Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
File:                     1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json)
Hash identifier:          OBM1D0Qiu3qpNJpRkHwHZsPw3TabTq6s67Bku7nlkZU=
Subject key identifier:   B9:9B:1F:E7:28:72:87:0B:EE:17:84:57:8B:69:16:18:C5:D2:FA:65
Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
Certificate issuer:       /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
Manifest number:          0113
Signing time:             Mon 11 May 2026 06:03:11 +0000
Manifest this update:     Mon 11 May 2026 06:03:11 +0000
Manifest next update:     Mon 18 May 2026 06:03:11 +0000
Files and hashes:         1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: 85WLRce3ZMa3yn/MNeIyOAbdVo+0ssDzYnxCpHxNv1w=)
                          2: BB5954CE241111F094390A32C4F9AE02.roa (hash: ILuNQjwNhW0PKN+i94dgKZ8uTmGwmDnJT50xUUvXJAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
        Validity
            Not Before: May 11 06:03:11 2026 GMT
            Not After : May 18 06:03:11 2026 GMT
        Subject: CN=6a01711f-8222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:5f:96:74:53:01:0e:f6:de:03:91:23:01:
                    84:c4:82:fb:71:3b:19:06:96:ec:7d:3a:8b:ec:de:
                    5b:e9:fa:36:a0:46:10:58:6a:57:99:0a:41:39:78:
                    be:ee:08:ad:be:7c:ac:79:f1:27:a0:8a:22:32:02:
                    bd:57:79:10:42:bb:17:ae:2d:16:ab:cc:bf:d6:5d:
                    15:b4:db:c6:be:38:68:1a:e8:e2:4b:fb:40:89:cd:
                    2a:47:cc:c6:6f:95:c1:81:69:04:da:2a:ee:2a:81:
                    a6:38:33:16:24:a9:af:a1:fb:38:3b:23:63:1a:e0:
                    65:11:dc:3e:2a:76:2b:dc:b5:65:cb:8a:81:cb:9e:
                    07:7a:2a:86:49:db:8c:13:44:96:06:57:5c:a9:b9:
                    e4:d8:70:77:8e:1d:ad:1d:19:93:7d:30:1a:42:4f:
                    db:9c:7b:8a:0d:06:a7:9b:c1:4c:5e:a6:c7:08:a9:
                    ec:64:9c:51:df:c9:74:56:30:2d:e1:46:7e:04:fa:
                    fa:4a:73:bb:76:48:91:7b:c0:41:81:2e:c9:bf:30:
                    30:06:be:20:4f:05:30:f5:3d:ab:d2:3c:03:1f:88:
                    39:f7:4f:a9:be:8b:24:6f:ba:44:24:bf:4d:f8:81:
                    ee:0c:ef:1e:b5:53:27:20:ec:88:99:ff:a6:bc:62:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9B:1F:E7:28:72:87:0B:EE:17:84:57:8B:69:16:18:C5:D2:FA:65
            X509v3 Authority Key Identifier:
                keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:64:02:56:2b:13:6e:3b:aa:da:77:54:f4:b2:6f:1c:3f:d7:
         10:75:e3:30:b0:92:65:66:b8:c9:b9:cb:bd:17:b3:b3:8b:00:
         9c:a9:97:9c:27:71:b7:81:1c:f5:a0:7e:db:f0:f4:cd:80:f2:
         ff:b1:04:75:4f:a4:ae:ef:47:de:99:e2:aa:d7:3c:ff:a0:ca:
         ae:77:9c:ca:0f:79:50:44:d3:8f:25:3c:ca:b1:ba:d9:ee:ba:
         ab:23:3f:11:06:b3:f5:8b:41:d9:16:55:24:68:5a:d0:e5:8b:
         dd:e9:57:e5:da:0d:74:83:6b:45:50:d3:a3:ba:6f:e3:e4:5a:
         56:55:a0:d1:3c:42:fa:40:a5:ff:70:26:2c:8f:ef:3b:ed:67:
         45:2e:d3:d4:bc:70:39:9e:54:32:4e:66:84:f4:ef:64:83:5b:
         48:5c:7d:bb:87:17:38:de:63:d5:8a:28:b0:fe:3e:bf:cb:19:
         79:6a:4e:f4:85:09:63:ed:f4:ec:07:b1:f2:c9:b1:69:7f:f5:
         b7:26:91:c2:a7:6b:48:18:06:a4:f6:ab:54:2c:52:69:98:0b:
         6a:6f:94:48:35:a3:bf:eb:e1:db:e7:83:40:84:00:e7:d4:c0:
         0e:ec:5b:0b:38:88:b4:9c:b1:e5:be:db:b2:fd:fe:b7:89:f9:
         aa:29:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:22 2026 by rpki-client