Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
File:                     DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json)
Hash identifier:          CzXWBXJyrMjs6HjtBmB6Ng6KGmV6+QDNIXuELnGzMEE=
Subject key identifier:   CC:C8:D8:60:8A:69:C7:D8:73:28:80:BB:C6:1F:9E:47:4D:E0:20:D1
Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
Certificate issuer:       /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
Manifest number:          014C
Signing time:             Mon 11 May 2026 05:15:33 +0000
Manifest this update:     Mon 11 May 2026 05:15:33 +0000
Manifest next update:     Mon 18 May 2026 05:15:33 +0000
Files and hashes:         1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: R8rkxo32qKbbIWklZd5Mu8yp1HPRk+KZDZOpihyMi70=)
                          2: 750E873CABF211F0BF8FB00EC4F9AE02.roa (hash: PEAQA7XsorRIuwWsKNbIKqHHMZSV9adPGMNrwws+mao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
                          rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
        Validity
            Not Before: May 11 05:15:33 2026 GMT
            Not After : May 18 05:15:33 2026 GMT
        Subject: CN=6a0165f5-b2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:8b:3e:75:93:7c:82:87:1f:9f:f3:b0:f8:
                    18:1b:bd:46:d6:c3:7c:72:61:ac:bc:e8:e0:6a:f6:
                    8f:0f:a4:3d:29:23:f8:8c:a5:e3:65:9c:6c:0b:93:
                    ae:09:8f:17:2b:95:5d:86:88:38:50:ab:62:67:56:
                    1e:f1:74:2b:17:bb:64:0f:b5:ce:50:6c:15:68:c2:
                    e9:b6:04:8e:75:85:77:6f:14:da:14:8d:04:ed:0d:
                    52:7f:a1:59:58:4a:5f:cd:1d:12:30:62:a9:8f:09:
                    fb:b5:f1:ea:3c:d7:4c:ec:b6:bf:7b:e4:e5:0b:b7:
                    d8:4d:bd:e8:a8:85:8d:00:db:01:a7:16:24:40:37:
                    73:fd:fc:51:61:60:e7:f3:91:fc:13:82:bc:e1:61:
                    90:d0:81:17:40:46:a3:9c:4e:d8:74:c7:78:37:0e:
                    23:ed:48:b8:6c:d4:ef:1b:55:c3:91:53:1f:76:d9:
                    92:55:18:03:05:cd:79:97:d6:9f:96:0e:0e:ca:0c:
                    bd:e0:30:a4:a3:96:d3:b2:75:9b:7a:ee:7e:81:17:
                    3a:cc:b8:ac:08:75:bd:63:c8:03:1d:91:93:1c:cb:
                    8a:93:6b:30:86:d5:0c:13:83:b3:ba:5c:18:2f:f1:
                    f6:f6:55:68:78:48:63:18:b1:a3:41:0a:d5:74:39:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C8:D8:60:8A:69:C7:D8:73:28:80:BB:C6:1F:9E:47:4D:E0:20:D1
            X509v3 Authority Key Identifier:
                keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:cf:46:f4:a1:ac:4e:8b:3a:2a:84:d9:aa:29:8c:5b:36:
         93:ec:32:10:18:89:e8:8e:e2:42:45:ba:85:9f:d0:ca:ab:14:
         2f:ca:cf:5f:5d:ca:d7:af:ae:61:2c:1e:64:c6:32:cb:18:3f:
         b4:a0:90:72:ac:59:b7:32:cb:84:f5:95:76:5c:bd:b3:7e:31:
         e5:b6:c4:73:e8:b8:5f:f0:39:57:ee:24:f9:3f:35:37:b0:18:
         8a:ff:50:e2:fb:a2:52:66:cb:d2:27:ab:1f:ad:f2:fb:cd:d1:
         b7:13:8b:91:84:08:8b:39:14:d2:9d:fc:b9:00:c3:1a:74:6b:
         2c:94:43:b6:b4:01:9b:e8:e4:26:af:c6:f9:f9:2a:0b:29:c5:
         37:56:04:69:03:70:56:ab:31:8e:ce:a8:09:23:0f:be:fa:b8:
         1b:47:a5:19:67:24:ff:55:dd:ff:79:22:4c:d1:4f:04:7b:5c:
         da:9d:04:49:26:82:14:47:bf:00:e5:11:97:70:94:b0:c4:8d:
         1b:31:25:e0:72:d7:e1:f6:6c:e2:e0:c9:7c:cb:26:aa:dd:14:
         27:e4:f2:8f:25:53:e1:63:a5:02:a0:fd:03:32:69:6f:88:03:
         89:c7:72:30:b4:56:40:3d:83:16:71:7d:d3:14:69:72:e4:fd:
         50:96:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:13 2026 by rpki-client