b3:7e:8f:ab:12:7e:03:0d:fc:4b:e7:14:0d:
                    f6:22:7e:77:d9:15:01:43:b8:09:cc:2c:19:e1:4f:
                    95:1b:d0:ea:f5:ff:e6:e4:72:4a:74:01:ca:00:41:
                    bc:7e:71:2a:f1:21:70:75:7e:c8:1e:73:6d:73:91:
                    80:ac:63:48:8b:38:b0:79:18:9c:52:3c:3e:e6:20:
                    70:3c:4a:d5:7e:10:ef:ba:48:60:a0:b7:eb:a9:27:
                    2f:78:7f:fc:b4:08:dd:a2:0c:f6:5f:8d:99:a7:71:
                    99:d9:9b:ad:bd:0d:0f:77:76:83:a9:38:4e:6b:05:
                    03:35:c6:6e:d7:15:ed:31:74:20:17:b5:03:f7:38:
                    fa:81:78:e7:cf:aa:6c:ea:4e:ae:24:89:f3:45:94:
                    09:3b:8f:5f:3d:17:21:e9:10:53:53:76:1c:0e:22:
                    95:21:18:bb:6f:16:5e:25:78:92:25:4f:b9:bd:93:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1A:EC:CB:C4:C4:80:4E:90:93:E2:18:F4:58:98:27:79:41:E4:1A
            X509v3 Authority Key Identifier:
                keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:56:4e:d2:be:3c:1e:61:56:15:26:78:af:00:77:cd:11:a7:
         e3:7c:16:d1:57:1c:0e:5b:21:14:ec:5f:0e:06:54:8b:e2:56:
         f2:16:76:15:a9:22:45:29:11:21:9d:21:11:09:bf:ed:0f:2e:
         09:49:c5:f2:44:d6:ab:48:20:ab:fd:61:49:22:ec:32:ef:3e:
         9a:41:80:8b:f5:b4:8e:d2:b3:8f:c1:33:ef:7f:a3:5a:96:4e:
         2a:31:47:3a:89:50:bc:13:d9:7a:52:ed:1e:4c:f3:c5:ae:7b:
         df:f5:96:bc:11:cc:85:ff:0b:64:1e:f5:a5:f7:58:cb:18:29:
         5b:c8:1e:82:e0:35:d3:46:a5:f5:e7:47:0c:bd:0d:f3:2d:ef:
         c3:c6:40:f9:da:9e:e4:7c:76:1a:2c:14:e6:d1:82:88:f9:ab:
         09:0c:e7:18:39:31:7d:e4:20:8b:f9:35:a1:91:38:1e:12:1e:
         13:d2:3b:4d:bf:37:4c:e5:b8:90:2e:2e:6a:36:4c:82:f3:04:
         7d:2a:ac:40:9e:28:ab:a6:74:d1:25:92:d8:cc:be:b2:35:a0:
         c6:62:78:a7:ec:ec:49:e8:c2:4b:55:9e:f8:58:f5:89:f9:23:
         65:9f:d8:96:7e:9b:f3:01:d4:a9:7d:37:7b:89:78:f4:2b:c7:
         a6:bf:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:31 2026 by rpki-client