Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          VVZJqsn4Q5bWQ7VC2GlkfjPkFdd9jD3y33PDyMhyopE=
Subject key identifier:   DE:68:63:9D:D7:5D:FC:6C:75:FB:14:BB:EA:04:45:F5:C0:B9:C2:42
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          01E0
Signing time:             Mon 11 May 2026 03:30:22 +0000
Manifest this update:     Mon 11 May 2026 03:30:22 +0000
Manifest next update:     Mon 18 May 2026 03:30:22 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: v2o2mgR7LNjlw/d83mwgtO/aSbX+L5XlAa5MJv3EFkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: May 11 03:30:22 2026 GMT
            Not After : May 18 03:30:22 2026 GMT
        Subject: CN=6a014d4e-8952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:61:94:d9:c1:5e:85:a0:b8:3c:f1:6f:a4:
                    2a:a3:9e:d8:8b:5b:2a:26:fd:21:9b:f1:09:68:7e:
                    41:88:be:00:77:79:f0:f2:6d:c8:ab:7d:66:eb:8f:
                    93:30:68:9d:83:1b:9c:04:6f:79:57:a1:cb:45:91:
                    2d:3b:fe:9d:fd:b4:9d:c1:1c:5e:df:b8:ef:73:fc:
                    a3:87:6f:b1:63:9d:b4:c6:a0:d2:8f:79:45:c4:3c:
                    0d:79:8a:fb:ec:f1:17:fd:5d:5a:30:ce:7d:c2:28:
                    eb:38:04:1f:80:45:c8:57:bd:e4:62:a4:6c:07:37:
                    db:d2:b4:89:e1:c5:78:9d:75:87:63:b2:71:19:b6:
                    8c:06:e4:c3:8b:50:35:87:15:19:31:15:e2:b5:1d:
                    af:59:77:77:91:f1:14:a0:50:6f:85:f9:02:2b:89:
                    5e:15:79:5f:11:c0:8d:bf:4f:59:71:b2:85:33:ac:
                    26:b8:94:db:cd:a0:fd:31:e2:e5:6f:0f:0f:dc:c1:
                    c8:5b:fe:b2:cb:2f:8b:cf:c9:6b:bc:67:e2:fe:6c:
                    f4:5e:d9:ea:4c:3b:e7:7e:d3:10:dc:30:97:a4:4b:
                    c3:0e:c2:59:0f:d5:c1:b1:db:82:2a:c4:da:7a:79:
                    32:ca:62:15:a8:e1:f0:c3:00:17:30:5c:99:03:29:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:63:9D:D7:5D:FC:6C:75:FB:14:BB:EA:04:45:F5:C0:B9:C2:42
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:46:20:d3:80:74:bc:28:35:2a:1d:a8:cd:08:d9:cc:b0:c5:
         6b:e9:45:81:df:94:75:2a:3b:c9:83:2d:d5:13:92:37:9d:84:
         b0:47:44:b0:24:78:2d:62:08:9d:c4:29:1d:7f:f6:81:07:df:
         72:92:ea:19:1d:85:62:90:14:4f:55:f4:d2:02:37:35:a7:5f:
         d4:61:98:db:de:2a:5c:7c:cc:fe:72:07:76:10:73:86:92:bf:
         30:82:f7:90:e4:4e:55:7d:8d:c7:45:0b:84:1b:8f:c0:fa:bd:
         19:e5:13:b6:e5:5e:2f:34:3b:64:7b:47:68:11:f1:d3:29:42:
         32:a1:cf:c4:44:e4:6a:df:3d:4a:4a:ce:35:fb:eb:30:1a:06:
         e9:ea:38:cc:02:9c:56:ea:5a:2e:63:c2:d9:9b:3a:3f:dc:c7:
         cd:17:e6:dc:22:12:b0:f9:ce:79:26:4d:b8:13:ad:e6:a0:d2:
         3a:04:02:2a:03:77:c1:8d:d4:07:e8:22:98:42:d3:9f:47:58:
         05:f7:49:41:0f:7f:69:7a:2e:1b:bb:0f:4c:92:8a:cb:3a:df:
         bf:e7:35:ea:e4:c1:bc:8d:43:d3:a6:36:e4:42:b2:1d:b1:a4:
         69:d4:df:4c:9c:00:da:34:25:95:13:9b:54:ea:99:97:c0:04:
         12:b2:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:44 2026 by rpki-client