Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File:                     9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier:          OISpItMv8TFB3ijiH/ytwTk4vnAhDl9Vd3QMqMnrS8g=
Subject key identifier:   B4:CC:41:92:F7:C0:EE:F5:C7:44:52:E2:79:21:B6:AE:BF:CB:8B:DD
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer:       /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial:       03F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number:          03ED
Signing time:             Mon 11 May 2026 00:33:26 +0000
Manifest this update:     Mon 11 May 2026 00:33:25 +0000
Manifest next update:     Mon 18 May 2026 00:33:25 +0000
Files and hashes:         1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: hFdFo2uYm8zm6fsvGTPiXtWdvWrArHSVWGzcFSBNaQw=)
                          2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: lbvKMon3phKT4kxAzoVpvvRCe8EmYTdmkdcCNNB8PIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
                          rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
        Validity
            Not Before: May 11 00:33:25 2026 GMT
            Not After : May 18 00:33:25 2026 GMT
        Subject: CN=6a0123d5-2e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:92:b6:e8:a0:7d:97:a2:82:f9:28:3f:b2:
                    d8:de:d2:65:ca:07:ae:e5:98:1f:00:84:11:9a:90:
                    7c:fe:54:09:27:38:63:33:1c:5e:7a:2f:48:69:af:
                    47:a4:da:07:92:4e:c6:3b:fe:74:55:c8:4d:4e:dd:
                    6d:26:8c:37:19:19:6b:c5:dc:05:d6:24:51:b6:0c:
                    35:4c:cc:bf:62:3c:b8:64:d4:cc:b0:2e:24:a3:71:
                    32:a4:8e:58:01:b9:3a:c6:d0:3a:44:2a:6b:26:31:
                    b5:b8:30:a6:f6:4c:bb:94:e5:26:16:5a:a1:aa:3c:
                    71:9a:6c:80:27:97:59:b6:f8:d1:03:ce:3a:7d:80:
                    b1:e6:5f:ba:e9:3d:de:a9:af:18:c0:be:b6:5f:8d:
                    a7:0c:a2:0c:34:2e:25:46:83:53:85:83:55:dd:2c:
                    bd:f8:67:69:95:d0:91:b0:7c:11:b2:c0:fe:20:cb:
                    89:ae:dc:3c:dc:93:95:e2:6a:0a:d5:9f:6e:f1:6b:
                    d1:22:0a:4d:81:f8:8c:a7:ec:f0:46:17:f0:c4:4d:
                    09:37:06:b2:36:b7:c3:20:1b:1d:12:3a:77:0b:43:
                    a5:dd:d8:18:bd:4a:9b:f7:57:c9:31:12:8c:4e:f9:
                    9a:20:62:ff:82:49:51:c3:42:01:3c:b5:81:87:d5:
                    f1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CC:41:92:F7:C0:EE:F5:C7:44:52:E2:79:21:B6:AE:BF:CB:8B:DD
            X509v3 Authority Key Identifier:
                keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:29:07:fb:d0:c7:1b:88:1a:20:a4:bc:6d:00:09:41:d4:
         ff:55:2a:31:39:8b:c5:d0:82:ab:3b:23:bf:c0:3c:c9:8a:9b:
         df:10:24:ff:7e:bf:11:94:41:e4:26:04:17:84:42:a6:88:21:
         14:9f:1a:5d:b5:5d:80:33:dd:c5:25:00:bd:9d:67:ef:c7:bd:
         1e:65:f0:16:24:aa:a6:7d:e0:79:4e:a8:68:38:60:b9:8b:34:
         a3:98:99:a2:03:1a:13:4c:39:6c:84:78:c6:ae:d4:0b:8a:39:
         32:60:f2:ef:62:2a:0c:7f:49:da:e7:2f:aa:78:6f:8a:0f:46:
         b3:b6:73:14:08:b3:36:e7:37:59:52:ac:ed:b4:ec:d2:92:d5:
         94:86:3d:cd:65:82:fd:de:64:b0:9f:62:f1:dd:24:d8:fa:92:
         f4:64:f5:fe:10:c1:4b:f5:90:45:d0:e3:b4:8b:ce:59:45:34:
         cb:11:fe:d9:9d:3f:7d:48:16:22:26:36:9e:a4:83:fa:f6:d0:
         a2:f0:d3:0d:ac:0e:25:bc:e8:33:55:49:43:3a:56:3b:2c:73:
         05:29:5e:56:db:28:36:93:95:7f:62:15:95:4b:1b:69:4a:4f:
         9d:d9:90:47:65:c0:1e:75:c9:76:e3:3b:55:16:39:33:01:f8:
         84:25:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:37 2026 by rpki-client