Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
File:                     Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft (raw, json)
Hash identifier:          o/1rEfHFxzuyAcZzspzM/0K0L2NkwhzRPwWWHdXoDoI=
Subject key identifier:   CC:46:6B:74:EC:C5:21:04:19:40:36:C7:FB:11:4B:EB:71:41:A2:CA
Authority key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
Certificate issuer:       /CN=A91C8BAB/serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
Manifest number:          19
Signing time:             Wed 13 May 2026 09:09:00 +0000
Manifest this update:     Wed 13 May 2026 09:08:59 +0000
Manifest next update:     Wed 20 May 2026 09:08:59 +0000
Files and hashes:         1: Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl (hash: Fq19tnCA+rjzcS29mIPukFxr9iDwxIluWUsTyu5e1gs=)
                          2: B8FC2F342E4311F1A2579C1594833773.roa (hash: pjauDszwaF/mopQYyjDIvAGHDO32bERoI1rKGNgCq5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
        Validity
            Not Before: May 13 09:08:59 2026 GMT
            Not After : May 20 09:08:59 2026 GMT
        Subject: CN=6a043fab-42fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:b7:8f:a7:b3:21:77:a1:3c:87:dd:07:6c:
                    50:bd:c1:14:b2:5b:0b:dd:eb:b8:35:25:7f:b2:37:
                    37:32:a5:38:fd:06:53:ce:dc:29:4d:10:8a:57:8d:
                    cd:81:ec:12:04:73:0a:86:1d:45:b1:3d:ea:28:ee:
                    09:24:cd:9f:4c:04:ee:17:4f:8e:fd:2c:f1:a5:0b:
                    c1:b6:73:35:d4:b2:d1:6b:97:a2:ba:fa:90:28:4f:
                    2e:50:82:fa:d9:d3:32:af:3e:be:cb:14:7e:81:25:
                    8e:a4:60:d3:c2:1b:b0:41:70:9f:8c:f2:37:7e:fd:
                    2c:ca:89:e7:52:b6:af:87:56:2d:97:6c:fe:7d:b9:
                    3e:6f:7e:d5:24:a5:7b:32:57:61:bf:f6:d5:95:01:
                    85:2a:d5:ca:c6:e7:f4:55:c5:48:17:f1:94:a1:59:
                    ea:53:c3:91:1b:fc:43:f7:eb:9f:b5:9c:91:4c:9f:
                    42:94:0a:89:5a:8d:5f:84:4f:20:9a:8f:89:20:91:
                    e0:19:24:06:fa:2e:46:3a:f2:ab:60:29:b1:bc:3f:
                    01:12:df:52:29:56:3f:8a:7b:f3:2a:5f:7a:c7:c3:
                    ef:57:e9:92:aa:17:0f:2d:7e:30:ba:00:f9:d7:8d:
                    dc:e6:4f:ff:98:fd:f8:6c:17:af:a1:7b:1d:07:89:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:6B:74:EC:C5:21:04:19:40:36:C7:FB:11:4B:EB:71:41:A2:CA
            X509v3 Authority Key Identifier:
                keyid:16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1b:13:ef:88:cd:3b:06:ca:eb:72:6f:32:19:79:06:f9:c1:
         6c:a5:c9:c1:f0:ec:4d:04:ba:9f:fc:f6:00:56:bd:ed:60:e7:
         a4:0c:57:fc:d7:a6:c5:3d:b2:21:be:8e:a3:70:02:46:9d:5d:
         d9:57:1c:64:21:ce:b1:36:82:ac:b4:c1:44:a5:83:c2:e6:d9:
         20:24:26:53:ef:24:68:78:be:3f:5a:67:2b:87:6a:75:b6:7a:
         2a:ea:b7:4a:be:c6:2e:e5:96:15:67:3a:ce:e8:e8:a4:4e:36:
         72:3e:1f:b0:c1:6a:e6:b6:1c:e9:f9:91:27:03:60:72:61:37:
         bf:ab:d5:fd:0e:73:b7:2a:bf:25:37:e8:93:dc:20:2e:e8:61:
         19:ef:6e:86:17:38:f8:f3:e4:24:c1:13:b7:49:e7:6d:ca:f7:
         f1:6d:a9:90:d1:02:b2:3a:c6:8a:62:58:30:c7:97:59:3d:d5:
         63:88:59:76:13:68:e9:7c:fb:f7:6d:c2:37:73:3e:3a:4c:22:
         f9:77:6e:20:4c:7d:8d:fc:09:73:2b:86:3e:8b:60:47:04:30:
         a5:92:2f:94:68:d5:26:ef:21:43:c9:4f:d5:56:75:59:8a:4f:
         50:3c:b2:f2:61:ed:f5:f8:f6:c6:56:4b:34:e9:e2:6e:d3:db:
         00:2d:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:31 2026 by rpki-client