Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
File:                     cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json)
Hash identifier:          s5IWqHfdybvUHjdERt6EMgYcirmdoXG/90oogQwwT8k=
Subject key identifier:   0E:80:EF:B6:CD:E1:55:AC:29:87:F2:47:73:21:32:E4:0C:65:41:05
Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
Certificate issuer:       /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
Manifest number:          01B3
Signing time:             Wed 13 May 2026 04:11:36 +0000
Manifest this update:     Wed 13 May 2026 04:11:36 +0000
Manifest next update:     Wed 20 May 2026 04:11:36 +0000
Files and hashes:         1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: JP9mSvhsOxm/zxT/Kz4m7mK608W6XmGIeF9w6WSSNAM=)
                          2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: 4MonzweCLEnl+TnK4Sp/6IiK94a2qiwQ1O3fFdo89mM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
        Validity
            Not Before: May 13 04:11:36 2026 GMT
            Not After : May 20 04:11:36 2026 GMT
        Subject: CN=6a03f9f8-1006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:ad:1c:a0:b0:a4:ad:d3:78:81:91:de:a9:
                    08:96:fd:fc:19:75:ed:c8:7c:4f:2c:f2:93:58:17:
                    61:71:89:81:a3:62:96:0b:e6:31:d8:9e:83:e3:81:
                    05:4c:8c:73:bc:ec:8a:56:21:2d:6a:23:35:9f:62:
                    2e:b9:f1:2e:5d:cc:ba:44:60:10:de:8b:0e:69:a8:
                    ea:5d:28:26:93:bb:d0:0c:fd:f9:b7:fb:ee:58:4d:
                    55:14:31:98:4b:69:39:95:f9:64:8f:09:52:d6:f1:
                    03:fe:91:89:7b:c1:73:ed:67:4f:6e:7c:fc:0f:71:
                    d2:d2:e1:74:eb:a1:64:77:37:c6:6a:5d:fd:2f:83:
                    35:3a:9f:72:b9:19:50:dd:fd:aa:91:ee:c7:82:05:
                    35:06:ed:cb:1a:bb:6b:87:a1:d7:e2:27:2d:3c:4b:
                    00:20:51:4d:70:1a:e5:e9:8f:40:52:85:93:b4:20:
                    c9:fd:34:37:0d:cc:36:47:27:af:f1:07:df:15:0d:
                    b5:84:9f:9c:88:b3:cf:e7:be:43:38:e6:3b:6b:11:
                    24:ca:86:5a:06:2f:bf:f5:7a:0b:73:1a:71:77:24:
                    38:50:c1:f1:57:47:50:34:b7:38:e9:6d:4d:c5:de:
                    12:2a:d7:8f:d2:39:3f:50:54:7b:4e:3a:e5:e0:46:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:80:EF:B6:CD:E1:55:AC:29:87:F2:47:73:21:32:E4:0C:65:41:05
            X509v3 Authority Key Identifier:
                keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:28:6c:54:cc:5e:4f:be:08:f5:58:f1:a3:20:6b:e2:6b:cc:
         00:6a:17:c6:d0:23:4f:b2:2e:f9:88:5f:22:77:c4:cf:55:d5:
         3e:a4:9f:76:7c:0c:ec:4d:35:ea:bc:d0:67:cd:f0:6a:3f:9c:
         7c:3d:87:94:96:87:ec:7b:ea:3d:0d:80:ea:86:3d:21:3c:6e:
         7a:7a:bd:07:90:77:a4:37:5d:9f:ec:18:49:79:7c:3f:d5:3f:
         73:f7:73:12:aa:5a:84:51:9a:21:e5:dc:49:21:97:33:1a:eb:
         d0:81:52:fc:60:65:bd:52:9a:2a:29:1b:cb:29:49:55:23:3c:
         cb:d0:69:ae:a1:51:56:03:b4:27:f9:34:60:18:6c:43:55:83:
         38:59:d5:7a:52:4d:96:f5:14:a6:5f:85:5d:64:3a:aa:d6:8d:
         09:74:05:58:61:1b:58:04:ee:95:59:51:4e:de:46:74:70:ac:
         67:02:97:04:1a:d2:cd:a8:17:1f:37:a4:eb:fe:55:a9:44:c6:
         44:e8:12:f2:be:25:96:11:bf:89:75:a7:04:eb:9c:dd:11:94:
         59:87:af:5c:bc:09:71:5e:ff:61:c4:3a:73:20:89:3e:fb:08:
         99:ba:b7:31:04:ad:d8:a1:48:de:2b:29:73:bc:5c:95:fe:2e:
         fa:9a:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:25 2026 by rpki-client