Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File:                     fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier:          Nn4r2hPBFyxHVaMUHXVdwzyOw6sc4dRzmBg+FQJgDUI=
Subject key identifier:   8B:9D:3A:59:4F:35:4D:AE:25:2C:9D:27:F6:B6:5F:A8:BC:DD:95:00
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer:       /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial:       3548
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number:          3541
Signing time:             Tue 12 May 2026 14:40:05 +0000
Manifest this update:     Tue 12 May 2026 14:40:05 +0000
Manifest next update:     Tue 19 May 2026 14:40:05 +0000
Files and hashes:         1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: j7sz3H953PDFGHEqbFUClwqowsaJPKNl+x2qxbIDIsI=)
                          2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: HjtXlASFfUyesyuq12S6h4/nNp1al3EbTL9dYMiuAwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13640 (0x3548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
        Validity
            Not Before: May 12 14:40:05 2026 GMT
            Not After : May 19 14:40:05 2026 GMT
        Subject: CN=6a033bc5-2e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:74:31:df:ef:44:4d:40:92:65:d2:22:b2:
                    7c:52:b2:2d:9d:63:41:01:7d:dc:09:77:1b:4d:e0:
                    73:0a:21:62:8d:ab:9b:b2:eb:57:ca:cb:c8:52:1a:
                    76:53:68:a2:87:43:3d:53:40:a3:ef:34:84:7e:6c:
                    c6:6c:9a:d7:65:13:46:6d:28:b2:45:4f:a3:c3:38:
                    27:93:2e:98:e0:7f:32:84:4d:25:33:7a:0f:11:85:
                    33:1b:85:d1:f9:64:39:ef:97:99:56:e1:74:c2:66:
                    e3:e8:1b:31:71:e1:56:84:22:c1:b7:32:a3:2b:16:
                    25:1f:80:65:de:05:93:94:96:49:b8:26:b1:a2:ea:
                    68:91:cb:dd:43:61:43:49:2f:d9:50:13:39:fd:f9:
                    76:ef:9f:f2:3d:46:e5:96:30:6f:44:af:f5:25:1b:
                    27:10:ed:e2:4c:6e:2f:19:0d:fe:66:e6:9c:1b:26:
                    0e:e9:12:93:5f:2b:2e:88:c9:69:4c:a5:99:9a:27:
                    89:3d:54:20:0f:9f:82:40:52:f5:08:af:d9:e3:34:
                    3f:b6:4a:b4:14:db:17:91:9c:ea:07:03:ac:4f:83:
                    1c:cc:43:94:35:90:54:4a:37:c4:b7:bb:e7:51:5d:
                    65:72:a0:3c:5a:9d:a8:c1:9b:da:13:66:3b:b6:97:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9D:3A:59:4F:35:4D:AE:25:2C:9D:27:F6:B6:5F:A8:BC:DD:95:00
            X509v3 Authority Key Identifier:
                keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:bd:6d:b3:71:22:c3:ae:cd:aa:75:8e:bd:da:78:16:ce:67:
         14:4a:5c:c2:8d:86:3c:37:83:c2:73:41:49:c6:cc:5e:0e:45:
         73:2a:b6:55:70:00:34:de:59:19:34:67:f9:81:2a:a8:00:4a:
         1d:fc:ba:0a:10:77:66:0d:df:1f:a3:74:16:42:b1:10:40:4f:
         13:94:bb:fa:44:59:9b:a2:22:58:13:69:f7:32:95:fb:e5:5d:
         86:4b:33:ea:cb:c4:e3:9a:18:9c:09:67:20:67:b0:73:df:37:
         6a:f4:47:46:61:79:8f:f8:02:a4:e6:43:24:01:17:b4:df:70:
         a7:99:dc:c1:ce:80:16:a6:13:ac:c5:26:5a:9a:7a:86:82:bd:
         08:91:28:16:c7:3a:82:12:d2:bf:10:01:f6:8c:97:e0:24:37:
         22:c6:bd:ad:ca:b9:0a:8d:d4:f3:a0:35:90:54:c9:bd:cb:50:
         62:8c:0b:43:71:b0:b5:d1:b6:6f:c4:cb:84:c6:29:2d:ca:9d:
         58:4a:e8:44:c9:cc:e6:1b:d3:e2:38:8e:27:8b:06:dc:06:4f:
         8b:8a:ad:6f:7a:c3:c1:04:ab:6c:10:3f:8d:05:93:ea:7c:7b:
         43:01:e9:a9:73:d2:ec:36:a1:94:d7:74:4f:27:08:8c:56:b7:
         f8:ff:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:41 2026 by rpki-client