Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
File:                     9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json)
Hash identifier:          lFk/wogb/1cAl+Me0ypWjWAP+ajpTY+gTnfnFa4zFoc=
Subject key identifier:   0B:20:55:D7:B9:05:8D:A1:27:26:69:A7:0B:64:AE:00:FA:D0:2A:AA
Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5
Certificate issuer:       /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
Certificate serial:       0D0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
Manifest number:          0D01
Signing time:             Tue 12 May 2026 18:15:53 +0000
Manifest this update:     Tue 12 May 2026 18:15:52 +0000
Manifest next update:     Tue 19 May 2026 18:15:52 +0000
Files and hashes:         1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: I8Sssd5g9TE9kXKksgtxRj9MBqBrBzULk4vVdZkfZ/Y=)
                          2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lt2U8Cu18VjD9LLrlZLJxuz3gscrRVmnZ1LYN6DAgls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl
                          rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3341 (0xd0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
        Validity
            Not Before: May 12 18:15:52 2026 GMT
            Not After : May 19 18:15:52 2026 GMT
        Subject: CN=6a036e58-f4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:f2:7c:22:b7:5f:dd:a7:bb:65:30:31:54:
                    dd:fc:c7:34:d6:9a:a8:1c:28:9a:ce:43:cd:41:16:
                    86:eb:ff:1c:03:65:1d:8a:95:5c:15:29:c7:ef:7b:
                    fc:a7:8d:e2:1e:0e:c4:51:7e:37:a4:d7:4c:ed:f2:
                    9d:0a:a8:56:7a:3d:65:45:9f:27:9b:99:79:03:b1:
                    c4:98:4f:4b:ae:3d:9f:4c:9e:69:c5:6b:5b:5b:cb:
                    6b:7c:9c:7b:cc:9a:2b:f5:99:33:08:26:5d:5c:ca:
                    72:76:55:e1:bd:89:af:2c:3f:42:e7:ad:9e:58:f4:
                    17:fe:d2:4f:bd:f9:e2:e6:ed:4a:20:99:8d:b4:c0:
                    2e:65:8b:c9:23:93:f3:c3:b4:86:39:3e:f5:56:33:
                    3c:5f:64:91:e5:e8:10:10:cb:d7:12:84:1a:9b:82:
                    2e:05:08:24:22:5a:e0:ae:ec:f7:b0:47:7b:bd:3f:
                    eb:73:31:42:19:5b:fe:a8:c0:2c:7f:6a:e5:01:69:
                    5d:2f:2b:93:db:df:f0:7a:10:49:24:6d:f0:96:27:
                    d6:5e:a0:ef:20:e6:2d:0f:9b:06:98:e1:fc:87:a8:
                    3e:3c:3d:af:e6:ed:d3:71:4c:e7:87:61:26:1a:75:
                    76:89:0d:47:e0:a5:d2:f4:75:3a:d0:b2:19:7e:8d:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:55:D7:B9:05:8D:A1:27:26:69:A7:0B:64:AE:00:FA:D0:2A:AA
            X509v3 Authority Key Identifier:
                keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:23:39:dc:37:06:81:03:6e:36:7d:c6:df:2f:93:f9:ae:
         18:2a:5b:c6:c8:6c:34:06:09:c7:f0:96:c6:f2:e0:ed:d9:60:
         a8:8b:04:bd:e7:8c:aa:f9:04:06:f9:ee:92:96:a3:9a:88:cb:
         98:4a:67:95:18:26:a1:94:fd:07:3e:46:80:bf:06:b5:3f:04:
         c5:56:e3:92:9f:20:b3:99:01:10:67:41:ed:cb:91:68:f3:fc:
         ed:9c:f0:43:d9:36:fd:1b:ae:8a:83:30:fe:ef:1f:f4:d2:33:
         02:a1:a0:3a:99:e6:b1:00:c9:6c:aa:a8:6a:1e:94:6a:ba:df:
         bf:5a:74:67:91:e7:7b:9d:cf:3e:35:43:0c:92:4c:c4:96:98:
         9d:b9:f1:03:ae:db:3f:8e:1d:65:a9:d6:ce:50:89:7e:de:aa:
         92:78:d6:3d:17:0c:85:8d:8c:c0:87:63:81:03:c1:d9:be:7e:
         74:26:e7:d0:90:0f:e4:91:e8:a9:d0:26:86:3c:4c:29:bc:e6:
         b2:c0:ff:0d:ba:d3:8f:06:18:3d:88:5d:68:63:7c:2c:6a:85:
         56:7d:75:7f:cb:a2:55:0a:a6:60:db:f4:e3:61:86:22:f6:17:
         6a:77:47:f0:9d:bc:52:75:c2:72:87:62:56:83:82:38:b3:93:
         74:a1:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:06 2026 by rpki-client