Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
File:                     rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json)
Hash identifier:          TXGuXgqq08pMBjwwFGOrYLEkcrxgBOtChX9PF8YvHmo=
Subject key identifier:   D9:A5:77:8C:75:BE:A7:7B:55:39:9D:ED:41:9B:FE:41:48:6E:5E:C7
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Certificate issuer:       /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial:       095B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
Manifest number:          0950
Signing time:             Tue 12 May 2026 20:12:47 +0000
Manifest this update:     Tue 12 May 2026 20:12:47 +0000
Manifest next update:     Tue 19 May 2026 20:12:47 +0000
Files and hashes:         1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: gBKhMVymbvKosrGlhmnMEriQ7UNSEiwEjv1G/xAgUAE=)
                          2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: +Pd2aWEI7828mfSanwxonyoz5UIPIwJJCaXRRPJ3RbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
                          rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395 (0x95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
        Validity
            Not Before: May 12 20:12:47 2026 GMT
            Not After : May 19 20:12:47 2026 GMT
        Subject: CN=6a0389bf-ffd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:97:72:77:db:20:bd:53:06:83:52:c7:95:
                    be:ec:0e:32:2c:97:69:33:85:d0:39:f4:95:f9:60:
                    05:0a:d1:27:19:c0:91:f1:5f:5a:d5:bd:e0:a1:c7:
                    3e:2a:38:81:b9:ef:68:26:3a:fd:24:0b:50:16:fb:
                    55:1e:00:58:78:9a:3d:d8:57:2b:45:81:71:2f:44:
                    5a:9e:4f:73:30:62:c1:8b:45:4d:f7:f9:1d:a1:4d:
                    c6:46:90:a6:e3:77:a8:c3:a8:2f:61:d1:c0:ac:18:
                    91:7a:6e:dc:9c:ea:d2:be:b2:b1:ee:7a:4f:ec:0d:
                    4e:54:27:f7:fd:da:a2:5d:b8:b2:21:90:77:ab:fe:
                    85:99:1a:7d:2c:ec:a5:b0:89:f3:6f:89:35:1a:3b:
                    c5:8c:db:96:56:cf:c6:8c:80:4e:26:70:7d:df:bf:
                    c6:93:b2:ee:e5:41:4e:7d:f9:a0:08:fa:72:1e:66:
                    5e:c3:36:02:1d:54:a7:b3:e8:cb:7d:9f:a0:ff:98:
                    b6:02:e1:be:3e:61:26:3c:ef:13:d6:a5:79:80:be:
                    e2:36:ec:79:b8:7d:aa:60:52:5c:b2:c1:a8:e5:b0:
                    b5:52:7e:0c:9b:3e:8d:54:0a:42:ca:84:c0:e9:e4:
                    48:45:ed:16:89:d0:d8:52:90:de:14:f0:d6:00:4c:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A5:77:8C:75:BE:A7:7B:55:39:9D:ED:41:9B:FE:41:48:6E:5E:C7
            X509v3 Authority Key Identifier:
                keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:c3:a8:39:be:72:95:a3:ca:df:5d:aa:9d:f3:43:b7:bb:
         4b:12:4f:b7:25:d2:4e:ef:97:3f:b4:d4:68:07:ed:7c:27:34:
         7c:68:c2:ed:2b:14:cd:af:06:e1:4d:a4:00:ad:9d:bf:f6:a4:
         6f:9f:8b:2f:b6:78:64:3d:f1:d4:e2:ee:b0:93:3b:4e:fa:0c:
         73:69:1c:f2:2b:68:c4:7e:c9:ac:56:6d:23:9e:23:57:85:3b:
         d8:29:f7:e9:ee:26:91:ae:38:82:24:bb:ae:85:8e:ba:5f:d8:
         57:db:4f:65:ff:61:88:9e:19:d6:e5:dc:cb:a8:8b:4c:03:4d:
         96:f6:14:97:ff:0c:ef:76:a7:c8:10:c1:51:29:ef:26:92:95:
         00:6f:7a:e3:7a:d3:32:54:b5:7e:da:0b:0f:8c:3c:8e:7e:ea:
         6e:97:24:e0:30:ed:39:2c:ea:d6:6b:5d:99:6e:fa:9f:25:76:
         7b:ef:0d:5a:35:e9:e3:7a:01:a6:25:d2:ec:86:5c:68:38:d0:
         93:08:4b:36:18:32:66:91:d4:78:14:63:c8:4d:9e:86:72:f0:
         cb:65:78:0d:4b:30:26:4a:84:62:3b:3d:2c:0a:00:18:fb:1a:
         74:59:3b:a9:fb:67:c1:8f:e1:9b:cc:da:ea:2d:ba:68:5a:22:
         a0:ad:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:06 2026 by rpki-client