Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
File:                     -w7kjrCDajqH89uEyQ0NmXQYO7w.mft (raw, json)
Hash identifier:          QkEAAIqONX9B/BV1UQYoXaxf3aLZAzSI2GLdJ3m1g/0=
Subject key identifier:   26:97:C1:3E:47:35:62:ED:03:93:17:3D:6B:CA:08:FE:69:E4:07:63
Authority key identifier: FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC
Certificate issuer:       /CN=A91DF92B/serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 09:23:49 +0000
Manifest this update:     Wed 13 May 2026 09:23:49 +0000
Manifest next update:     Wed 20 May 2026 09:23:49 +0000
Files and hashes:         1: -w7kjrCDajqH89uEyQ0NmXQYO7w.crl (hash: hRZ9e5zlMm8Woshu+WJevxgtuf6C5aw5QCJko1xZYuY=)
                          2: 4B7CEF5A4B5F11F19135E42BB0833773.roa (hash: j9oLKt21URlcYaAs/2+sCC08EJUvzOERXy2T9IPR3BM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.crl
                          rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF92B, serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
        Validity
            Not Before: May 13 09:23:49 2026 GMT
            Not After : May 20 09:23:49 2026 GMT
        Subject: CN=6a044325-79b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:99:f8:cf:d9:2a:e9:2a:c2:39:62:de:fb:
                    d6:1d:71:c8:2d:33:87:15:d5:14:c4:91:b2:45:bb:
                    e1:6d:b9:94:01:c3:b8:ca:0e:8b:bc:11:1c:94:be:
                    df:1b:b2:ab:b4:fb:e5:6b:61:40:6b:1c:31:ad:45:
                    53:06:3e:24:22:e2:a8:53:b6:3d:67:9d:45:08:1a:
                    6c:e2:a7:a9:3d:8e:8f:5f:5f:c0:6f:23:e4:8c:1b:
                    da:48:15:ac:10:76:57:fc:cf:2d:35:c1:a5:ce:e0:
                    48:5d:0a:20:90:2d:46:15:e2:a1:de:48:63:cb:85:
                    4d:1c:b4:5a:eb:2a:5e:c2:10:7e:b2:96:02:65:d4:
                    c2:1e:4a:eb:1d:f5:5e:f2:5e:52:3f:5f:db:d0:55:
                    82:89:b7:05:a9:a0:66:d2:e1:79:16:c8:74:6d:db:
                    ad:0c:73:b7:be:d3:8a:09:01:04:10:4d:ba:5b:7a:
                    f0:d1:8c:94:28:8e:99:93:59:83:06:04:39:35:33:
                    63:aa:8a:fd:c6:2a:48:fa:26:9b:63:07:4b:bc:3a:
                    f0:80:0c:e6:f6:44:65:10:98:91:99:2f:34:cd:c0:
                    6c:4b:44:f2:a5:d0:85:29:b5:5e:71:a2:65:88:60:
                    86:0a:6f:1a:25:76:c9:87:17:34:c5:39:a6:37:bb:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:97:C1:3E:47:35:62:ED:03:93:17:3D:6B:CA:08:FE:69:E4:07:63
            X509v3 Authority Key Identifier:
                keyid:FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:3c:c8:8e:38:f8:42:a9:9c:59:64:c4:26:f7:51:80:e1:
         37:5f:e1:72:90:b2:4f:74:7e:42:58:e6:86:4d:bd:fa:62:5e:
         40:91:78:be:d1:15:29:c6:d0:ac:68:98:6f:b2:8d:d6:2a:69:
         1f:5c:95:e6:fd:09:c2:b8:b4:13:a4:34:10:b3:e1:df:04:91:
         c9:ee:93:8c:fc:4a:2e:62:c9:51:c9:25:58:8a:13:c6:56:34:
         70:95:4b:ee:22:97:fd:e9:33:93:ff:e5:95:c9:6f:84:2c:b7:
         3e:5c:54:b4:97:78:70:95:73:24:e3:ac:20:a6:cc:07:ae:0a:
         ef:db:d4:61:4d:68:eb:e1:c9:82:0f:eb:53:1a:73:a3:8b:c0:
         6f:e6:7e:51:61:40:0c:a1:94:32:e4:bc:63:1a:e7:35:81:cf:
         8b:be:77:6d:39:26:c1:b6:5b:cd:21:0d:dc:25:e6:4e:87:1e:
         ab:6a:37:db:d7:5c:8c:7e:cf:1a:f1:bc:b3:31:ca:aa:db:a5:
         ef:24:8e:05:1e:7a:e6:fd:f2:8c:cd:73:0f:0d:5f:a7:e5:50:
         9c:eb:66:b1:2e:49:62:3b:c9:ba:18:bb:1c:68:a5:6d:b3:ba:
         0e:30:f9:7f:c4:63:10:b1:a0:2a:01:59:3d:ae:f1:42:8d:12:
         75:8e:ed:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:16 2026 by rpki-client