Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
File:                     o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json)
Hash identifier:          6D2R9JHzqD9Vp2dAvV3PM34rujrd19Jtm94VUfD2MCI=
Subject key identifier:   C7:20:37:93:E2:81:5D:7F:89:AD:BE:DA:AA:D9:9A:A5:0A:4A:CC:79
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Certificate issuer:       /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial:       0925
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
Manifest number:          0907
Signing time:             Tue 12 May 2026 20:23:11 +0000
Manifest this update:     Tue 12 May 2026 20:23:10 +0000
Manifest next update:     Tue 19 May 2026 20:23:10 +0000
Files and hashes:         1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: 71mheOjIjrxzTaGr+3dHdwSh453gngFckwZVTLQ5FKI=)
                          2: D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa (hash: e1E68Ho50ngwWh9r7dC17sN0VAiVWs7P5I7wOcaITiM=)
                          3: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=)
                          4: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
                          rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
        Validity
            Not Before: May 12 20:23:10 2026 GMT
            Not After : May 19 20:23:10 2026 GMT
        Subject: CN=6a038c2f-1200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:b2:b7:b6:2f:5c:4d:90:a4:f8:fc:34:d5:
                    1b:cf:e9:51:17:eb:f3:7a:3b:c6:6d:ae:1f:86:04:
                    7c:3d:16:66:c3:66:f4:f2:f6:f1:e6:16:12:3c:c1:
                    4a:3a:4d:62:dd:59:fc:82:38:ea:23:5c:bb:28:d8:
                    74:df:0f:c1:8e:fe:63:75:9f:26:f0:db:ee:c7:7a:
                    12:b8:d4:67:0b:69:71:c9:a2:ef:de:64:a0:1c:57:
                    77:c9:37:fc:8e:84:87:33:af:0d:d3:88:fb:f4:7a:
                    68:b3:80:fe:14:eb:25:b7:e9:fd:84:bb:c3:c0:c2:
                    4f:fe:47:bb:21:93:da:58:c3:b9:96:2d:52:fc:3a:
                    2a:34:78:3c:d1:e7:f7:c9:22:2b:c6:6c:3b:06:5e:
                    45:8c:9a:11:01:fa:81:5b:29:0f:c1:ce:74:0b:e4:
                    43:67:d4:01:cb:96:9f:c2:aa:97:59:6d:aa:4e:9b:
                    a2:7e:fd:a8:76:b8:36:4a:5f:d8:8c:90:e4:57:ce:
                    40:ba:18:e2:05:84:83:39:5d:85:e4:8d:30:d3:51:
                    6a:75:28:6b:5a:54:0e:09:cc:e3:8e:db:a5:61:fe:
                    7d:36:68:a9:1f:c7:a9:db:18:2a:9f:90:29:cf:a6:
                    e8:17:8f:64:be:05:66:49:82:8e:f0:7b:9b:08:96:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:20:37:93:E2:81:5D:7F:89:AD:BE:DA:AA:D9:9A:A5:0A:4A:CC:79
            X509v3 Authority Key Identifier:
                keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a2:0f:26:93:4a:01:1d:29:17:ea:09:95:ec:78:8e:81:c1:
         08:23:0f:4e:b6:22:65:93:5d:4d:ec:25:bd:33:c3:09:8a:c8:
         0a:f2:58:09:f9:5e:b1:e2:d6:23:93:2d:97:2c:b3:8d:0e:49:
         14:e4:14:63:d9:e3:b4:c4:65:dc:b0:99:f8:fe:06:07:30:ba:
         43:df:8c:63:fe:bb:5a:7d:92:e2:3c:de:3c:4b:da:88:7c:e5:
         02:2a:16:2c:a7:f9:8d:5f:4f:90:41:89:79:1e:69:b3:d9:69:
         16:78:4c:8a:e6:f1:56:e1:e8:c9:7d:4a:ec:22:08:5a:9f:a8:
         87:38:4d:dd:e5:a8:29:2c:6a:ba:58:ad:1e:29:c3:dc:82:37:
         12:a3:b8:36:c7:f3:79:a6:1e:34:37:81:c2:ce:82:9e:38:e0:
         56:0a:5b:c0:a5:23:16:41:75:f0:6e:49:cb:89:a5:3c:b9:d1:
         e2:66:d6:38:5d:30:e4:54:ff:99:6b:d8:df:f1:d8:f1:95:dc:
         2f:1e:d4:cc:51:b7:3d:c7:de:ef:88:14:50:d2:e3:19:c8:29:
         0e:b5:cd:84:40:c5:50:4a:59:d9:a5:c2:68:a4:ab:c5:92:f4:
         ac:5b:2f:75:20:03:8f:84:dc:e9:e8:db:2c:64:bf:6b:69:a5:
         50:20:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:42 2026 by rpki-client