Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File:                     xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier:          5rsPu3VkOAqRK+cYutAQlIHmhUgMQu24sRUc+RvY5W4=
Subject key identifier:   CA:47:AA:F0:6B:5B:81:27:B4:2C:D8:51:EF:BC:1B:8A:34:EF:65:88
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer:       /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number:          0132
Signing time:             Wed 13 May 2026 05:35:09 +0000
Manifest this update:     Wed 13 May 2026 05:35:08 +0000
Manifest next update:     Wed 20 May 2026 05:35:08 +0000
Files and hashes:         1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: 7KMfrCN/YQmpVlKDcgQcN3zsKLeY2TDLgIvqt+h6c78=)
                          2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: mfW/Qkg0MzRAXyBHrSlkZ0QHKIFcW/HURnHy5WY1eYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
        Validity
            Not Before: May 13 05:35:08 2026 GMT
            Not After : May 20 05:35:08 2026 GMT
        Subject: CN=6a040d8d-b7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:70:38:83:ae:19:59:1c:58:63:05:ac:0a:
                    f3:ea:b4:14:13:d6:d8:ab:37:2b:71:a7:c8:cc:3c:
                    bc:69:41:7f:31:ca:5e:3d:a3:4a:1c:f8:25:04:07:
                    07:b4:ae:86:92:42:d9:d3:10:bd:93:d2:d7:e7:22:
                    b4:67:8b:d7:37:09:1b:b4:f5:ff:a3:39:7d:d9:89:
                    19:f6:88:6e:f1:2d:15:e5:88:45:b4:9c:82:c8:6d:
                    7b:61:8c:e0:62:50:a7:48:27:aa:27:9f:9d:34:41:
                    bb:64:3e:4e:d5:00:8d:b4:55:5f:07:b4:78:46:d7:
                    73:01:fb:9c:9f:76:da:c5:94:46:5b:50:de:0e:77:
                    60:72:9d:97:83:0c:3b:cd:a1:ab:a8:3d:aa:8e:29:
                    37:7f:93:ca:ba:83:d4:23:ed:0f:e8:ad:ec:05:36:
                    40:60:62:43:1f:f9:a2:ec:67:97:34:9d:1b:68:aa:
                    86:3f:08:ca:39:9f:a8:39:b7:d8:83:fc:d0:45:37:
                    0a:c2:16:73:92:d6:80:6a:59:22:bd:f5:a1:1e:68:
                    9f:c0:7c:e9:d0:67:d6:af:f9:6c:20:5c:ab:44:5b:
                    47:20:0e:10:39:b2:3d:69:e5:ae:a1:15:63:45:e9:
                    0d:ff:3b:3f:14:26:3e:7f:c8:ac:e2:77:bc:a4:7b:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:AA:F0:6B:5B:81:27:B4:2C:D8:51:EF:BC:1B:8A:34:EF:65:88
            X509v3 Authority Key Identifier:
                keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f8:53:f4:8e:cd:4c:80:e5:f1:b8:f7:d4:4d:29:ec:d6:48:
         78:55:db:df:7a:1e:f5:f8:7a:5e:48:86:8a:7d:c7:e7:42:0b:
         3e:48:b1:e6:f7:2b:06:0f:c1:40:09:60:f3:3f:45:7f:b7:28:
         02:ae:ce:7d:bd:6b:a7:4f:25:7d:73:6a:00:3f:16:19:07:db:
         52:a7:e8:12:b1:7c:ff:70:cc:ed:75:b4:64:71:c0:64:7f:ac:
         2a:75:ea:39:0f:54:d8:ec:91:c7:c1:3b:5e:c6:2c:76:ae:84:
         d4:1e:5e:69:9c:28:05:b0:8a:c0:16:61:8f:66:e9:c8:18:40:
         66:ab:5f:02:2f:cf:5c:81:a2:4b:32:1b:9f:36:b5:1e:e9:01:
         2e:5e:89:25:9f:53:0e:a3:ef:e6:18:f4:87:64:0d:5c:54:1c:
         25:b3:bf:a9:d7:fa:e1:6b:7f:84:97:bf:cc:dd:21:e5:e8:60:
         14:83:cc:12:23:5f:35:18:93:34:37:f8:a3:95:84:be:8d:1d:
         f3:23:9c:bd:64:7d:f1:8f:e4:9b:d8:0b:9a:f4:62:01:59:95:
         ae:fa:08:09:f5:25:72:90:e6:c0:8c:61:8d:c4:60:fa:2d:a3:
         20:40:54:ba:f0:fe:e5:82:b3:44:1d:3d:1d:65:86:af:60:c2:
         3f:ff:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:42 2026 by rpki-client