Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
File:                     iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json)
Hash identifier:          uv6FM960VZE0faJUDODN3rYcbQP+ogEBmG2Arh3hy+c=
Subject key identifier:   3D:E1:D6:FC:98:68:93:E4:9B:97:3C:FD:6B:46:F5:4C:D8:14:0F:DA
Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
Certificate issuer:       /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
Manifest number:          01B5
Signing time:             Mon 11 May 2026 04:05:55 +0000
Manifest this update:     Mon 11 May 2026 04:05:55 +0000
Manifest next update:     Mon 18 May 2026 04:05:55 +0000
Files and hashes:         1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: bHZLGI43qErC+FwduMj6ZLFQAxInY55MjEt41ZU4rgQ=)
                          2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RzTaCvSWMhcAn1QVwJbuqA3HBhTH7/SoovljwgVLgeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
                          rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
        Validity
            Not Before: May 11 04:05:55 2026 GMT
            Not After : May 18 04:05:55 2026 GMT
        Subject: CN=6a0155a3-13b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:9d:3c:08:cd:4f:9b:d0:c6:e3:4d:27:a7:
                    1d:48:59:b1:bc:82:1f:aa:9d:68:5a:cd:7c:b7:d4:
                    ff:8d:8a:98:30:9e:24:15:d7:ca:09:97:e0:24:32:
                    4f:39:d9:12:4c:1c:0f:2e:96:95:c4:cc:8f:6b:7e:
                    db:38:f8:f4:ee:11:89:30:6e:96:34:4e:69:d7:75:
                    64:47:57:03:55:cc:b8:bc:f6:32:27:39:3f:7f:ac:
                    d2:68:01:55:7a:54:42:72:ff:8d:a2:b8:3c:6d:a5:
                    12:56:42:8b:5d:e4:95:61:16:8f:d2:0c:0f:dc:e2:
                    3a:95:29:cd:03:4d:95:3b:cb:29:65:00:46:80:6a:
                    bf:5d:d3:a4:4d:0e:41:6c:b5:66:b5:e2:35:03:d9:
                    44:0c:93:ba:db:a6:9a:e9:ad:c8:65:0c:39:7c:a6:
                    90:50:55:a7:c7:f1:38:3e:af:30:fb:a0:a9:00:d4:
                    bf:cf:bf:ed:f5:5d:c3:2c:5c:9e:04:1b:02:dc:50:
                    4d:93:32:75:64:27:81:1a:01:ad:9b:75:dc:4f:8d:
                    9e:73:e4:86:66:9b:b1:03:00:fa:f8:eb:fd:9e:7e:
                    bd:a5:1d:24:e5:ad:9d:63:d2:8c:81:c0:8e:30:5f:
                    40:7c:37:07:c6:46:90:e5:dc:e0:9d:c3:8e:cf:b8:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:D6:FC:98:68:93:E4:9B:97:3C:FD:6B:46:F5:4C:D8:14:0F:DA
            X509v3 Authority Key Identifier:
                keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:f2:e1:af:c6:ce:f1:a1:2e:1e:d4:88:49:37:8b:28:a5:
         b1:75:00:de:18:0f:86:f0:84:18:3f:90:56:9f:74:e1:9f:67:
         46:10:b9:fc:b3:3b:cd:7d:33:70:38:88:c7:a2:d2:82:cd:81:
         8f:67:b9:3d:8f:f9:6e:4c:21:be:c4:54:56:ff:d0:f3:be:54:
         ca:4d:1a:eb:88:2d:58:9d:fc:a7:fd:af:4a:61:d8:44:53:46:
         f4:3a:79:8e:bb:30:c4:9f:6c:4c:23:62:38:62:d4:25:c9:8e:
         64:cb:f3:91:54:32:79:01:12:9f:6d:74:39:04:96:31:b2:de:
         69:01:a4:33:26:f0:7b:2c:4a:1d:f8:e1:74:dc:a2:1d:20:1c:
         03:0c:33:f4:8b:ef:13:6e:41:2d:7e:54:81:f1:68:d5:93:7d:
         44:da:65:49:4c:8d:8b:b2:47:60:8b:99:21:18:4e:63:36:b1:
         d9:4a:2a:7a:58:c8:cb:61:81:a3:91:0a:24:3b:b4:28:25:9a:
         00:cd:71:1a:43:26:7b:85:98:9b:1f:7b:dd:1f:eb:43:90:b4:
         ca:3f:d2:2f:82:66:cb:eb:87:ba:9b:1f:aa:86:f1:5d:44:cd:
         11:70:1d:4f:7b:d3:13:b1:ae:04:fa:3d:81:11:ed:c6:18:e1:
         e9:43:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:29 2026 by rpki-client