Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File:                     pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier:          GrzOZnu2fDnxGeljD1W4fZYwCHRYqGL6HwOUyvaIPZw=
Subject key identifier:   F4:4E:D8:87:39:2B:00:40:C9:0A:2E:6D:C3:C1:96:2A:A8:AB:14:1F
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer:       /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number:          0184
Signing time:             Mon 11 May 2026 04:42:59 +0000
Manifest this update:     Mon 11 May 2026 04:42:59 +0000
Manifest next update:     Mon 18 May 2026 04:42:59 +0000
Files and hashes:         1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: XaN2/od9kpzpzoQJ31efq3xcffDvFH1lv4J7NulO2BM=)
                          2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=)
                          3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
        Validity
            Not Before: May 11 04:42:59 2026 GMT
            Not After : May 18 04:42:59 2026 GMT
        Subject: CN=6a015e53-4247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:a6:a9:ed:f0:18:d9:34:ab:ef:77:ae:77:
                    71:08:b3:01:d5:3d:a8:d9:03:05:2f:3b:22:38:11:
                    75:78:46:49:d5:91:69:0b:c8:a8:16:7b:7a:74:ec:
                    b1:b3:72:7a:07:6a:62:39:9e:d7:e3:58:c6:29:d2:
                    f8:04:c6:e0:49:4f:22:35:1c:b5:c7:01:46:d3:51:
                    ae:34:15:39:09:cb:8c:a2:06:cc:ef:3d:71:3d:19:
                    5c:49:0a:e0:91:18:c6:ac:ec:c1:96:47:39:0d:4b:
                    d8:79:c4:7f:59:25:b1:f6:ea:b8:1b:b2:cd:ed:42:
                    34:d5:ec:a7:20:d6:05:61:05:c9:79:03:83:fa:84:
                    fc:22:7a:92:5e:91:cd:36:91:c3:55:06:5e:3d:92:
                    c9:88:c4:84:79:76:5a:e9:dc:a3:a3:7d:b4:f1:62:
                    41:ca:e6:e1:5f:e3:5f:37:fb:49:e0:8e:a9:54:05:
                    7b:b4:3d:fa:89:3d:1f:97:52:47:42:2e:50:0d:4b:
                    d2:72:79:84:48:15:20:d2:e2:16:5b:26:95:cc:ba:
                    62:94:2b:2b:31:be:cd:7d:71:f7:77:7f:86:2e:33:
                    18:c9:f1:08:0f:f4:a1:18:01:e3:05:a0:85:8e:da:
                    63:37:9f:72:44:80:91:06:08:1f:ec:1f:3b:3e:ee:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4E:D8:87:39:2B:00:40:C9:0A:2E:6D:C3:C1:96:2A:A8:AB:14:1F
            X509v3 Authority Key Identifier:
                keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ff:9b:1c:f9:5c:c9:c5:50:14:b6:9a:11:57:63:ad:49:4f:
         d5:57:ff:d9:db:fa:81:d6:f3:e9:ba:3f:bc:a4:5d:ce:c6:85:
         ba:21:04:1b:d1:0e:8a:b7:25:ec:f4:b9:92:cf:1a:da:16:46:
         f7:57:1b:f6:7e:15:54:f4:e1:8d:4b:c0:36:6c:2d:67:c2:35:
         90:57:c4:df:86:16:53:34:f4:40:cb:18:4d:cc:42:8d:b8:21:
         85:6c:fa:8d:de:b0:0d:c7:4b:d9:61:1b:8f:79:6c:c2:62:01:
         2d:65:98:fb:f9:34:de:04:0d:28:d3:73:98:37:3c:e3:fe:85:
         2d:49:f9:c3:63:02:c9:b5:c7:c0:fc:02:59:67:4f:60:b0:68:
         b2:cd:fe:a0:2b:1d:ea:ad:ae:b1:2f:48:2b:39:2b:31:2b:2f:
         63:bc:2f:88:fe:03:ee:71:55:d2:e5:03:5d:6d:42:91:65:c0:
         a1:59:8d:ef:19:f0:63:8a:c1:27:c4:d2:f0:d8:85:65:b2:ea:
         96:6b:2b:c2:c3:97:c1:3e:69:32:7d:f4:b3:62:7c:8f:00:b0:
         9c:7b:01:37:16:c2:27:89:91:8d:d8:d6:8e:42:c4:c2:ca:bb:
         a9:7e:48:8e:42:51:b9:fe:a3:7c:03:05:f5:d8:05:6e:c0:6b:
         6d:65:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:56 2026 by rpki-client