Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File:                     3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier:          Mbx8NuQgshMPPi3ioCvgVqJw6xVek9PKRBlIqKX/s58=
Subject key identifier:   99:AD:61:AB:13:C4:B1:B9:B7:30:57:86:51:25:82:03:B0:AD:6B:97
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer:       /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number:          0134
Signing time:             Wed 13 May 2026 05:34:07 +0000
Manifest this update:     Wed 13 May 2026 05:34:06 +0000
Manifest next update:     Wed 20 May 2026 05:34:06 +0000
Files and hashes:         1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: Zabl4t4RScH44E2iBbm2oPpzqQemlJpZmcyPW1C4KXc=)
                          2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
                          rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
        Validity
            Not Before: May 13 05:34:06 2026 GMT
            Not After : May 20 05:34:06 2026 GMT
        Subject: CN=6a040d4f-55bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:af:b2:d2:8e:49:31:66:ce:28:a7:02:0e:
                    ee:45:20:cb:9b:77:25:a0:c0:9e:83:e0:7e:e7:65:
                    d2:93:f1:b8:c0:8c:6c:4c:76:f6:11:f0:2c:62:a8:
                    11:43:80:b4:7a:2b:92:73:08:48:0a:6c:7b:ca:1f:
                    3c:64:ba:5c:0b:c7:b5:45:cf:07:78:85:8d:4f:aa:
                    fc:a9:6a:cf:14:62:ce:9e:7f:3e:4d:5d:53:f6:00:
                    70:e1:fe:ae:f5:69:26:37:72:85:e0:ad:08:0b:27:
                    42:86:a3:ce:41:a3:52:36:52:49:21:c0:0e:fb:39:
                    d1:f6:9e:2f:fc:31:a3:c0:c9:0c:5f:2a:b0:1b:00:
                    73:65:99:50:f4:32:13:2c:59:a2:38:20:03:a2:81:
                    14:5d:3a:dc:6e:94:5c:2b:89:5c:52:c4:8f:8a:df:
                    32:7d:c3:d4:e5:4c:3c:5e:ce:d8:e3:c9:63:d3:26:
                    c4:34:09:35:a9:d9:62:26:b7:d4:1a:41:73:78:3b:
                    e8:9c:54:73:18:84:cd:04:98:1a:78:a6:0f:6c:ce:
                    9f:32:8f:6f:c4:6b:31:e6:01:32:26:d1:87:31:cf:
                    e3:d1:4c:45:e5:e6:0e:d8:a0:cd:d3:9e:1b:d6:52:
                    06:d6:23:ad:7f:b7:24:5a:88:3f:91:d6:3b:f0:a4:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:61:AB:13:C4:B1:B9:B7:30:57:86:51:25:82:03:B0:AD:6B:97
            X509v3 Authority Key Identifier:
                keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:44:ae:5a:ec:49:e4:92:1b:aa:97:56:43:78:e2:da:71:d7:
         01:48:46:55:cb:bd:33:8a:35:b1:06:11:3a:44:5e:f8:e7:e4:
         69:91:d4:98:0f:f0:ca:2e:3f:a8:60:5a:e8:5f:7f:84:f4:dc:
         61:03:eb:c5:b2:51:9e:a9:23:b7:57:25:a5:9f:32:27:bf:84:
         d8:1d:b5:5c:65:b8:3e:40:45:92:73:85:27:98:d1:bc:b5:fd:
         19:e9:f8:ad:39:4e:27:ef:b9:1e:61:d4:f6:35:67:27:d3:db:
         0f:0d:ea:42:ea:34:38:43:03:3d:fc:5d:27:c9:b2:53:0c:cc:
         42:3f:b4:82:3a:47:5c:78:0b:ba:12:05:f7:ef:4b:b7:d3:8d:
         c2:cd:c1:f5:1e:ec:27:bd:b8:c1:18:1d:46:4f:11:33:b1:d1:
         41:37:05:bb:e9:ca:8f:38:9b:78:b5:1c:dd:0e:a8:de:05:55:
         68:01:30:2c:1c:99:ad:24:1c:d9:c9:02:5a:7e:c2:4e:3b:c7:
         d5:d7:59:09:f4:e4:66:c9:f3:f3:8a:62:ac:66:82:5e:e0:33:
         f8:72:95:01:77:45:04:0f:bb:88:07:a2:95:50:ea:0a:cf:00:
         e8:0e:35:d1:00:bf:41:54:0c:8d:b4:c7:a3:d7:63:e6:d6:75:
         30:26:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:52:59 2026 by rpki-client