Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
File:                     IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json)
Hash identifier:          vfyF015ROc/pwfGJbHw2sbWtToHO2mgS6YsFZsGCybM=
Subject key identifier:   71:35:78:62:63:95:33:5C:EF:37:72:10:03:74:33:91:77:14:EA:9A
Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
Certificate issuer:       /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
Manifest number:          03F5
Signing time:             Mon 11 May 2026 00:32:59 +0000
Manifest this update:     Mon 11 May 2026 00:32:59 +0000
Manifest next update:     Mon 18 May 2026 00:32:59 +0000
Files and hashes:         1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: ZiAU1qVjGc9J/ufCyjc9o6EW6MIh4UoigtWYNd0E0M8=)
                          2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: kBFUh+A5t0uG5ToonKBS8JyMqqztNI0BDIiwYVryoTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl
                          rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
        Validity
            Not Before: May 11 00:32:59 2026 GMT
            Not After : May 18 00:32:59 2026 GMT
        Subject: CN=6a0123bb-cb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2f:7d:4e:e5:8f:fd:26:d4:e6:c4:76:aa:cb:
                    c6:8d:1e:3f:33:7c:e5:7f:94:eb:b1:4b:5c:c3:85:
                    10:6b:ba:ed:e0:12:dd:1d:97:75:45:66:34:38:85:
                    b4:41:c3:d2:f8:41:c7:76:d3:40:83:ab:c5:f7:6e:
                    57:62:2f:57:f6:4a:fd:38:7a:33:81:af:4b:3d:31:
                    93:5c:79:c8:69:b5:c6:bf:11:90:91:2b:04:02:0c:
                    ad:46:b9:8e:88:aa:6b:b7:d8:68:a6:4c:71:d1:2b:
                    06:84:f1:89:52:d3:c8:1c:39:f7:7f:fa:d2:fb:08:
                    e9:4d:42:14:71:51:89:11:42:93:19:1d:ff:38:5f:
                    f1:b2:6f:ef:6e:0c:fd:ed:0f:b5:89:f5:66:19:90:
                    13:74:e2:d4:e7:c4:d8:c1:ef:05:ff:c1:ba:38:cf:
                    90:29:b8:cc:d8:29:25:36:fe:bb:c8:f1:b4:11:e6:
                    47:7d:17:2a:88:a7:c3:82:d6:84:98:eb:07:fa:0e:
                    d9:f2:43:00:17:df:5f:a6:08:59:0b:0e:ea:69:af:
                    57:e2:ad:49:8d:2a:a7:a7:22:1c:c0:c6:ca:18:3e:
                    00:d2:b5:43:66:d8:ba:09:e9:ef:83:4f:7b:7d:84:
                    73:64:9a:15:94:24:64:52:5f:85:7b:13:1e:40:cb:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:78:62:63:95:33:5C:EF:37:72:10:03:74:33:91:77:14:EA:9A
            X509v3 Authority Key Identifier:
                keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:7b:b0:82:f0:4b:5d:8e:d0:b7:4d:02:a0:79:ba:89:da:
         07:6b:f2:0a:75:cd:af:52:f5:f8:52:25:0f:ea:32:a2:6c:73:
         c8:fc:6f:5f:68:a9:e3:f2:57:13:03:a9:8f:ff:5d:09:5a:b7:
         29:3d:96:59:d3:9a:26:09:06:4d:37:2f:1e:c7:e4:fb:da:b6:
         e8:e8:6c:fb:6e:1f:10:da:fd:56:9c:db:28:27:57:23:0f:d7:
         bc:62:a7:47:e2:db:f9:08:1c:7f:10:43:fe:61:49:d1:a7:9e:
         7b:18:80:64:c5:97:31:64:f1:de:66:c1:30:fc:81:51:96:a8:
         48:ec:d1:b8:1f:72:f1:a2:84:d9:80:c9:ae:da:8a:fa:ad:f8:
         a3:10:af:59:49:05:e0:32:a5:55:a3:e3:04:fd:be:ac:c9:e2:
         3d:9e:db:de:82:1a:1d:41:ce:38:2c:14:d6:09:93:4a:43:b9:
         e5:43:29:e4:c5:3a:ea:30:61:62:a5:34:eb:fd:4f:a4:e0:4e:
         b4:89:9f:13:22:5e:40:13:c2:65:20:c3:a9:6b:b7:f5:c1:78:
         4e:28:40:c5:d6:6b:f6:17:94:27:fd:a4:80:25:2e:46:dc:31:
         be:93:0e:eb:5c:ae:5a:7e:da:da:b6:65:fd:16:ea:29:cd:3a:
         6d:44:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:59 2026 by rpki-client