Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File:                     mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier:          qV6IA6A0rg7qE6KSfu6KyQ4luZ5kNuujSZyBeEwNeBs=
Subject key identifier:   94:7D:7C:AE:A7:DF:55:87:E3:B5:2D:E7:E8:83:F0:E2:7C:4A:04:7F
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer:       /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial:       08EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number:          08DE
Signing time:             Tue 12 May 2026 20:26:27 +0000
Manifest this update:     Tue 12 May 2026 20:26:27 +0000
Manifest next update:     Tue 19 May 2026 20:26:27 +0000
Files and hashes:         1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: UtSfmP6aDj1hO7TlHSPHiC7rbUVXBKBET4p3X1mrk6g=)
                          2: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: 2893HNR31GoP/uh0ScggOWfiNSgjFGwQgJxlawN3n4I=)
                          3: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: WjGg/ZejwvG9Siea7F263gfGtLWehGPgmKPNRYmD4sA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
        Validity
            Not Before: May 12 20:26:27 2026 GMT
            Not After : May 19 20:26:27 2026 GMT
        Subject: CN=6a038cf3-eedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2e:f5:99:6b:38:90:89:7f:81:ae:e1:35:3b:
                    16:5c:ce:51:5f:ff:b1:6c:a8:c9:21:54:99:d2:7c:
                    b4:be:b5:dd:c4:16:d6:ba:7a:d8:60:b7:46:70:55:
                    b9:e4:28:44:84:6a:07:77:ea:c0:95:6c:70:d3:29:
                    de:9b:8b:3b:46:e6:a5:e5:de:d1:ec:d6:23:6d:61:
                    25:0f:f5:5d:3b:c5:ff:d2:af:2d:d3:1a:b5:bf:84:
                    ef:27:a6:29:65:f9:29:0c:54:9c:92:be:4d:c5:b2:
                    b9:2b:c4:be:e6:01:06:46:4a:16:2c:dc:7d:e9:1d:
                    3a:d0:d6:3f:16:a5:35:ba:3c:12:5a:31:52:c2:00:
                    8f:fd:13:9e:fb:be:81:77:c6:97:9f:d5:48:19:17:
                    37:e2:41:70:b6:57:8f:d7:55:ae:6f:1c:f8:8e:fe:
                    0d:f0:25:af:de:be:c5:a9:e2:46:e4:90:3c:b6:56:
                    30:c5:9e:2e:83:8f:64:1c:fd:b6:79:bc:a3:a8:dd:
                    20:55:e1:ec:c8:a8:6e:1d:09:11:f1:59:a6:22:52:
                    50:9d:c9:50:db:0a:20:2d:1f:b8:bf:7d:42:97:67:
                    7b:2a:ce:bb:7c:ac:9b:da:a1:1a:b4:a1:74:b9:ba:
                    4e:7c:32:3e:36:9e:82:9d:a5:f2:f5:5e:0a:12:67:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:7C:AE:A7:DF:55:87:E3:B5:2D:E7:E8:83:F0:E2:7C:4A:04:7F
            X509v3 Authority Key Identifier:
                keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:0e:6e:1c:ef:03:7a:1d:f9:f2:68:29:9d:97:ed:a3:1c:
         ad:bd:e6:a8:dc:7c:27:28:62:3d:e8:55:15:a8:c7:42:18:30:
         d1:fd:c8:44:a9:15:2d:5f:93:cd:d1:f5:ee:6a:65:67:a8:11:
         05:a1:cd:18:9f:60:f2:2c:cf:22:39:b8:5c:b2:5c:ee:01:2a:
         69:a5:cb:36:28:66:9c:0d:42:2a:7f:f3:2d:a3:8c:64:a4:38:
         32:1e:51:47:9a:ba:ca:41:0f:86:84:6d:9e:fa:01:f1:32:26:
         a4:ca:d7:4a:8e:ff:02:c9:84:e1:fd:b3:f5:d8:53:c2:41:b6:
         8c:f3:31:11:01:95:8b:2a:7f:93:58:0a:ae:ff:2b:a9:99:b3:
         b1:ff:04:1f:a4:47:3a:e2:c7:c7:66:42:10:2b:cf:13:81:f2:
         ab:e6:ce:bd:22:6d:55:a3:9d:63:c3:6a:23:c2:b5:68:a5:b5:
         82:dc:cb:d0:f8:0f:8e:89:98:02:b1:a1:69:db:75:bd:28:3c:
         66:da:5b:15:c7:30:3c:0b:69:4c:8f:ce:0f:91:3a:df:1d:bc:
         c3:c6:8a:73:84:43:ef:a6:21:d1:13:01:cf:8a:79:31:83:a2:
         16:f6:70:c7:ac:e3:68:7c:73:b4:e8:9f:e1:50:c3:ee:7d:92:
         47:58:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:15 2026 by rpki-client