Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
File:                     A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json)
Hash identifier:          ve/8/FgsHFSzDd3TZOlUyUOeegsPKTM5A//DfiXnI1A=
Subject key identifier:   57:5B:DD:D6:85:EC:1F:7B:7E:94:C5:16:C4:EC:12:34:F1:E3:40:01
Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
Certificate issuer:       /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
Manifest number:          01B7
Signing time:             Mon 11 May 2026 03:58:46 +0000
Manifest this update:     Mon 11 May 2026 03:58:45 +0000
Manifest next update:     Mon 18 May 2026 03:58:45 +0000
Files and hashes:         1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: xrKfPyq63VhV3H2V5FObqGA34zAaCvstiCSENrNxUhY=)
                          2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: jGiJWEhk3dhO1eibIxZXdqF5/Lngdo1Rs0UIzjEFR1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
        Validity
            Not Before: May 11 03:58:45 2026 GMT
            Not After : May 18 03:58:45 2026 GMT
        Subject: CN=6a0153f5-b059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:1e:20:9e:ac:81:67:b5:7c:35:7c:2f:bc:
                    84:ae:72:54:25:f6:01:02:17:6b:cc:c5:c7:a3:30:
                    7d:91:c9:e1:94:8d:3b:d2:27:d8:19:54:31:fe:7f:
                    2c:97:8a:e4:a6:2d:ca:09:2d:98:90:f3:0c:d3:58:
                    09:03:76:5c:19:b6:49:ac:0f:41:54:d7:85:75:fe:
                    72:74:dc:97:9e:ea:22:2b:e3:08:0d:fa:6d:e7:95:
                    70:f4:42:c8:60:dc:a2:36:6d:14:bb:77:25:f5:f3:
                    31:ab:fa:13:2c:eb:c3:5c:85:c7:94:34:8a:24:fd:
                    2d:ef:4e:0d:0e:f0:17:ac:cd:e1:aa:27:a5:62:b1:
                    63:80:1d:ea:15:fc:db:6a:fa:48:30:91:4d:6e:b1:
                    4b:98:2b:4f:1f:f8:fd:c1:e2:bf:00:28:83:c5:21:
                    f9:08:f5:6d:eb:50:5a:bc:d7:a2:22:7d:e9:9a:3f:
                    e8:41:f3:c5:b7:b0:fb:a3:8b:87:94:21:7d:86:d0:
                    b2:64:55:7d:61:86:5a:b9:b2:61:50:3a:12:81:fb:
                    1a:a5:0e:ab:99:fb:14:d4:13:cc:e0:4b:57:2c:2b:
                    e1:68:e1:da:f0:ff:c2:59:dd:31:e0:9d:2c:53:46:
                    23:cb:db:43:80:71:4f:b6:9d:c0:18:f9:2b:70:0b:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:DD:D6:85:EC:1F:7B:7E:94:C5:16:C4:EC:12:34:F1:E3:40:01
            X509v3 Authority Key Identifier:
                keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:60:c1:83:88:41:9e:37:ec:11:5e:b6:2b:37:ee:52:4b:c5:
         8a:93:be:f0:05:e9:ab:6a:6e:6d:10:eb:25:dd:f9:a1:8c:80:
         31:b8:c2:c3:bb:2e:46:83:27:0b:d1:d1:5d:58:91:0e:00:96:
         7e:8c:20:00:1f:3a:d2:73:f2:29:d4:4d:ea:a6:70:f1:d0:8b:
         1d:a8:ad:ef:99:ac:a1:fe:3c:db:6e:0b:80:ee:5c:ee:b4:60:
         ec:77:36:bf:25:90:cb:17:81:b6:88:89:24:8f:c2:d1:39:fe:
         4b:b3:49:84:58:51:55:7f:d1:b3:48:99:64:3c:36:90:3a:d3:
         58:e5:dd:0c:14:79:e9:45:03:6d:18:d9:17:ab:5d:be:24:70:
         58:a0:43:11:76:bb:1a:e4:0d:16:d0:8f:07:ee:bc:8b:4f:66:
         32:9b:75:6e:ab:dd:d3:1e:78:ce:83:ac:1e:e5:c4:24:95:04:
         b9:82:ca:c7:9f:e6:7b:bb:c5:0f:8a:db:be:d5:a7:cc:46:19:
         17:e4:61:13:36:d4:d7:49:39:11:a6:63:4e:fa:58:d1:ab:a0:
         11:e5:0c:85:cd:1a:57:01:63:fe:6a:0e:65:37:7c:a1:a6:8e:
         54:38:85:f3:1e:fe:71:89:01:bb:5a:2c:26:6a:c5:5b:fe:a3:
         da:5e:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:00:27 2026 by rpki-client