Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
File:                     b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json)
Hash identifier:          2ryZSkrhAxTFMSQZLhq+Y3+TqHOX2F6VDKEIqgF25Hg=
Subject key identifier:   09:5F:66:EF:28:EE:55:90:18:FA:E4:3D:CD:D2:BF:91:42:82:33:43
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Certificate issuer:       /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial:       0C63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
Manifest number:          0C55
Signing time:             Tue 12 May 2026 18:45:39 +0000
Manifest this update:     Tue 12 May 2026 18:45:39 +0000
Manifest next update:     Tue 19 May 2026 18:45:39 +0000
Files and hashes:         1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: pxG9ALGJCT6mTfW7r5DqSA23CyfRKNSL5ATI2RbewUo=)
                          2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: 0DMnke4ej/rRMTSX/s1HLfKLH/EhQb8wlXMX/qnYspw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
                          rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
        Validity
            Not Before: May 12 18:45:39 2026 GMT
            Not After : May 19 18:45:39 2026 GMT
        Subject: CN=6a037553-d009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:7b:ed:e7:b9:2e:82:c1:24:ca:86:62:8c:
                    24:a7:d2:f1:26:a3:16:72:52:ca:e7:99:7e:06:98:
                    01:58:b7:20:7a:be:2d:3c:a1:50:6b:a3:dd:c2:72:
                    17:ea:a7:d8:ef:44:a8:4d:c0:0d:dd:67:14:8c:b3:
                    0e:0c:41:13:b1:b8:89:69:6b:a5:fd:ec:25:57:0f:
                    f0:14:00:7e:d4:36:dc:b2:92:1d:0f:7e:7c:87:12:
                    63:16:df:8b:59:20:34:e1:8d:07:62:e2:e9:d0:38:
                    88:7d:21:e4:0f:29:a7:8c:84:3f:41:e5:24:1d:28:
                    6a:e1:3d:d6:f7:31:1a:1c:6c:bc:a7:aa:38:00:48:
                    23:42:3c:31:dd:69:ec:5a:41:64:25:f7:29:ae:71:
                    3a:e7:45:c3:16:cc:29:b6:ab:0d:a5:25:e3:35:f8:
                    1c:bc:62:51:7a:0e:da:b5:d2:af:ea:dc:91:bb:1e:
                    64:53:62:bb:46:3a:ff:f6:3f:55:b7:ea:ba:c4:96:
                    b0:d5:bc:96:c9:ad:d2:18:91:0a:66:3f:f3:89:9b:
                    f0:74:d2:fd:28:f5:de:8c:57:45:e8:62:7f:84:de:
                    8c:c2:45:61:92:8e:57:30:23:7a:09:32:b8:7d:91:
                    cb:4b:e8:0b:68:09:00:7b:ea:f3:5a:7d:c4:dc:19:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:66:EF:28:EE:55:90:18:FA:E4:3D:CD:D2:BF:91:42:82:33:43
            X509v3 Authority Key Identifier:
                keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:c3:9c:8a:0c:06:75:42:cf:23:01:72:cc:70:63:bf:3b:
         f8:f2:9e:e8:ce:15:23:29:46:b2:b2:22:cf:f0:99:05:6f:ef:
         46:73:c5:3e:73:d1:f4:50:e0:a2:37:67:2c:db:d1:2e:6a:dd:
         f7:91:f6:1e:9f:eb:2c:c9:63:7f:03:ef:5b:09:b1:27:4c:0a:
         13:82:37:bf:68:ed:2c:0c:d2:c1:76:d9:b8:84:b9:ba:6e:61:
         d2:85:c8:3f:df:72:4c:d9:59:b3:c5:31:54:53:e5:42:8f:38:
         31:0d:2f:76:9c:52:98:6c:24:d1:17:73:0f:6d:f8:4f:31:88:
         8f:7a:f2:68:bb:58:7c:7e:6d:ef:af:be:c7:4c:81:d9:e9:f4:
         f0:fd:f9:f4:78:a2:79:31:29:b4:e2:e6:b7:c3:38:33:73:e9:
         f8:9d:4b:35:d0:ce:39:92:a3:b3:e9:e0:21:cd:cc:8d:79:b6:
         a3:42:c3:57:32:bd:e0:0a:93:4f:e2:af:b0:25:c4:4b:cd:1b:
         23:76:7a:08:a0:af:41:9f:97:36:9a:71:0f:22:b3:36:44:b6:
         e2:12:a9:38:c6:dd:50:0d:f6:19:10:10:e0:23:99:31:01:6d:
         c3:9b:80:79:7d:a3:7d:95:54:ab:65:b9:d2:25:02:82:ae:ad:
         dd:39:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:30 2026 by rpki-client