Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
File:                     U8lIF-sTZfHejDwrRAIjmIHBlD0.mft (raw, json)
Hash identifier:          YVYgkP4rtor3azG2EGKceh6+Q1V6XybhxF12F7D+CgI=
Subject key identifier:   17:2E:E9:88:90:F1:59:65:9E:A0:A9:D0:B7:95:D6:69:5C:61:32:13
Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
Certificate issuer:       /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
Certificate serial:       056D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
Manifest number:          054C
Signing time:             Tue 12 May 2026 23:38:06 +0000
Manifest this update:     Tue 12 May 2026 23:38:06 +0000
Manifest next update:     Tue 19 May 2026 23:38:06 +0000
Files and hashes:         1: U8lIF-sTZfHejDwrRAIjmIHBlD0.crl (hash: TyO5vVyE36kwE51vk72uw7wNpSgR9SmEhewf+65DgkE=)
                          2: C9C70AEA696F11EFA4DA475FC4F9AE02.roa (hash: 593+o8elVRSxa1C/n0n+gLQTiowZqiqwRC7MRYiWVSc=)
                          3: C908B72A696F11EFA4DA475FC4F9AE02.roa (hash: W6dcDrB3RcselU+HE/a3UN93ZRWn0E/P0SOzXj78T2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3307, serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
        Validity
            Not Before: May 12 23:38:06 2026 GMT
            Not After : May 19 23:38:06 2026 GMT
        Subject: CN=6a03b9de-93f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:74:ab:0c:e8:db:a6:86:bb:87:99:05:5e:
                    3c:9b:a4:42:03:b0:1f:79:bc:8d:14:63:73:cd:ce:
                    12:f4:33:55:41:d6:41:a4:13:37:fe:a8:1f:2f:20:
                    f8:be:26:53:98:f0:1c:d7:3a:42:17:87:c0:69:6e:
                    d9:0f:67:a6:8f:88:1e:60:23:43:b4:57:c6:f5:59:
                    3d:d7:67:89:da:dc:8c:73:d4:5a:23:1b:3d:c3:e2:
                    b8:a3:5a:47:67:98:da:6f:10:0f:e2:56:7b:4d:3d:
                    7b:33:13:be:35:e1:3e:f1:6e:fe:e4:20:d5:34:c4:
                    f9:f0:5f:c5:86:ff:df:e9:41:e8:6e:7f:7f:5c:33:
                    0c:ac:41:3d:67:ad:f2:44:d8:3e:81:0a:3b:7b:2e:
                    aa:ea:a6:13:b9:ca:43:96:97:c0:5e:23:89:38:b7:
                    4c:f4:26:c6:75:2b:c1:f7:7f:20:46:8f:dc:2b:d3:
                    ec:37:c3:b7:bd:02:0a:73:7f:cc:dd:ec:cf:74:9e:
                    8e:bc:21:31:07:38:e4:1e:2b:67:44:c1:bf:bc:4c:
                    09:b2:e9:50:11:fe:bc:58:e9:95:9f:ca:d4:0d:a5:
                    08:73:87:8b:bb:a4:5f:56:22:da:2c:53:dd:a5:8a:
                    6a:5e:bb:ba:fb:48:4f:63:e6:6c:68:2a:57:36:72:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2E:E9:88:90:F1:59:65:9E:A0:A9:D0:B7:95:D6:69:5C:61:32:13
            X509v3 Authority Key Identifier:
                keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:97:f3:fc:36:53:da:41:07:3e:cc:43:36:4d:8b:5e:84:5f:
         65:0b:a8:87:76:e9:11:07:8f:9d:85:47:9d:03:51:38:be:33:
         4e:38:ed:50:07:bc:30:c6:a0:fc:bc:0c:20:ea:e2:57:f9:8f:
         1d:c6:68:76:51:6c:fd:a9:14:2f:26:30:8a:2c:65:28:11:5f:
         eb:1e:8b:c9:b1:95:0d:57:cc:17:ae:09:c2:9a:d9:64:c8:fa:
         d1:59:b7:c4:b7:93:e9:97:40:14:a9:c8:66:7a:e9:a5:51:d5:
         44:56:97:ee:19:e3:54:3b:cd:4a:52:1c:48:06:9a:d1:b7:9e:
         26:99:05:8e:83:0e:b3:ae:08:25:4f:69:24:7f:8a:47:80:a7:
         be:13:42:7e:f9:b8:24:65:c2:7d:bf:04:40:8d:91:af:db:f5:
         a3:a7:28:e1:f0:f3:7b:61:3c:ca:f3:d3:7f:47:fa:90:ce:75:
         75:0b:54:d4:5f:59:ff:4c:3e:ce:ab:9e:73:35:3d:9c:1d:dd:
         58:7b:60:80:be:65:e9:f4:d9:42:33:7e:1d:3a:7a:0f:64:79:
         66:8f:40:1c:b2:90:74:75:fe:e0:7e:4e:2c:ba:0e:7e:e1:6c:
         79:6c:17:d5:0c:42:15:80:27:20:af:76:1b:44:77:72:43:d6:
         85:ae:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:32 2026 by rpki-client