Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File:                     a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier:          DG5UzioMeRaswu+0AJoNEjT1NFlnup49PhVs+5pTmSo=
Subject key identifier:   4E:59:42:69:08:A9:A1:68:DF:8B:20:22:38:BB:4E:76:41:FA:A4:3A
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer:       /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial:       0D6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number:          0D4E
Signing time:             Tue 12 May 2026 18:04:48 +0000
Manifest this update:     Tue 12 May 2026 18:04:48 +0000
Manifest next update:     Tue 19 May 2026 18:04:48 +0000
Files and hashes:         1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: h4PVwFk3L3a60U4v/DlPQxUfcwGwMJQw0IqGXNL3zN8=)
                          2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: bMVnErmgRlLugY09+B5/egD11gP2CX9LPToXy6tEisU=)
                          3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Pvc5GDrJlGSuNYbRyBpLm6q2hwwEqbNDXIDKhGgHHek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3434 (0xd6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
        Validity
            Not Before: May 12 18:04:48 2026 GMT
            Not After : May 19 18:04:48 2026 GMT
        Subject: CN=6a036bc0-3256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:73:85:e5:a5:ca:20:d3:f1:d9:aa:43:84:
                    f7:42:14:98:21:90:68:d6:1b:56:4b:f6:b3:63:3a:
                    db:4f:b5:9c:bc:74:11:67:f9:82:59:ab:22:96:67:
                    af:6e:ab:47:92:41:af:aa:ef:2b:13:96:d9:46:fd:
                    35:77:c9:aa:45:36:c2:be:83:97:a1:c2:2b:a1:f2:
                    9e:b5:fe:da:8f:46:f6:13:35:49:55:4e:68:f6:3a:
                    4b:b9:a8:f9:0a:f0:b3:87:58:93:1c:01:64:d3:90:
                    ec:c3:f7:7f:27:7f:94:26:96:ea:88:5e:34:e2:d7:
                    07:b8:f6:f2:e5:54:9c:e5:de:b9:1e:f7:4f:3d:b9:
                    c1:6c:63:74:2e:a8:a2:da:86:6b:40:e9:34:ae:44:
                    e7:f3:94:88:ba:d5:24:02:20:a0:e8:6a:89:b1:08:
                    e6:30:ee:9d:e9:7e:4b:ea:ee:30:25:26:21:68:17:
                    95:6d:96:a4:96:91:9a:e8:5c:bb:dd:22:03:97:be:
                    c6:0d:03:72:65:b4:9a:c5:10:2c:a3:e5:9c:f0:45:
                    84:6c:f4:f6:d6:ff:cc:66:f2:24:24:d6:b9:2d:2c:
                    08:59:22:f0:96:e4:93:8d:57:0a:46:60:e3:9d:47:
                    99:57:14:98:db:1c:5d:72:76:dc:f9:ef:36:d7:bc:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:59:42:69:08:A9:A1:68:DF:8B:20:22:38:BB:4E:76:41:FA:A4:3A
            X509v3 Authority Key Identifier:
                keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d6:d4:a8:ca:8c:d4:33:77:7e:6c:1e:39:07:7e:23:3c:71:
         3b:03:2a:10:cd:a5:e7:54:9e:69:9a:35:d0:ca:73:d8:cc:86:
         2c:cd:2e:66:7d:f9:02:1a:1f:2f:35:fc:0b:15:b4:d4:a8:f2:
         0c:29:11:f1:65:13:0a:c1:66:d2:50:93:d4:bf:5a:d8:ea:e4:
         22:a8:91:ed:85:15:f5:f0:d2:12:1b:49:f4:6e:21:33:b3:d9:
         1a:97:d8:04:dd:54:0b:3e:1c:f9:d0:33:6b:87:61:0a:43:61:
         6b:c0:09:86:fc:51:47:d3:2c:76:c6:29:72:85:ad:c8:0e:c3:
         b4:2d:64:71:7b:89:26:fe:56:1c:61:35:f0:f7:3d:4f:ae:ad:
         63:c1:0d:bb:3b:58:58:f3:29:0c:bf:55:4a:f1:12:ef:46:fd:
         10:9d:1a:b8:64:79:7e:a1:e5:b5:6c:82:01:ce:c8:b1:50:6e:
         48:d3:75:a4:2f:8d:44:c2:db:90:1b:c2:62:5c:fa:6f:fa:d5:
         be:6c:b9:ec:22:a8:e7:17:b6:71:9e:e3:90:a6:3a:67:62:3e:
         19:63:10:3b:e0:10:4a:20:fc:b9:4d:e1:0c:e1:d8:ea:8a:02:
         cf:a9:8d:a9:66:fb:93:32:37:fc:02:e9:b2:4d:18:0f:f3:ac:
         9d:03:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:44 2026 by rpki-client