Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
File:                     jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json)
Hash identifier:          ISoyyzSZloDhD0MqtOCmXFOVO/GBNNO8D7/adxC40Wk=
Subject key identifier:   74:B7:A4:7F:A1:10:68:65:9D:27:E1:0E:50:69:E4:80:1B:04:9A:5C
Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
Certificate issuer:       /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
Manifest number:          B2
Signing time:             Wed 13 May 2026 07:14:34 +0000
Manifest this update:     Wed 13 May 2026 07:14:34 +0000
Manifest next update:     Wed 20 May 2026 07:14:34 +0000
Files and hashes:         1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: BauHfaQ0tk+8nQoF4I9yk85BwwoE9jLcJu4Ao05jUqU=)
                          2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: iIlQkxBmgXt47gVpNAYfQJLsTOog95JafpEPwLPUz/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
                          rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
        Validity
            Not Before: May 13 07:14:34 2026 GMT
            Not After : May 20 07:14:34 2026 GMT
        Subject: CN=6a0424da-9832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:66:b8:93:7a:23:4c:63:c8:39:8d:02:8a:
                    22:0e:ce:ef:94:d5:cd:97:e8:94:30:76:cb:a3:fd:
                    d6:36:a2:6c:36:36:9d:e3:47:94:c4:d0:0b:2b:2e:
                    0e:ce:be:27:26:a6:6a:91:5c:a3:da:b3:f8:57:5c:
                    24:ed:33:27:c7:24:f2:ca:19:91:13:15:c6:62:9c:
                    b9:9e:72:1c:03:f8:7b:c8:e3:0e:c3:71:99:9f:a0:
                    cd:ea:39:5e:d4:30:56:ec:e6:9f:6c:bf:87:1b:04:
                    8e:3f:3c:5a:15:c1:8e:b4:08:65:56:de:df:95:ce:
                    d9:02:d7:b8:2e:a0:e6:36:3d:c7:c2:15:e5:ff:80:
                    70:92:07:bd:29:db:20:f0:10:da:82:6f:4c:77:d2:
                    3c:38:27:9b:53:7e:52:ad:f5:8d:e5:cb:69:ac:94:
                    ff:a9:98:87:c0:4a:cc:ed:a9:67:48:2e:06:bd:87:
                    ac:bc:d6:2d:6b:c2:07:b3:b2:e5:13:81:14:40:4a:
                    83:ec:9e:b5:42:b2:6d:11:c4:1d:3c:d0:a3:e6:99:
                    3e:f1:2b:26:a3:d4:14:f9:70:e7:26:df:91:80:12:
                    2e:ec:dc:76:e8:16:4f:e0:54:e6:15:95:0d:8a:57:
                    06:51:83:87:77:2c:03:47:17:3c:7c:e8:0f:a3:89:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B7:A4:7F:A1:10:68:65:9D:27:E1:0E:50:69:E4:80:1B:04:9A:5C
            X509v3 Authority Key Identifier:
                keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:72:cb:99:f0:40:9a:b1:43:a5:ee:cd:39:dc:78:89:b0:
         f7:9d:0c:1a:e6:a0:be:72:35:0e:48:60:0e:4f:fa:15:67:90:
         b6:3c:c7:cf:fd:97:ac:bb:34:6e:1a:ae:6b:37:81:0a:fd:38:
         f3:e9:89:0c:25:71:d7:c5:08:bf:10:ce:5a:d5:2e:c4:7e:e6:
         e7:9e:37:4a:67:e5:fc:18:34:05:b2:3e:e2:bb:d4:b6:d8:eb:
         ba:71:c4:78:e3:27:77:f2:c4:36:76:ce:dd:b3:8d:b1:ad:9f:
         03:8a:1d:62:b9:19:2f:8d:75:99:df:5d:cc:e0:39:74:f1:13:
         16:c1:c1:00:b0:03:01:4c:4f:ed:cc:e5:20:bf:15:c0:bb:24:
         38:7a:c9:dd:ef:1b:25:bb:9d:c5:1b:53:74:ac:53:89:f8:5e:
         d5:3b:35:1a:fa:6f:ee:d9:51:8a:cd:db:23:ef:92:48:32:4d:
         4f:ef:2f:c3:a0:ed:a1:61:ea:16:b3:ba:90:59:c9:af:c5:6e:
         a1:d8:ed:00:cd:94:98:3b:63:48:3a:ec:9b:02:d6:64:87:63:
         b0:e7:0a:45:69:bc:16:b6:83:8c:e7:21:67:b3:c8:7e:ed:6b:
         cb:28:90:7d:0a:1d:73:30:1c:ea:7a:a8:2d:10:08:22:b7:a1:
         05:90:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:16 2026 by rpki-client