Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File:                     PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier:          vFqv9X5SlwopvWPr39HKccoPFm3zyWSSqtiLkV5NKDI=
Subject key identifier:   16:82:23:A0:65:F4:10:18:5D:2B:63:A4:C8:16:E8:EC:2A:46:7B:81
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer:       /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial:       04F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number:          04EE
Signing time:             Tue 12 May 2026 23:52:37 +0000
Manifest this update:     Tue 12 May 2026 23:52:36 +0000
Manifest next update:     Tue 19 May 2026 23:52:36 +0000
Files and hashes:         1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: HySdmhcDfG15xPmobfyTMme1eE/9ZpCmP8YygCgGl6Y=)
                          2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
        Validity
            Not Before: May 12 23:52:36 2026 GMT
            Not After : May 19 23:52:36 2026 GMT
        Subject: CN=6a03bd45-4c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:8e:28:2b:c3:df:1b:b3:0f:91:d3:c0:b2:
                    dc:d3:cf:13:84:d9:f9:c7:7a:93:f1:60:b1:d2:c1:
                    5a:78:a0:90:01:14:29:b3:85:5f:50:af:27:e2:b8:
                    5b:4f:d2:85:cd:e3:1f:5c:e5:e3:16:fc:72:bc:fd:
                    e0:8e:5d:e9:4b:42:53:95:08:c1:67:0f:3b:90:a4:
                    5f:27:48:bc:f2:64:0c:08:af:8d:b0:3f:9d:9b:01:
                    9d:84:08:24:58:94:41:da:b8:92:f9:bb:9e:df:12:
                    43:b3:83:41:51:18:0d:1a:86:33:c5:b6:a2:a3:88:
                    12:b4:92:78:49:45:90:70:f4:52:ca:64:ed:e7:78:
                    36:4c:71:f8:51:34:c4:96:1f:4b:26:07:f9:a5:ab:
                    70:b8:60:af:f7:e9:39:a3:c9:78:3e:b8:7c:2a:39:
                    56:ae:0b:7a:4b:20:6e:d1:c5:1a:ed:04:58:aa:16:
                    45:71:7b:5b:a1:c1:4a:7e:e2:95:6e:7b:96:a0:7f:
                    92:0b:8a:5e:41:63:48:0a:c9:00:d2:97:99:08:4b:
                    de:c9:8e:3b:f3:a7:5f:ae:1b:48:2f:12:5d:96:20:
                    15:4a:73:2f:84:ae:9a:1c:f3:88:80:8d:a1:c8:77:
                    a8:ea:77:26:e8:c0:d2:8d:0d:3e:d0:57:84:94:1e:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:82:23:A0:65:F4:10:18:5D:2B:63:A4:C8:16:E8:EC:2A:46:7B:81
            X509v3 Authority Key Identifier:
                keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:49:be:dd:5b:08:53:0d:02:48:41:8d:0e:2c:85:c7:b7:2f:
         c1:5d:84:e4:e4:d5:06:f6:4c:f4:84:e6:7d:c0:2d:e5:07:dc:
         14:57:a1:b6:de:b2:73:dd:70:46:8a:c9:b1:a8:87:4a:cb:d1:
         9e:fe:68:03:22:e4:13:33:e5:5e:46:21:5a:f1:b5:d2:a1:71:
         93:30:54:3f:d8:ed:eb:36:e3:e9:8d:2c:85:c8:e9:2c:37:48:
         8b:bf:ae:58:d1:3c:c6:d0:36:77:dd:01:31:f9:56:2b:f0:9b:
         2e:e6:67:a0:26:8a:6c:66:e0:dd:7c:1b:c7:55:54:85:d6:56:
         cb:4b:5b:e0:93:4b:f6:9c:3b:f3:f6:dc:cf:f6:7a:80:e0:97:
         95:14:25:cb:e0:78:72:c1:da:02:0d:fb:cc:a6:33:74:d6:60:
         45:48:55:f7:ab:07:38:5e:63:f8:1b:a0:d9:52:df:c5:f0:fc:
         d2:a2:21:aa:d8:91:7b:66:cd:d8:64:bc:f1:5f:11:dd:e9:4a:
         96:d3:2d:b3:81:e0:e8:57:fd:2a:ab:3c:24:63:89:e4:94:b6:
         83:8d:82:27:73:da:36:31:da:f7:59:25:b0:67:bc:91:bd:23:
         b7:ec:29:3f:a9:d6:0d:b9:dc:91:ee:47:37:ba:7c:36:64:56:
         12:a8:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:25 2026 by rpki-client