Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File:                     y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier:          8PN7WJ7is3mM0W7oYo/JthAjHeKnQZPZDQo6uXTV+YU=
Subject key identifier:   24:05:0B:42:80:51:CC:BB:2C:B0:A8:DC:45:63:97:60:C1:72:7D:75
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer:       /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number:          0154
Signing time:             Wed 13 May 2026 05:09:26 +0000
Manifest this update:     Wed 13 May 2026 05:09:26 +0000
Manifest next update:     Wed 20 May 2026 05:09:26 +0000
Files and hashes:         1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: qJLU7qeF5OjhAoGkxhqocvum1xLXn1NII0QCnRgYaGQ=)
                          2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: N0mjQ3paWd02SrbPugyLiWD2jfFiR2KxN4PTpCiYbDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
        Validity
            Not Before: May 13 05:09:26 2026 GMT
            Not After : May 20 05:09:26 2026 GMT
        Subject: CN=6a040786-cdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:9d:dd:43:46:94:d6:8a:76:d5:cf:2b:8c:
                    06:7f:d7:68:2a:c8:67:42:ef:a3:8b:8c:1d:31:e4:
                    75:50:28:d9:35:96:9b:05:b3:c7:51:47:2e:29:2e:
                    63:64:fe:1b:25:f2:65:f7:59:34:48:6d:b7:15:39:
                    eb:32:2e:b2:3b:33:c0:b3:49:6a:bc:e5:6d:b9:02:
                    71:33:8d:d1:8f:bd:88:d7:d9:ae:64:75:07:af:d4:
                    a7:85:41:0e:73:c1:fe:20:67:3e:c6:ec:1d:0f:a2:
                    32:65:5f:56:97:b1:96:5a:5d:21:ef:89:04:d4:00:
                    a2:28:45:3a:48:be:bd:a9:3b:92:a9:0d:90:a1:ad:
                    b4:6a:a7:1d:10:05:c4:b8:5b:a7:12:33:91:dc:54:
                    ba:84:7c:9c:71:67:23:7c:11:f7:f0:88:5c:67:89:
                    2c:18:ed:83:0f:1d:07:b7:59:8e:27:af:df:39:0f:
                    58:9c:70:0f:b3:9b:bf:60:38:a4:94:48:01:39:e1:
                    a0:ff:61:0a:be:cf:c2:90:46:ea:e6:f6:44:8a:f6:
                    82:8f:46:5a:fc:be:8d:b7:ef:83:09:f3:9d:df:b6:
                    5c:22:c1:3e:6b:56:17:30:7f:e0:28:47:17:30:05:
                    8b:09:cf:02:fd:d6:04:2e:04:1f:95:b2:7d:28:c3:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:05:0B:42:80:51:CC:BB:2C:B0:A8:DC:45:63:97:60:C1:72:7D:75
            X509v3 Authority Key Identifier:
                keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0f:54:29:b5:4d:83:a2:03:fc:98:8b:6a:09:b6:17:cf:b4:
         5f:bf:aa:7d:08:a2:f4:ed:b0:c2:25:07:69:fc:57:29:84:c3:
         ca:2d:6c:a0:c8:0b:3d:3b:6d:29:b5:3f:ac:e3:df:03:68:72:
         d8:5a:50:97:06:68:f5:d9:0e:c9:a2:ef:96:90:0d:c2:ca:7e:
         4c:aa:be:fa:45:35:b2:ee:f3:93:36:80:51:51:4f:73:c3:6e:
         7c:18:bd:79:ab:f4:14:7c:a1:ed:89:e3:51:f4:39:c4:78:dc:
         ea:7f:60:99:9d:4c:3f:62:e6:6e:8e:11:74:3b:91:83:82:e9:
         12:24:ff:b0:17:65:7c:c8:0d:e1:11:27:54:9a:85:48:49:2e:
         d1:2d:23:ea:65:51:49:d4:68:38:59:27:32:b1:67:ec:bc:f9:
         71:af:b5:b0:c3:bc:3d:6c:55:e2:52:79:66:03:b3:a0:e9:4a:
         fa:10:14:bd:d8:e1:74:66:ac:e0:aa:2b:f9:c0:c0:c1:f2:25:
         66:5d:55:81:2c:32:0d:90:d7:67:c2:5f:84:92:d9:8f:07:47:
         b8:3a:70:bc:d6:c3:45:06:87:af:e1:f1:5b:a6:f9:1f:aa:19:
         6e:5e:d2:5a:0f:37:66:b0:78:e4:1c:ca:4a:7f:f2:ca:2a:b2:
         0c:04:8c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:21 2026 by rpki-client