Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
File:                     MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json)
Hash identifier:          2crGmOttrb9uogEsfDhqtbei/ZTksye4Jh5J6/dAlOQ=
Subject key identifier:   4A:E2:3A:9F:7A:03:33:D3:B2:4F:83:42:8A:1E:6B:A6:20:46:66:2D
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Certificate issuer:       /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial:       1549
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
Manifest number:          1533
Signing time:             Tue 12 May 2026 16:49:24 +0000
Manifest this update:     Tue 12 May 2026 16:49:23 +0000
Manifest next update:     Tue 19 May 2026 16:49:23 +0000
Files and hashes:         1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: tlgRmmasZ6k1nwW+lFbuyuKXuSczVeo6z3ngois+X1s=)
                          2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: cIxtJWgcXzpekN854h+Gn0iT4S0YYTFuZrY9rIh4a6M=)
                          3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: 0s446asxUq4TUjj3iz0ZGInEQ2S3Qugk+pBUyrJhQAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5449 (0x1549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
        Validity
            Not Before: May 12 16:49:23 2026 GMT
            Not After : May 19 16:49:23 2026 GMT
        Subject: CN=6a035a14-b81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:12:a5:84:1f:7c:76:30:32:9e:16:4b:61:
                    cf:a3:ba:f6:2a:db:ff:d1:0d:83:7f:b7:ab:c3:52:
                    1c:9d:4f:80:3f:df:da:e9:38:47:ee:02:c5:df:d4:
                    f4:d6:61:33:4e:72:c6:4e:56:3e:d4:22:ee:af:1c:
                    a9:4a:e2:80:04:b7:08:36:fa:2f:71:54:5e:a1:aa:
                    84:78:2b:8a:09:7a:0d:5a:52:e6:2b:58:f0:ba:97:
                    18:29:b1:5a:36:50:bb:c8:13:39:18:59:2b:3c:41:
                    7d:0a:21:36:ad:fc:a7:8c:2b:15:d6:d6:dd:18:bc:
                    ac:9e:5a:e6:ed:67:c7:59:38:ad:46:51:e5:02:35:
                    ff:ca:3e:32:c2:d1:4f:b4:ac:37:c2:04:a8:53:f9:
                    ce:08:4f:43:92:f1:d2:ba:9f:44:b7:27:15:5c:30:
                    18:b6:b0:e9:a1:81:b3:4a:d1:54:d9:bd:68:71:a5:
                    26:19:d9:29:d7:39:43:1f:2f:fb:8e:ac:3f:a4:46:
                    fd:2e:13:5d:d3:cb:2c:6d:2b:83:c3:01:de:99:8a:
                    a0:7e:d1:08:93:6f:9f:42:50:a9:f2:b2:a0:90:00:
                    e6:c9:13:33:34:1b:7d:03:79:08:36:83:0e:b5:6a:
                    58:3e:35:8c:92:4f:c8:8f:61:13:1e:5b:f0:d5:f4:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E2:3A:9F:7A:03:33:D3:B2:4F:83:42:8A:1E:6B:A6:20:46:66:2D
            X509v3 Authority Key Identifier:
                keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:5d:61:38:c9:22:0b:2f:19:78:6a:c9:34:fc:d9:40:63:87:
         56:ff:5d:96:de:dd:99:06:88:c0:25:b6:b9:b2:95:39:31:5b:
         37:ff:9c:bd:5d:c8:70:08:26:5f:e0:5c:6c:37:f5:52:82:59:
         5d:65:0c:ae:4c:8e:42:bc:a4:a7:32:28:81:b9:bd:ef:bc:ae:
         8e:97:74:c3:9b:f3:cb:35:c2:e5:f0:34:62:d0:cc:29:e4:1b:
         4d:04:82:e9:e3:6c:dd:b1:27:0e:6c:54:6d:e7:13:2b:0a:92:
         08:41:42:85:0f:f5:ff:0b:a7:e0:9d:92:99:f6:55:ef:d5:c6:
         fe:ed:07:3b:09:ae:2d:ac:27:9b:30:f3:ab:f5:54:9e:7b:a3:
         61:75:8d:12:1e:a0:3d:8b:12:7e:7c:72:1c:3d:4b:da:27:f5:
         27:af:8f:7a:86:18:b5:4d:71:22:ee:7d:2c:55:fd:df:83:b9:
         25:7c:5f:6d:d8:89:2b:58:e0:a2:b2:86:dd:35:09:a2:1b:30:
         e7:59:98:3f:a3:a8:b7:41:99:2f:0f:42:a0:9e:a8:7e:8f:06:
         aa:9f:55:b7:81:78:23:88:7e:3b:a8:a7:cf:79:c7:65:8f:c3:
         96:c2:af:40:98:d8:45:a1:8c:f8:87:01:48:b5:c6:4b:7e:bc:
         6c:30:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:25 2026 by rpki-client