Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          K31qMZyiNxHNm1dR0hiugLh06YNVVMySoIVtNRkWwp4=
Subject key identifier:   C2:C2:22:08:C5:D3:2A:42:35:90:99:96:BE:A7:95:21:48:91:93:C4
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0C17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0C01
Signing time:             Tue 12 May 2026 18:53:46 +0000
Manifest this update:     Tue 12 May 2026 18:53:46 +0000
Manifest next update:     Tue 19 May 2026 18:53:46 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: kkvfqrJpc9mFgUNHi9KetsyJp55WmIywl6aPeYVPHns=)
                          2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=)
                          3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: rY5KQkYqT1Rwo0jw8gQc5MX066+hkbql7YzRhVJVrdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: May 12 18:53:46 2026 GMT
            Not After : May 19 18:53:46 2026 GMT
        Subject: CN=6a03773a-68a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:f1:f5:96:86:69:69:27:e6:8d:e7:ad:18:
                    db:a9:2d:6f:0e:c8:92:19:2f:9a:9b:11:25:cb:95:
                    c8:54:c4:db:6c:3c:1e:ba:3f:6e:a0:4a:74:da:e7:
                    db:c6:e5:1d:f2:6b:9b:e6:53:20:e4:ce:f3:1e:41:
                    43:a6:8c:ce:1d:85:02:81:1a:a5:88:2a:29:98:70:
                    74:ad:0b:72:7e:74:91:8b:ba:e3:81:46:4f:51:6f:
                    df:d6:5f:84:48:8f:f4:de:c2:66:82:57:45:e0:d7:
                    e3:1c:17:a4:39:77:da:96:8f:0c:e4:ae:43:b2:81:
                    1a:d3:94:fd:30:cb:f1:80:e3:c6:88:50:ed:de:03:
                    6e:39:76:dc:ee:06:94:b2:55:f5:0e:f1:f9:59:e0:
                    d6:b4:9f:0f:db:aa:be:68:c7:15:0b:50:ce:ae:b1:
                    44:52:b9:16:66:72:c2:af:14:4f:a0:f2:a2:ed:a0:
                    91:7a:6b:be:af:86:f0:c2:05:2c:f5:e3:98:ac:ad:
                    1e:ed:46:a8:b6:a6:13:05:87:82:68:75:3a:f3:a8:
                    ca:d8:d1:80:22:83:90:f1:78:b7:92:70:2f:d0:bd:
                    6c:bf:8c:4f:69:8a:b0:42:4c:f1:ce:2c:6d:fd:81:
                    e3:40:41:e2:f7:7f:75:d9:76:50:fa:18:fd:63:09:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:22:08:C5:D3:2A:42:35:90:99:96:BE:A7:95:21:48:91:93:C4
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e0:17:84:76:3d:96:0d:ee:f2:f1:db:ea:0b:0a:25:52:c1:
         41:86:2e:83:bb:42:3e:54:a4:52:0f:62:54:d6:bc:6a:82:da:
         b4:52:ef:3d:c9:b9:77:03:40:36:98:ed:1a:e7:ee:82:72:38:
         bc:ac:fd:f7:1d:86:f6:f3:02:45:15:f1:d9:a9:af:01:a9:14:
         83:03:ef:3e:f1:25:a6:0e:07:fc:27:63:f0:5b:dc:9f:06:6e:
         0e:11:98:9f:87:71:91:9f:0b:29:97:41:e6:c1:5a:c6:9b:dd:
         c8:07:c1:d7:64:83:5b:0a:ed:bc:44:ce:9e:6a:2c:e1:95:56:
         8f:41:ed:05:21:27:e5:83:9e:7f:3c:49:0b:d7:95:ef:f6:ad:
         d8:f4:05:02:bd:74:d0:8f:bc:76:f6:ca:ae:4c:43:71:a6:24:
         28:b9:b2:94:4c:b8:50:94:09:8a:8a:5a:ac:04:a5:38:7d:cb:
         61:a5:41:8a:f6:ee:c2:5b:37:63:50:f5:d2:cd:02:19:31:d5:
         c1:87:0c:bf:7f:bf:d9:43:35:ca:f9:83:1e:5f:c3:48:8e:c3:
         92:c2:fa:66:6a:92:47:02:5e:1c:b2:4d:2c:ba:c3:5d:63:00:
         86:03:83:50:b4:3b:1f:36:61:16:48:32:e1:45:7b:83:2b:0b:
         81:e8:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:08 2026 by rpki-client