Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File:                     sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier:          sZAu33QmwPOLeXN13etMf9m/SvsCTPb47R2kZqieLcg=
Subject key identifier:   50:FC:49:72:5A:E1:61:44:E8:29:C9:33:F0:AD:5E:2C:8C:30:0D:B1
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer:       /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial:       0DD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number:          0DCB
Signing time:             Tue 12 May 2026 17:55:24 +0000
Manifest this update:     Tue 12 May 2026 17:55:24 +0000
Manifest next update:     Tue 19 May 2026 17:55:24 +0000
Files and hashes:         1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: 2Wws9CM3NNND5qROlQesHRyvnKOl47hBI3HQZO5fMzw=)
                          2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: 5ZMmyMryQucfNp+56gWj7IUfWmQlJppiEYV0jS6pkCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
        Validity
            Not Before: May 12 17:55:24 2026 GMT
            Not After : May 19 17:55:24 2026 GMT
        Subject: CN=6a03698c-406d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:e0:8d:dc:a1:e2:cb:0a:1e:ac:a8:c3:f3:
                    bf:6f:f3:da:b2:87:69:3a:67:12:62:64:3f:20:1e:
                    19:80:3e:27:65:a4:b7:de:8b:22:7c:d2:69:37:a9:
                    4c:a3:3e:a0:82:96:b1:fd:e4:94:5f:cb:d2:ea:de:
                    32:d8:60:86:46:24:72:1c:47:18:a9:b5:e7:90:ce:
                    07:9c:e2:80:28:d6:15:92:78:a1:18:bf:5b:ab:fd:
                    60:7b:d2:fc:b8:65:92:31:26:1d:58:62:22:7e:01:
                    f8:49:17:db:f9:c2:75:46:10:86:d0:19:15:6c:56:
                    c2:e5:cc:2d:f8:80:be:9a:92:b4:24:04:40:50:9f:
                    32:5e:4f:58:be:d6:00:4d:01:66:d8:1f:76:f1:99:
                    7e:4a:fe:2f:0a:96:b5:45:24:b6:5f:8b:70:df:40:
                    77:45:24:e9:03:3a:b0:b0:64:ad:63:81:1b:00:d5:
                    40:b2:2f:61:fe:d4:62:d2:d3:66:b1:fd:09:dd:de:
                    75:c9:b6:ea:80:6b:de:d7:ef:81:13:fa:59:0b:60:
                    db:fe:54:b1:52:6a:7a:94:30:bb:a1:8d:96:8b:c5:
                    10:d8:f6:94:bb:fe:a8:67:1d:cc:cd:aa:ab:4c:64:
                    fb:df:89:4d:eb:83:bb:76:42:6f:25:ba:05:54:c7:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FC:49:72:5A:E1:61:44:E8:29:C9:33:F0:AD:5E:2C:8C:30:0D:B1
            X509v3 Authority Key Identifier:
                keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:82:76:3f:26:ee:0c:2d:f4:b2:f6:b1:64:88:51:7b:92:20:
         6a:d1:94:ab:48:e6:d5:31:b5:66:12:c3:5d:6d:43:eb:59:b3:
         3a:a0:38:60:c2:4b:8c:08:13:81:d2:f7:99:bc:84:c2:5f:a3:
         54:5f:91:0c:22:ba:9a:bd:e4:6d:f2:8d:a1:d8:45:de:44:e9:
         43:28:cb:f7:c3:ef:50:9d:b8:f9:a3:c5:8e:df:e6:19:da:73:
         6d:19:3e:3b:2f:74:3e:86:0e:42:14:31:6b:2c:6e:ee:fd:cf:
         d1:1e:94:df:83:8b:1c:84:cf:78:ab:41:44:75:7f:42:f3:4d:
         ef:87:5f:47:a4:fd:c2:06:e1:1b:c5:b9:42:79:0b:3e:cf:cc:
         e4:af:d5:75:00:0a:b6:5e:7c:2b:c1:e5:20:47:95:99:c9:6f:
         e1:64:a3:e0:1f:32:1a:d8:40:49:4d:be:a9:c8:9a:12:43:76:
         cc:7c:2e:4f:42:07:ca:31:4f:24:02:0c:e3:a3:ee:a2:10:aa:
         de:6a:cf:1d:d7:e7:92:60:dc:8a:07:e0:f0:9c:30:dd:f6:be:
         a3:d5:dd:7e:df:e5:83:75:71:80:07:c2:2c:2a:3c:3d:b1:8f:
         c1:89:1a:e9:eb:0c:c6:c9:14:55:4b:37:55:8e:fe:aa:dd:12:
         36:ae:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:21 2026 by rpki-client