Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
File:                     1929C75jT2f_WMtqZhL6rTP4cEc.mft (raw, json)
Hash identifier:          sHvj9LvmDD4EQaupqTEVDksZiNxo/DjDVkJiRsbY8Wk=
Subject key identifier:   ED:91:E7:3C:19:83:BD:D3:1F:5E:F1:5B:DE:9C:08:E8:7F:CD:BD:EA
Authority key identifier: D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47
Certificate issuer:       /CN=A91DA5F7/serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
Manifest number:          40
Signing time:             Wed 13 May 2026 08:36:57 +0000
Manifest this update:     Wed 13 May 2026 08:36:56 +0000
Manifest next update:     Wed 20 May 2026 08:36:56 +0000
Files and hashes:         1: 1929C75jT2f_WMtqZhL6rTP4cEc.crl (hash: 8A7n75LS7S9QFa2Kciq/f53YYgpRwCPsHpqlKmU7MEc=)
                          2: 3061C022F1F211F0B442E9B1456F56BC.roa (hash: yVZM9wIf/Y6hAa7HZ+B2izj2yBzbhyTFipocbEptqMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5F7, serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047
        Validity
            Not Before: May 13 08:36:56 2026 GMT
            Not After : May 20 08:36:56 2026 GMT
        Subject: CN=6a043828-5623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:40:f5:d7:a8:87:bd:1e:eb:db:5c:d6:13:
                    a2:9c:aa:0a:76:5f:9c:9b:2d:16:f3:62:d1:23:a4:
                    0b:7b:f2:6d:42:e2:40:7c:16:50:69:58:dc:02:1b:
                    7d:7d:49:87:2b:6a:54:c4:f9:3d:8a:18:d3:38:70:
                    3c:e9:0d:d7:df:a9:76:05:69:e9:b1:02:0d:b2:c5:
                    16:4a:67:ba:4c:45:c7:17:af:ba:03:a8:04:6f:ec:
                    35:84:d2:2b:04:d8:4f:ea:f4:86:58:c4:b3:b3:dd:
                    70:7b:1e:d8:9d:04:36:2a:3b:90:f0:40:de:da:99:
                    32:e0:ff:58:43:d1:7e:10:78:42:54:7a:24:3d:6a:
                    85:73:72:2a:39:8d:c7:58:dc:e8:6a:60:78:e3:3e:
                    64:b3:6b:46:17:6d:ad:f5:e6:47:0b:52:96:83:73:
                    c6:4f:6d:28:d8:46:51:b9:29:ae:03:fc:11:77:3f:
                    b6:d9:30:52:96:a7:6f:ba:6f:38:d8:a5:e7:c3:63:
                    6e:31:00:f1:f9:09:f4:c3:ea:45:58:b6:b3:ab:28:
                    2f:ac:25:d4:5b:3f:8f:7b:d4:34:fe:3d:44:72:db:
                    0d:73:09:ce:0f:6c:5d:6f:1f:35:e3:ee:ac:e8:de:
                    ea:fc:26:f9:df:b9:14:34:2b:08:77:6f:1c:b7:1e:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:91:E7:3C:19:83:BD:D3:1F:5E:F1:5B:DE:9C:08:E8:7F:CD:BD:EA
            X509v3 Authority Key Identifier:
                keyid:D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3c:43:8a:cd:6c:a9:ee:0e:e9:4f:b8:75:8c:a0:cf:7d:72:
         72:0c:ed:a2:65:4a:96:13:60:53:d8:04:17:60:c3:46:49:07:
         b3:3e:8c:80:2d:cf:8a:a0:1c:5a:f6:14:91:b9:1b:61:69:9b:
         9a:2f:02:d3:52:24:01:89:88:5b:3b:3b:29:dd:a4:aa:1f:f4:
         da:11:89:c1:70:49:05:45:cb:88:fb:9f:b3:20:f7:3b:c7:38:
         91:05:03:76:90:92:33:e1:dd:b9:36:02:f1:2d:55:0a:a2:dc:
         e3:83:3a:00:c4:f0:85:b6:1a:69:a4:b3:62:4b:79:9a:db:9f:
         4f:a4:a1:21:b6:cc:cf:a7:1b:9c:09:8a:f4:f9:51:c1:30:d6:
         d6:cf:82:c8:df:63:28:2c:ae:b8:2e:e7:58:87:fd:18:66:46:
         6d:a4:07:a4:bf:78:b7:4b:40:d8:76:fa:c6:6b:6f:de:e0:aa:
         03:a3:60:00:a6:93:c0:be:55:01:be:07:ed:d4:45:05:5e:0f:
         ed:3f:53:f0:bb:54:4f:7f:0c:51:3d:ef:cc:ac:1c:33:a3:ca:
         b0:27:4f:7a:92:0c:c5:ff:1f:e6:c4:00:51:ea:04:ac:75:55:
         a4:6c:37:b6:30:d6:b6:2b:d2:b9:90:25:71:0a:fc:86:a5:9a:
         db:d5:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:45 2026 by rpki-client