Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File:                     JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier:          wo42Z50U1FmGvQ/L01FcRzgcUNyEkcQIbrsxKQBDn5k=
Subject key identifier:   C7:E7:95:BF:70:E2:06:36:80:E4:F5:2F:C7:78:76:60:BB:35:B4:3B
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer:       /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial:       1DE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number:          1DD8
Signing time:             Tue 12 May 2026 16:06:20 +0000
Manifest this update:     Tue 12 May 2026 16:06:20 +0000
Manifest next update:     Tue 19 May 2026 16:06:20 +0000
Files and hashes:         1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: m18fR/ZIogPzoITo4WnsBeuMOr+ZYU9vvQRG0+Z1of4=)
                          2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
                          rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7657 (0x1de9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
        Validity
            Not Before: May 12 16:06:20 2026 GMT
            Not After : May 19 16:06:20 2026 GMT
        Subject: CN=6a034ffc-a0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:26:db:0f:9a:8d:6f:9e:cb:5c:30:98:37:
                    16:01:01:e3:b6:99:6c:4d:5e:db:23:b4:f7:d4:fb:
                    67:06:70:06:ea:b9:05:e7:4f:fc:ed:fc:61:ef:f1:
                    0d:29:cf:ff:15:78:2c:c3:e2:02:b1:95:67:25:d6:
                    92:c7:c8:f3:93:35:e1:d4:86:72:e0:49:15:b4:3a:
                    4c:a7:34:fd:bc:7d:b1:5a:57:6f:70:a8:30:3d:89:
                    e7:44:b5:61:20:b5:10:b6:1d:85:18:fa:ee:b7:0c:
                    90:95:6a:ec:f7:38:e6:eb:59:60:ba:66:61:cc:29:
                    6f:fc:56:b7:18:b5:89:9f:86:ba:98:15:12:6d:d9:
                    fd:a5:43:1f:01:25:e2:13:6a:0a:57:ce:f1:80:90:
                    1d:48:f1:4f:3b:a8:f1:aa:44:c4:2a:f3:e3:fd:18:
                    8d:03:fb:3e:c5:ed:10:23:c2:49:01:ed:9a:db:3e:
                    b5:c0:09:1b:e1:04:a3:04:7f:b0:86:4d:60:9b:e6:
                    de:63:0e:f4:7f:86:df:11:c3:75:ae:87:12:cd:bc:
                    b5:d2:db:58:34:0c:8e:be:50:3a:1d:2d:49:5b:0f:
                    0f:4b:15:b5:c4:d4:6b:ca:8b:97:68:04:b9:c3:8c:
                    1d:e1:08:5e:10:6d:2c:b4:af:96:35:4a:52:f1:0e:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E7:95:BF:70:E2:06:36:80:E4:F5:2F:C7:78:76:60:BB:35:B4:3B
            X509v3 Authority Key Identifier:
                keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:2d:7a:63:45:ae:79:e7:57:09:c6:25:da:c2:0b:a6:2e:
         ef:b6:d4:53:45:8f:91:45:c0:a5:64:d3:ac:8c:f9:b8:a7:56:
         5c:f8:96:69:64:59:fc:8b:3e:b8:89:b3:a7:32:f7:a0:c6:e7:
         93:10:73:33:5c:e4:c3:7d:a1:09:d6:93:3a:45:c7:03:79:65:
         45:bb:ef:d7:59:2a:48:8c:51:04:98:dc:0e:59:be:7c:79:36:
         5c:ee:09:ca:03:60:e0:48:de:43:94:78:a3:a0:80:dd:8f:c6:
         e2:0a:9c:7d:05:a5:83:b6:76:3a:b8:ff:e0:b7:6d:1f:7b:a7:
         70:39:5b:5a:2f:69:6f:f5:a8:2f:6b:c3:1d:fc:7c:d9:58:c9:
         7c:91:f1:43:94:66:78:b7:90:d4:f9:e0:6a:cf:5f:99:d0:04:
         40:76:3c:bd:b7:f6:9c:e7:e1:6a:4e:63:68:fb:e5:eb:f6:a1:
         57:ff:7b:53:7b:a9:26:51:77:a8:b9:33:5e:5c:64:01:28:4b:
         20:e5:02:79:f9:4e:74:21:fc:d5:94:8e:e7:f6:9c:e6:fc:04:
         a4:ff:e3:a8:79:8c:00:5f:50:b4:b8:4c:93:47:eb:27:29:b9:
         5a:11:15:bf:eb:f9:f3:96:7b:81:79:17:21:2c:c8:d5:ab:99:
         11:0c:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:13 2026 by rpki-client