Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
File:                     sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json)
Hash identifier:          +HDcd1yBxbhAgF3o5iQnktI1gQxbKwfl55QgTMvo03A=
Subject key identifier:   B5:75:58:CA:C6:36:2B:C5:99:41:1F:C8:D3:93:E8:68:BB:19:41:77
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Certificate issuer:       /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial:       0353
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
Manifest number:          031B
Signing time:             Wed 13 May 2026 01:29:00 +0000
Manifest this update:     Wed 13 May 2026 01:28:59 +0000
Manifest next update:     Wed 20 May 2026 01:28:59 +0000
Files and hashes:         1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: vbIJ1CYOQpVVm3E6HR2kjTQcr0xO7Uqql15cO9XvvSY=)
                          2: 36282A602FB311F1BAA2499190833773.roa (hash: ZhezHZjIimq5M2gqm3AOHJtdV6x+qdTacZqo95wm3Sw=)
                          3: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: 6w7CckVV6rG/tG2tTXK+P2qxsctnyNA9gMl+grLKt2E=)
                          4: 826A614C16D911F183D175C0323D8C67.roa (hash: ycmuh8Nj0r0LWzIjLbjrvo9pWQhXULrkKa+U8zn3Gr8=)
                          5: D14FB73439DA11F1B4AF0311B9833773.roa (hash: 98qj9ACGoLIV5uiZE8wJ/8qhEcL1JY5MLgWrObpjwjc=)
                          6: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: 1eWJrnzvRDCq+R12qi5MDc8zwDz6onremzl8rIyFdWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
                          rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
        Validity
            Not Before: May 13 01:28:59 2026 GMT
            Not After : May 20 01:28:59 2026 GMT
        Subject: CN=6a03d3dc-75a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:3e:e0:6d:de:3b:80:1a:be:0e:3a:db:1e:
                    2c:8f:dc:2c:b4:ad:d7:a3:21:6a:b0:15:cf:80:26:
                    5d:3d:87:4d:33:df:8f:a3:9e:29:79:6a:13:d0:a3:
                    f9:e8:c7:89:88:79:e5:68:e7:c4:31:94:40:a5:b4:
                    ce:db:db:27:59:e3:97:ff:76:39:db:1f:01:ab:98:
                    59:70:e2:39:a5:0e:07:25:fe:bd:54:14:ed:7c:c5:
                    40:ac:f3:f2:5d:01:86:28:a5:4e:c8:0a:2e:1c:68:
                    04:fe:9a:0f:e8:57:32:31:15:1b:43:f3:3c:a0:2f:
                    56:45:93:7f:ee:df:60:5c:97:96:50:e4:d6:bb:a2:
                    4c:09:40:bf:e2:13:d8:c8:20:cf:6a:8d:eb:c8:6f:
                    c7:be:25:05:69:ad:53:03:b8:a0:cc:5a:44:b8:53:
                    1a:55:28:ca:d4:4f:4b:c1:25:d2:5b:b6:86:e3:4a:
                    ba:50:df:26:21:71:9f:95:90:86:3a:b5:8c:e0:75:
                    31:a9:80:85:a7:cd:77:46:30:0f:26:61:ff:90:c8:
                    ed:3f:29:63:13:f8:44:86:74:45:96:32:87:87:33:
                    49:42:ca:e9:7d:76:3b:20:40:74:86:d9:91:c6:e4:
                    c7:88:2c:3f:a2:c4:25:5c:05:a5:5c:77:14:00:cd:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:58:CA:C6:36:2B:C5:99:41:1F:C8:D3:93:E8:68:BB:19:41:77
            X509v3 Authority Key Identifier:
                keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:fe:59:ad:01:69:5c:51:92:db:da:86:37:e1:d8:46:1c:
         9d:cf:3d:33:03:53:b2:8a:42:bf:9a:22:96:f1:b7:24:ea:b9:
         ec:81:40:d0:d9:b9:97:8c:fe:2c:b8:fd:33:20:69:df:a9:e4:
         db:20:d6:08:cf:88:6e:62:3d:5d:8f:0a:c7:67:19:07:b4:16:
         08:a0:9c:65:6b:4d:d2:b4:04:bf:8e:05:c7:af:c7:ed:5b:43:
         eb:cd:5b:13:55:45:0b:db:54:c6:5e:38:02:74:a0:d7:7d:93:
         82:c6:bc:80:72:bf:03:8a:fe:f7:72:64:0b:56:18:c3:4e:12:
         54:70:80:ab:45:ee:fc:54:82:ad:6c:ea:f8:e8:d9:35:92:35:
         18:c6:cf:dc:e0:33:84:7e:1f:66:47:d1:2f:06:f8:e5:54:c8:
         d8:92:cb:0c:85:f8:d1:15:d7:12:ae:fd:ec:0e:af:92:f7:86:
         ca:b8:85:29:db:d9:8a:08:7a:e4:9f:b6:63:50:b8:5f:02:e4:
         d2:a9:33:1f:95:9d:84:cf:46:f2:ea:a2:04:a7:50:a4:fd:88:
         0e:a2:b7:64:d8:45:19:6f:2b:74:f9:9d:7a:ee:3a:a8:e5:c6:
         d6:d8:b3:0a:02:b2:db:99:ef:d6:ca:d2:ba:f6:13:3f:33:dd:
         68:96:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:24 2026 by rpki-client