Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
File:                     exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json)
Hash identifier:          0PMfCpUdQwG3Y+FLkaacqNtSQnjFBtEgE/gQD3iyMbk=
Subject key identifier:   F4:41:33:A4:C0:C2:C6:9B:75:40:4D:4F:C8:76:DC:D1:72:0B:CB:D1
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Certificate issuer:       /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial:       045E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
Manifest number:          0455
Signing time:             Wed 13 May 2026 00:18:01 +0000
Manifest this update:     Wed 13 May 2026 00:18:00 +0000
Manifest next update:     Wed 20 May 2026 00:18:00 +0000
Files and hashes:         1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: HLe78z2VuMNN4g8HudM/laGFpIl5Zyxg3jUam5P9MmM=)
                          2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 7IlaGTjLJWbx6PnU7BddxHIB93LX+4J3qLIjVMAHpm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
        Validity
            Not Before: May 13 00:18:00 2026 GMT
            Not After : May 20 00:18:00 2026 GMT
        Subject: CN=6a03c339-088d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:a2:43:d9:d4:8f:94:0d:45:a9:e2:32:fb:
                    d8:da:6f:6e:40:40:c3:ac:ce:fb:39:6f:0e:4d:fc:
                    96:b3:41:8d:58:a3:8d:4f:a7:a7:67:37:65:a4:15:
                    25:05:4e:cc:95:8f:f7:52:2e:59:71:45:66:a3:32:
                    93:6f:c4:d6:a5:7d:96:0d:56:01:3d:d4:d0:de:49:
                    26:e2:d7:9a:8b:24:8c:a8:84:ed:13:19:06:46:6b:
                    6a:ee:ab:73:8e:16:b4:1b:77:4b:32:da:95:21:74:
                    56:97:bb:70:2f:34:d4:e0:84:e4:93:8b:f1:9d:c6:
                    d8:e7:39:ae:0b:fe:c3:f1:c4:46:6a:14:44:fd:c5:
                    c6:0f:33:9b:7d:84:23:6a:8c:8f:26:f8:3c:6b:31:
                    02:0a:78:51:0d:0b:36:3d:6a:0a:13:24:73:d7:81:
                    12:e7:05:dc:4a:7b:67:3e:78:09:77:db:0b:ac:34:
                    97:f4:de:02:33:cd:1f:78:49:1f:ff:35:62:a3:f1:
                    21:2d:16:b9:f5:e5:cd:44:fd:48:07:8e:60:8b:90:
                    73:99:fd:6e:e9:66:32:88:01:be:55:52:28:9b:e9:
                    d5:99:67:f4:f5:12:72:dc:83:6a:ab:2b:4c:93:48:
                    51:5a:7b:46:cd:32:18:3e:0c:99:96:f8:51:49:b3:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:41:33:A4:C0:C2:C6:9B:75:40:4D:4F:C8:76:DC:D1:72:0B:CB:D1
            X509v3 Authority Key Identifier:
                keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:72:7c:25:73:08:75:72:f3:7d:e3:fd:22:42:80:b9:a5:53:
         2b:24:39:07:16:35:b9:a9:a9:6b:55:91:8d:f7:fa:77:9f:c2:
         77:d0:23:6e:ae:7b:8e:a6:84:3b:f4:a3:5f:1b:94:76:8e:51:
         f9:bb:36:b1:2c:8c:cd:6a:fa:15:dc:bc:f6:fa:a7:08:57:f1:
         83:61:79:2b:c9:7c:60:f3:a9:e6:3e:1c:3a:96:c8:75:5c:7f:
         48:dd:d3:89:56:8e:85:a9:0b:05:a9:a1:8c:25:b9:9c:83:2f:
         2e:c3:63:60:1f:a2:d8:40:5e:1c:c3:b3:d9:88:7b:2b:9e:94:
         29:56:db:be:4c:fc:af:b6:fe:7a:ad:b4:a8:75:a7:f6:87:84:
         eb:f5:29:94:91:29:e4:ae:0e:7f:95:4b:a3:91:42:48:0a:13:
         f2:8d:5d:ff:93:6a:1c:e3:7f:19:8f:22:19:d7:0e:f5:cf:c2:
         5b:0e:63:47:a8:ac:45:ff:1d:82:f1:01:4f:06:26:b8:22:16:
         8a:3a:03:f3:d6:48:15:50:b9:0f:90:7e:89:59:b9:6e:77:b7:
         5c:5b:21:98:7c:ea:25:e2:e2:bb:30:d4:10:21:6a:36:40:86:
         60:86:1d:62:43:5f:56:62:65:95:67:08:1d:9e:b5:81:e8:c7:
         f7:60:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:58 2026 by rpki-client