Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
File:                     3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json)
Hash identifier:          ImygGO4Np0d6LFR1gPOuFfzqpuxRG6JP7vZK4OA4zwE=
Subject key identifier:   DD:2B:DA:B0:FC:58:6E:CB:A8:BE:EC:E1:62:1A:63:E2:C6:3C:99:C7
Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E
Certificate issuer:       /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
Manifest number:          0108
Signing time:             Mon 11 May 2026 06:20:49 +0000
Manifest this update:     Mon 11 May 2026 06:20:48 +0000
Manifest next update:     Mon 18 May 2026 06:20:48 +0000
Files and hashes:         1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: a05z+gspTUftMw1QohomAw66uGbsVFNUJdZMz5hVI0c=)
                          2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
        Validity
            Not Before: May 11 06:20:48 2026 GMT
            Not After : May 18 06:20:48 2026 GMT
        Subject: CN=6a017541-5091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:a0:3a:d1:e5:12:a5:3d:e7:17:89:91:55:
                    19:55:6f:fa:4c:1c:26:09:f8:72:4d:a0:fa:00:0e:
                    86:2a:23:03:dc:4b:f4:16:cd:18:81:46:07:3d:e4:
                    47:f0:ef:09:83:6a:75:84:d4:06:8c:9a:1e:35:c0:
                    1e:d8:bb:71:20:80:21:fe:c1:72:0e:5f:af:94:40:
                    17:c5:86:71:dd:e4:80:60:1c:27:24:57:ff:2b:11:
                    9c:36:58:82:0a:1a:ea:d1:70:f1:8f:07:29:69:17:
                    d4:a6:88:02:c9:aa:bc:0a:cc:bc:29:b7:59:34:cf:
                    90:1c:26:82:c3:6a:c1:77:63:7b:b1:7c:8d:70:73:
                    4e:cb:ca:eb:1b:0e:d9:52:69:ec:c5:23:05:3b:12:
                    16:3d:f5:31:1a:01:b2:b3:d0:66:09:67:15:ea:d5:
                    59:77:58:b1:66:dc:5e:e5:14:b6:b3:e4:a8:6d:25:
                    9c:76:0f:e5:b9:d1:4c:16:83:0d:3f:7d:c5:01:f6:
                    57:ea:02:00:e9:ff:11:bd:d7:58:f5:1b:1c:7f:e2:
                    80:db:fb:73:2e:8e:b6:d7:ad:ee:71:cb:ac:3d:f4:
                    0b:2e:4b:b4:e3:03:29:61:a9:2d:25:72:81:91:b3:
                    b7:84:42:6b:b3:5f:2e:e2:ad:20:a3:47:89:22:bc:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2B:DA:B0:FC:58:6E:CB:A8:BE:EC:E1:62:1A:63:E2:C6:3C:99:C7
            X509v3 Authority Key Identifier:
                keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6d:5b:c9:87:8a:d8:93:08:81:03:ca:ed:3f:d7:14:51:bb:
         48:39:f9:09:b2:45:a0:92:67:f1:3e:9f:b5:2e:20:57:42:5d:
         bf:14:a5:75:4b:11:ec:23:a2:d9:02:c7:43:11:8d:c5:62:73:
         7c:c8:24:06:19:95:d7:97:4e:31:13:9d:6d:7f:1b:9f:7c:f4:
         6d:85:5b:6f:d5:de:94:03:43:fb:77:50:63:34:5b:dd:ae:12:
         5a:0d:09:d8:17:5d:c0:db:3f:6e:51:49:40:cc:0c:2f:1b:f5:
         74:8f:62:fa:cb:60:3b:28:e9:2a:e6:b5:8c:78:15:db:7c:6f:
         a5:10:dc:6f:3b:89:83:39:1d:77:c6:b9:8e:a7:bb:80:c3:3d:
         bb:b2:a2:22:46:ec:95:df:15:4f:05:f4:53:3f:18:d1:7a:4a:
         b8:07:86:00:f3:e6:bc:1f:d2:f6:9c:d6:a8:d6:7c:c2:9a:ab:
         6f:12:c8:2e:fc:1e:19:8e:0b:39:bd:bd:d9:d8:16:65:7d:68:
         a4:7d:45:6c:95:41:a0:62:72:13:5d:b1:df:db:3f:20:d5:92:
         34:ab:33:4c:83:1d:32:f3:50:e4:0f:e1:2c:97:ee:c8:11:06:
         b6:d2:42:33:28:ee:e8:03:f7:71:1d:0b:a5:9c:91:c1:19:09:
         b1:4a:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:14 2026 by rpki-client