Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File:                     zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier:          tcs4ute+/yiupwBnw8/Pk020KZ6F9Ea8k2i3zhk8jxU=
Subject key identifier:   C7:C3:49:6D:CC:1E:13:FB:92:6D:AB:E5:8F:29:3A:9F:95:A0:F8:90
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer:       /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial:       08E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number:          08D1
Signing time:             Tue 12 May 2026 20:27:23 +0000
Manifest this update:     Tue 12 May 2026 20:27:23 +0000
Manifest next update:     Tue 19 May 2026 20:27:23 +0000
Files and hashes:         1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: 3wkfvJ+Zyi/mm79zgK29L9BGsYI4LxFRFcHXezbxacg=)
                          2: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=)
                          3: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
                          rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2277 (0x8e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
        Validity
            Not Before: May 12 20:27:23 2026 GMT
            Not After : May 19 20:27:23 2026 GMT
        Subject: CN=6a038d2b-61ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:95:7c:a7:6d:1e:e3:13:5e:de:1a:4b:cc:
                    bd:9e:2e:e6:6b:67:88:35:c5:d2:8b:cb:c0:bb:03:
                    5d:fe:5f:1a:7c:bd:ad:23:ae:08:20:f1:a9:0c:88:
                    6a:ef:75:39:bf:b5:7b:4e:1b:db:af:34:b4:0d:ad:
                    83:db:a8:3a:6b:6e:62:75:f1:99:c7:b5:fb:8e:31:
                    08:c2:3c:6c:f2:a0:f7:fd:d5:43:c7:a7:85:82:43:
                    d4:98:64:de:d1:dd:63:8e:72:c7:9e:d1:e2:14:5e:
                    db:5d:11:f9:c7:6c:8b:fa:40:85:a8:ff:69:c4:49:
                    2c:26:0b:c4:89:7e:72:58:94:54:cb:a1:da:5c:34:
                    80:16:b1:de:2f:74:bf:04:00:0d:1e:08:20:45:ef:
                    8d:3f:9d:b7:43:16:b2:78:9b:59:6f:df:22:cc:3b:
                    8d:05:8b:0b:34:7b:6e:38:06:54:3c:c0:50:b2:9b:
                    1a:79:53:c4:c0:00:ee:71:30:f0:19:de:36:a7:90:
                    02:8d:df:ca:e2:46:32:ef:de:9f:88:c0:22:e2:a4:
                    3b:3f:54:d2:02:0b:76:5b:16:93:3a:b6:19:fe:2d:
                    a2:ce:87:84:b3:cf:fc:9d:00:54:c0:0f:12:9c:de:
                    88:a7:74:e4:98:59:99:04:80:6b:36:c0:9d:87:9e:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:49:6D:CC:1E:13:FB:92:6D:AB:E5:8F:29:3A:9F:95:A0:F8:90
            X509v3 Authority Key Identifier:
                keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f7:41:c3:71:99:c1:43:fe:a4:2f:53:29:cb:9c:7d:83:02:
         18:11:be:60:d1:b5:1d:83:bf:61:c6:9b:64:20:fe:6c:aa:f1:
         16:31:bf:27:26:78:1f:38:fa:3d:87:15:2e:22:10:f7:a2:63:
         8a:06:e8:7a:09:b2:cb:b9:d0:b5:e7:65:38:fc:cc:66:f1:5b:
         3b:83:75:3c:69:95:36:77:98:27:c1:ba:d8:49:64:48:33:5c:
         d2:fe:58:41:e1:7a:f7:5f:0f:be:d9:7b:5c:5e:13:43:b6:d0:
         f2:7d:07:cf:e2:09:0e:73:f5:1d:c8:c0:54:0c:68:d5:5e:bc:
         c6:da:1c:b6:34:0d:eb:36:c0:04:5b:44:23:20:7b:5a:b7:22:
         a9:9f:77:0c:96:16:2a:6f:e6:75:74:62:a8:de:b0:7a:26:25:
         f3:77:00:fe:cc:fe:3f:a7:e8:25:b2:f3:eb:a6:ae:2a:1f:b8:
         16:5a:11:05:d0:13:ac:67:95:3b:65:4e:e4:0f:af:fc:9c:a0:
         62:8e:26:5f:a7:7a:53:8f:cb:c7:9f:a3:9a:ce:10:54:65:b8:
         f1:dc:43:30:2a:bc:71:be:ca:e2:38:0a:09:83:6a:06:c7:60:
         7c:b4:4a:d2:61:ab:db:9a:39:50:a3:29:f4:44:25:64:46:d8:
         6d:97:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:36:38 2026 by rpki-client