Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
File:                     U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json)
Hash identifier:          qTCfF0RobR1dTTIK9YyYi1o+2B+M4LBrz2cp/m114VQ=
Subject key identifier:   AB:AA:35:12:AC:AC:FA:66:57:3D:65:CB:B6:68:33:C2:2A:A0:F7:4C
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Certificate issuer:       /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial:       0605
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
Manifest number:          05E9
Signing time:             Sun 10 May 2026 23:01:41 +0000
Manifest this update:     Sun 10 May 2026 23:01:41 +0000
Manifest next update:     Sun 17 May 2026 23:01:41 +0000
Files and hashes:         1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: wrsTsv53ywPT1o0UFo/pBcQkJV4P1ny/qG9WaAIEK5k=)
                          2: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: O5HnlLR1hWWyTNRUt4LdbaUFp1yGwksal5ksV0pwNV4=)
                          3: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: +8k4rfDonzqcIXzrPnc9G+NWKEIwjetXPPpI12xDWO0=)
                          4: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: NXzX7R7NLEazsVeUoaLWbp54rjvi9QQud2skYKW4OZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
        Validity
            Not Before: May 10 23:01:41 2026 GMT
            Not After : May 17 23:01:41 2026 GMT
        Subject: CN=6a010e55-1efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:57:d4:47:13:71:fb:90:0b:90:41:2f:c1:
                    58:10:b6:e8:d5:5e:30:18:98:3e:ad:d4:6a:99:39:
                    65:07:ae:73:91:34:58:76:f1:48:82:a4:a2:f5:9f:
                    25:a0:53:36:a7:91:7d:2f:13:c1:17:30:1e:5c:2f:
                    db:71:8d:c7:33:5f:e8:1f:ac:12:6b:ac:5f:27:80:
                    d5:0a:78:44:de:f9:53:22:bc:ef:d8:ab:99:82:15:
                    af:6f:fe:b3:29:cc:49:7c:4c:d9:97:a6:e6:cf:66:
                    cc:d3:8e:cf:5d:41:bf:95:6d:d2:8f:dd:3b:e1:44:
                    ff:41:70:1e:0e:ae:dd:ea:c7:4f:35:1f:f7:80:6e:
                    c8:a9:42:91:3f:67:44:0c:46:72:b6:13:16:36:43:
                    eb:73:8c:69:22:36:f2:f3:89:de:71:95:09:e9:4c:
                    85:38:86:e4:67:4e:b3:38:69:51:a3:3a:da:9a:88:
                    c2:3d:44:94:ff:77:d8:14:4d:29:7c:7b:21:31:0f:
                    f6:5f:37:de:d7:a2:47:72:b1:e2:9a:f8:77:39:7d:
                    f8:ef:df:af:74:1d:a9:6f:ab:e9:8f:44:54:55:1b:
                    8a:ba:fa:f7:85:97:ad:3e:78:30:a1:db:d1:21:8c:
                    a8:db:83:84:f7:03:59:93:ee:22:02:1a:49:40:7e:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:35:12:AC:AC:FA:66:57:3D:65:CB:B6:68:33:C2:2A:A0:F7:4C
            X509v3 Authority Key Identifier:
                keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:b0:6c:9f:24:92:52:0c:08:82:93:a4:65:4e:4d:f8:a8:
         89:49:16:69:5c:e3:b2:70:f4:87:4c:03:bd:d7:e0:5c:9e:85:
         0b:5b:a7:42:11:59:da:74:ba:2b:52:81:8b:9f:aa:5a:88:f7:
         f6:5f:fd:ba:cd:e9:07:10:a2:a7:46:d3:50:49:70:37:91:c7:
         4c:e3:f3:88:5b:eb:75:87:e1:56:19:f9:f2:13:d3:73:77:48:
         08:4a:32:33:5a:7a:71:3e:59:55:ea:b0:b2:02:66:3f:39:78:
         a8:79:f0:5b:cc:36:03:06:a0:b7:83:cb:bd:c6:c9:99:2f:9a:
         61:92:8a:ab:7a:74:8e:93:87:3a:ef:29:2f:bd:a2:fc:35:57:
         e2:95:cc:e3:85:7d:40:64:cc:c0:2e:f7:42:67:4a:6e:b1:f0:
         07:bf:cd:56:1a:57:7f:af:2c:fc:01:15:9b:c0:26:2c:34:b0:
         ff:1b:6c:0a:84:cc:f0:2d:24:11:9b:80:63:0e:f9:41:8e:f7:
         c1:d6:75:b0:a5:0c:3a:4a:bb:6a:38:08:9e:e9:fd:35:4d:d6:
         14:c1:ad:f0:cc:08:43:59:65:e9:29:dc:e5:8e:32:fa:03:83:
         6c:1c:53:96:1c:2e:7f:87:f6:c6:14:c0:f1:ec:27:fa:a8:da:
         51:54:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:28 2026 by rpki-client