Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File:                     3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier:          dbRX9ZYi9f8qS9blT7eQn5UT3QifKZeLilWizPX3sWE=
Subject key identifier:   2F:64:16:FE:39:67:C8:B1:35:B6:42:2E:82:67:BA:1F:9F:43:26:1D
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer:       /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial:       194B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number:          1942
Signing time:             Tue 12 May 2026 15:47:22 +0000
Manifest this update:     Tue 12 May 2026 15:47:21 +0000
Manifest next update:     Tue 19 May 2026 15:47:21 +0000
Files and hashes:         1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: DRL2A+dFFYahcIyVxmU0ksUW2ia6Fq4Qk7yntysjov0=)
                          2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: huSx5kpORQn0tkU4TRAPmVkFRxR4g/qvraibL4XJAo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6475 (0x194b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
        Validity
            Not Before: May 12 15:47:21 2026 GMT
            Not After : May 19 15:47:21 2026 GMT
        Subject: CN=6a034b8a-fab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:06:1d:75:d7:e8:34:43:f7:4d:50:35:86:
                    59:30:93:58:39:75:ef:5f:79:ec:7b:ba:38:4e:76:
                    8c:a8:a3:4e:6c:b5:67:b7:58:26:35:00:8b:d0:23:
                    81:95:23:f2:fc:d8:97:4d:7f:50:c5:e6:71:9d:5e:
                    9f:10:4f:32:7f:7e:43:8b:56:91:52:ef:c0:b6:72:
                    28:2e:7e:86:dc:38:75:93:23:63:68:e9:57:70:01:
                    c2:28:5e:e4:bd:dc:37:88:9d:84:f7:71:42:43:3b:
                    31:30:f0:9f:50:f8:7e:e3:fe:39:51:7e:8b:d4:d4:
                    95:27:39:c4:ee:c8:bf:23:f9:5d:10:bd:b0:b6:e6:
                    4b:03:e5:3d:38:68:60:15:c2:fe:76:7b:e8:f9:88:
                    a8:e3:11:d7:30:35:9b:5a:7a:70:61:e9:cc:e0:2b:
                    24:d8:d1:cd:d4:21:7b:7d:37:55:03:ce:57:4c:9c:
                    cf:79:fe:60:de:be:b4:77:a7:f0:dd:75:20:f4:00:
                    68:d1:ae:7c:f4:45:9f:34:fe:a1:5e:fd:a1:56:7f:
                    6f:c5:5d:4f:e5:0c:4a:77:06:55:c5:85:50:ac:b2:
                    59:ca:48:8e:0f:ee:55:e3:07:79:74:2b:ac:5f:59:
                    56:c0:e1:16:f4:8e:55:c7:f5:18:b3:e5:29:49:8e:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:64:16:FE:39:67:C8:B1:35:B6:42:2E:82:67:BA:1F:9F:43:26:1D
            X509v3 Authority Key Identifier:
                keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:66:04:bd:f0:1d:08:9e:36:6e:46:3c:92:36:71:48:5e:f3:
         a2:51:57:bf:b2:fc:51:31:b8:d4:ae:df:b4:a0:8d:18:05:63:
         95:5c:a0:6f:d3:54:f8:73:4b:f2:fa:78:e0:cb:37:1f:57:11:
         03:0b:7e:6f:e0:9f:a9:0a:1e:cb:3b:19:4d:1b:7b:4b:22:76:
         8c:d0:d2:f1:0b:71:ae:e4:ba:19:6d:a4:35:16:e8:e0:36:75:
         ce:25:e9:93:5a:24:1e:78:ee:05:69:4b:fb:91:72:58:f3:68:
         07:25:1c:37:ac:a3:f0:25:1b:3e:d7:19:01:41:1f:52:04:64:
         93:d4:7c:ef:87:4e:cc:03:2e:d5:e3:94:34:3a:8a:ab:1a:f8:
         72:12:ea:e4:f3:a2:30:52:12:03:45:46:b8:40:78:09:83:b7:
         a5:b0:03:17:7b:df:57:98:74:39:2d:b8:4d:db:c4:89:3c:ba:
         9c:6e:a4:c6:2e:a9:31:a8:2d:a6:9e:10:a7:e8:4c:60:c1:27:
         b8:5e:4b:03:62:9b:6a:fe:78:72:be:e3:04:05:d4:b3:f3:83:
         78:4f:61:91:17:16:9b:f6:0c:d4:7f:f5:98:13:7b:3f:91:4d:
         cb:29:c9:4c:62:74:c5:d5:b6:5f:cf:f4:14:eb:cf:d5:22:42:
         55:d9:60:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:44:43 2026 by rpki-client