Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File:                     b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier:          +RuGP0/xaypOxGmQxMVuAW//WKTzmPQI48DeSeAfrTE=
Subject key identifier:   97:B6:91:1A:C6:8C:CE:E5:55:B4:C2:B1:F6:2B:90:76:29:39:DC:7A
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer:       /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial:       0BF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number:          0BE5
Signing time:             Tue 12 May 2026 18:56:05 +0000
Manifest this update:     Tue 12 May 2026 18:56:05 +0000
Manifest next update:     Tue 19 May 2026 18:56:05 +0000
Files and hashes:         1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: FJZYH9w5DcaE8EPpDS5TBkZ7zCoNTMeKm8kE22/jSxE=)
                          2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: j3+FqbIbEZA5ldhomHT9hdMFU4oqErbqw6qxTyWi9S0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057 (0xbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
        Validity
            Not Before: May 12 18:56:05 2026 GMT
            Not After : May 19 18:56:05 2026 GMT
        Subject: CN=6a0377c5-6d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:84:bd:82:a9:b1:f4:c8:8f:35:5a:41:0a:
                    26:6b:32:b3:c5:cd:ab:24:78:9f:52:60:38:2b:2e:
                    e5:34:98:b4:dc:ca:0e:16:3f:27:49:5f:a8:3f:dc:
                    02:8d:e7:bc:13:5e:93:8e:e7:fc:05:97:d7:69:81:
                    b0:9e:56:9d:55:10:78:b9:0f:68:81:ad:46:89:f1:
                    ef:04:86:13:b8:eb:c8:f3:8e:56:0d:c2:e5:d6:b6:
                    18:57:3c:58:a2:c8:e9:17:45:b9:dd:22:50:7f:3b:
                    86:72:d8:90:a7:c9:f5:d1:b2:21:5b:d5:37:f1:9f:
                    ba:ee:bc:d9:95:db:71:28:32:f9:33:5b:53:fe:09:
                    c0:ed:c7:88:76:19:70:c1:db:35:93:50:bc:13:46:
                    54:34:fa:47:a4:d5:0a:3a:dc:f6:9e:0e:bc:0d:dc:
                    78:63:bb:03:43:40:64:1b:8c:26:67:e0:14:81:05:
                    b7:6b:79:1f:5a:26:f3:87:c8:9f:7e:13:f1:cd:73:
                    6c:b0:8a:75:f4:83:b7:29:2f:f2:79:e8:5c:b0:b5:
                    80:2d:71:6d:39:eb:0f:c8:4f:a7:f3:4c:e9:22:5f:
                    cf:73:03:96:65:7b:5f:9f:50:08:cd:49:0f:05:fd:
                    7a:e1:02:27:46:e5:73:8a:30:11:3d:77:c4:d7:33:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B6:91:1A:C6:8C:CE:E5:55:B4:C2:B1:F6:2B:90:76:29:39:DC:7A
            X509v3 Authority Key Identifier:
                keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:18:37:80:76:2c:b0:9d:81:8a:5c:14:2f:14:e0:98:22:a6:
         d2:0e:d2:d6:1a:bc:b2:98:d3:23:f5:6e:af:08:67:91:c8:48:
         56:cc:59:a5:e2:b7:3a:d7:b1:2c:fc:5c:a9:46:b1:0d:21:60:
         e8:1b:34:a4:a6:58:6e:0d:31:61:4d:a1:91:d2:61:ba:cb:e1:
         6f:c2:71:7a:c2:64:ff:11:ba:1f:97:d9:f3:7c:f4:5b:2e:56:
         41:92:35:13:3f:d3:9b:6e:47:9f:91:39:85:fd:85:8a:3f:cd:
         39:b3:72:94:50:28:29:91:f6:ca:4c:96:21:59:74:7e:10:dd:
         55:02:18:11:d9:5e:ab:36:73:5f:20:99:bc:42:1d:54:dd:5b:
         d7:37:e2:68:fc:59:b5:91:70:bb:4b:c6:56:84:b3:07:c8:45:
         bc:6d:59:db:00:6f:b5:88:6d:35:6f:38:d5:96:b4:e0:8c:73:
         db:e8:5f:b7:79:3e:62:54:ed:ba:42:f8:b2:07:be:39:7e:ba:
         73:b2:fa:5f:5b:3a:57:c4:d2:00:69:41:df:ec:3c:ec:fa:c4:
         51:d0:60:54:e1:56:a1:5c:49:fb:e6:b0:85:16:3b:02:87:6f:
         18:1f:20:4b:74:97:1a:02:6b:f1:b7:35:6f:23:21:ab:10:0a:
         56:44:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:27 2026 by rpki-client