Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File:                     31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier:          xnY4ZpXLApX968iJXlZ+tvhXk1mSi67JK+Ik4R39OP0=
Subject key identifier:   64:7A:9C:98:FF:05:15:FA:DE:00:C0:C8:CA:A2:29:6F:9C:BF:E3:22
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer:       /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number:          01F1
Signing time:             Mon 11 May 2026 03:28:38 +0000
Manifest this update:     Mon 11 May 2026 03:28:37 +0000
Manifest next update:     Mon 18 May 2026 03:28:37 +0000
Files and hashes:         1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: Sj/oaOAuYtHSPFy/bOKudheGanwueMAKfffwk7kOfcQ=)
                          2: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
                          3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
                          4: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
        Validity
            Not Before: May 11 03:28:37 2026 GMT
            Not After : May 18 03:28:37 2026 GMT
        Subject: CN=6a014ce6-71d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a7:3a:b5:45:df:18:7e:27:80:64:08:8a:14:
                    c3:fd:5b:ae:c0:87:15:09:71:3c:a8:f8:10:06:03:
                    11:07:32:25:a9:23:d9:8b:d5:95:28:db:b0:4a:bc:
                    dd:f1:0b:b8:33:77:f6:f5:66:17:93:95:5b:e5:16:
                    f3:21:f2:2e:c8:8c:93:c2:a8:ad:44:e6:27:90:58:
                    01:71:02:79:1a:69:9d:e4:a3:eb:66:3f:3f:33:18:
                    a6:0a:d8:2b:b0:a1:0e:c6:18:15:0a:b2:ee:b4:c9:
                    9b:2a:be:6d:cb:64:c7:c1:24:af:2e:c9:4f:fe:8e:
                    d3:4c:1e:49:3b:f1:e7:90:7e:d2:50:77:bf:07:e1:
                    44:f1:95:3c:20:cc:f0:7b:5b:b9:8c:ea:d9:1b:97:
                    e9:80:25:78:1d:f5:55:2d:dd:50:06:01:b5:80:bb:
                    6e:4e:aa:03:10:02:f2:ee:cb:f1:13:c9:1d:30:73:
                    84:42:db:76:34:52:e1:ff:fa:5d:b7:a3:17:6a:4e:
                    db:f2:70:f1:b7:e6:63:1b:da:fb:a2:c2:df:50:ab:
                    f4:b4:66:66:8d:8d:b9:9d:e6:9f:9c:34:5c:86:77:
                    31:6e:ca:58:2e:7e:c8:45:36:52:91:ad:f1:49:a0:
                    b0:a2:37:11:46:cb:ba:14:00:41:df:cc:52:36:16:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7A:9C:98:FF:05:15:FA:DE:00:C0:C8:CA:A2:29:6F:9C:BF:E3:22
            X509v3 Authority Key Identifier:
                keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9d:72:ab:11:80:32:ae:48:68:61:3f:e2:c1:98:10:81:8f:
         f7:15:fb:66:5b:6e:74:d1:b1:ec:a9:d7:57:98:f2:4d:68:a2:
         f1:6c:24:18:bf:78:62:c9:47:b7:23:d6:78:a1:b8:fd:5c:b7:
         f5:ff:ba:2b:1f:b0:4e:83:87:a4:7e:01:92:71:fa:07:32:76:
         d0:07:2d:7b:5e:54:c4:bc:cb:73:bd:97:52:48:61:f0:ae:bd:
         e0:4f:6f:6f:5f:47:24:74:d4:03:06:9a:5d:1f:25:5d:50:f6:
         94:ab:67:bf:a9:75:f6:93:55:a9:22:32:43:66:50:a6:6e:45:
         93:e8:83:0c:fb:a5:9c:b3:18:35:d9:ab:ce:40:78:1e:28:69:
         77:31:c0:ca:51:2c:aa:03:61:a1:d7:1a:eb:ba:c7:eb:ab:b0:
         0f:a3:31:76:ed:b2:63:d7:17:36:24:53:80:ad:28:29:40:47:
         c9:2c:49:44:f8:3e:0f:8b:61:2e:40:4a:23:29:05:2d:4f:af:
         0d:f6:c5:0b:95:69:29:a7:5e:f1:d2:12:88:74:26:8b:6c:36:
         f5:27:ef:7d:54:5b:46:7b:3f:51:2c:b4:1c:82:e8:86:27:5f:
         d1:1d:1c:4e:5e:3b:09:fb:e6:4f:e8:ae:a4:cb:24:24:42:c9:
         71:92:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:43:48 2026 by rpki-client