Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
File:                     phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json)
Hash identifier:          plDJQVW1UNB4g2AaxzUc4eHziJ8kb+7442tMAWcELOM=
Subject key identifier:   D6:87:41:E9:92:B0:E4:FB:4C:73:BC:C4:F2:1D:1C:E2:5F:2B:99:01
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Certificate issuer:       /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
Manifest number:          0225
Signing time:             Wed 13 May 2026 02:53:09 +0000
Manifest this update:     Wed 13 May 2026 02:53:08 +0000
Manifest next update:     Wed 20 May 2026 02:53:08 +0000
Files and hashes:         1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: 6IZFGIUUc7sE66T72hI1zwFSJZr5vcOHwL9M3c2Q7G0=)
                          2: 939530627B6311F0BF7B4936C4F9AE02.roa (hash: ZFhHCFeUOh6APH456On8FdyIkUmcfvvz5IW62S7F69c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
                          rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
        Validity
            Not Before: May 13 02:53:08 2026 GMT
            Not After : May 20 02:53:08 2026 GMT
        Subject: CN=6a03e794-4a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:04:95:61:a2:e9:14:51:54:c1:18:10:79:
                    51:83:12:c3:1a:d6:f8:13:06:47:5c:bc:b7:a6:5b:
                    1b:7d:e6:92:fb:eb:4a:7e:a0:15:e4:d9:08:b4:da:
                    13:32:f8:db:71:e5:70:9e:e8:9c:2c:d3:bb:9f:d1:
                    34:9b:5a:d4:fd:c0:b7:94:86:e1:78:68:5f:5c:ff:
                    b0:4d:ba:71:4a:c2:6a:fc:46:84:75:f2:10:4d:03:
                    bc:77:03:25:50:b2:ab:bd:7a:fe:73:53:29:14:59:
                    44:fd:c5:99:6a:ee:74:b4:8a:f0:7d:85:73:38:ba:
                    0c:92:a5:b8:e9:58:35:15:6e:27:9a:35:06:73:4a:
                    d2:17:be:f5:33:8b:53:f2:0d:dc:76:99:f8:4f:c6:
                    1c:75:fb:33:f3:58:e8:a8:63:cc:46:23:de:b7:e2:
                    21:95:b7:b3:c4:44:9b:33:68:6c:67:55:82:09:60:
                    36:de:be:2e:2c:bc:33:a9:a1:78:0b:9d:a8:bd:e5:
                    61:8e:22:57:96:e2:7a:19:59:ff:8e:35:eb:a9:79:
                    35:c7:30:92:de:80:16:26:a3:a4:87:4d:f4:84:1f:
                    3b:29:73:a8:ba:8d:2b:8b:75:f0:21:8c:e5:16:6f:
                    fe:67:e2:ce:b8:6e:18:a2:44:ce:d5:cb:9b:9d:93:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:87:41:E9:92:B0:E4:FB:4C:73:BC:C4:F2:1D:1C:E2:5F:2B:99:01
            X509v3 Authority Key Identifier:
                keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3b:3a:80:69:48:60:13:c9:99:4e:35:ef:5a:e0:3d:e0:c8:
         e1:a0:24:a2:fd:e7:00:5d:eb:9a:71:92:58:81:16:17:e0:86:
         23:21:65:60:13:95:ba:df:e4:03:aa:07:9a:bf:7c:2c:37:87:
         fb:a6:30:0c:1c:73:ee:73:f1:ac:7a:6a:5f:97:80:b7:a6:b3:
         a0:e9:e5:30:25:89:1a:70:c6:25:d1:fb:52:74:b0:a8:ab:c7:
         8c:e1:d1:0f:78:e2:79:30:8e:36:3e:32:bf:f3:ff:a2:8d:82:
         aa:94:a8:f0:e5:ec:7c:47:22:c0:82:bc:e1:6b:1c:f0:3f:66:
         23:30:2b:a0:96:dd:3a:cf:97:34:a8:1d:e3:50:b3:70:1d:69:
         30:9a:c6:09:76:9f:e1:2d:6a:bf:77:13:ac:52:1e:e5:25:fa:
         d4:f8:3b:39:52:f8:1e:95:e5:2e:e1:8b:11:cf:62:ab:dc:d8:
         bd:b4:6f:0b:b1:da:8f:32:d4:32:88:6c:1d:8b:c0:67:38:12:
         1d:b5:ef:4c:95:f9:d3:15:04:10:91:b5:3b:98:29:aa:dc:b3:
         11:40:55:de:92:bb:c7:f8:20:ac:7f:fb:d7:60:10:47:0c:0d:
         2f:c2:eb:1e:53:b4:79:21:45:59:eb:12:f7:20:4d:77:8b:e9:
         ee:a9:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:37 2026 by rpki-client