Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
File:                     jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json)
Hash identifier:          jqw6oVtKxrdKU+jScWrOhdTK1AEaC1iXS9W8mX2iau0=
Subject key identifier:   06:66:65:0A:2F:AC:97:46:F8:99:04:36:83:F4:AC:0B:7E:A6:D5:81
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Certificate issuer:       /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial:       1B3F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
Manifest number:          1B35
Signing time:             Tue 12 May 2026 15:41:44 +0000
Manifest this update:     Tue 12 May 2026 15:41:44 +0000
Manifest next update:     Tue 19 May 2026 15:41:44 +0000
Files and hashes:         1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: sAU5FtoWSIXCHiIuN4no9SZEZvJf7Pvb+jbSt5434RE=)
                          2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
                          rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6975 (0x1b3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
        Validity
            Not Before: May 12 15:41:44 2026 GMT
            Not After : May 19 15:41:44 2026 GMT
        Subject: CN=6a034a38-d32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:01:34:92:40:92:7e:b1:ef:96:0c:bf:2a:
                    ec:73:35:35:02:97:62:ee:33:f8:1a:71:86:48:53:
                    48:45:24:6b:df:02:a3:f8:e1:52:22:39:74:5b:d9:
                    c0:19:0a:c5:1c:68:a9:89:a6:ba:60:da:0c:00:56:
                    82:6c:25:73:65:3e:a1:73:4c:98:45:8b:2e:e5:60:
                    e6:a1:8d:18:a8:84:f1:0b:1e:be:f1:16:d7:d7:5e:
                    55:83:48:96:36:fe:63:f3:29:ed:03:f2:cd:7f:87:
                    a7:c1:bc:2a:20:6c:ad:40:2f:d0:3b:de:b4:33:2b:
                    a5:c7:5c:28:54:a6:89:63:d3:d9:3d:f1:03:6c:1b:
                    7e:8d:24:70:58:15:fc:aa:5d:e1:26:db:cd:19:1b:
                    f0:b2:00:3c:57:5f:4d:c5:6c:4a:4a:1c:91:71:89:
                    6d:94:0c:e1:3b:6f:00:97:02:be:7c:6c:ec:3c:1d:
                    f6:ce:6a:fa:85:dd:7e:b1:ed:a3:15:96:0c:3a:33:
                    5e:3f:b4:65:2c:f2:d2:fa:4d:40:e0:8e:0e:de:05:
                    1f:34:31:ea:a3:94:3b:e0:93:cb:0b:ba:62:fc:69:
                    22:e1:09:a4:02:6e:82:c8:1a:d0:b4:8b:23:9f:1b:
                    f0:e7:08:47:a1:2c:9b:35:b8:75:7c:96:84:9f:00:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:66:65:0A:2F:AC:97:46:F8:99:04:36:83:F4:AC:0B:7E:A6:D5:81
            X509v3 Authority Key Identifier:
                keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:55:43:46:fd:c3:40:ad:b5:10:16:26:63:80:60:f4:b4:
         70:c6:f4:06:68:93:0a:90:5d:2a:11:a2:b8:a7:2c:3b:9f:c0:
         5d:6e:54:61:1b:c8:b9:3b:28:e7:b7:35:46:40:d5:2f:31:7d:
         64:b4:49:11:d0:eb:54:24:39:d7:61:ac:3f:af:79:f2:9d:87:
         62:24:54:8a:66:ef:b9:db:2b:fe:cf:2f:b1:52:61:fe:73:05:
         dd:c0:86:ea:51:87:c0:7c:86:a5:fd:f9:f9:ad:12:77:ae:8b:
         46:4f:19:60:88:c2:6b:54:92:61:52:34:3f:01:1f:17:9d:d0:
         ac:a5:6f:59:27:02:ce:03:b0:53:f3:d8:0f:d9:1a:2e:77:a6:
         a0:31:dc:63:61:78:ca:db:3c:30:12:77:d0:5c:be:af:18:6e:
         c4:08:df:af:77:e7:e9:fa:d8:8e:9f:95:c4:24:04:29:7e:b1:
         c4:59:e5:da:da:72:e0:27:c2:4a:ff:8e:c6:e8:f0:a6:e0:70:
         d5:c4:bb:5d:fc:10:c1:d0:e9:16:a6:07:21:b4:a1:df:6e:d1:
         83:97:4e:99:62:c4:85:13:86:9f:e7:fa:96:ef:f2:5d:05:3e:
         75:63:1a:27:8f:b3:74:be:eb:5f:8e:c1:3c:bd:78:0b:88:ea:
         87:0c:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:24 2026 by rpki-client