Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File:                     9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier:          R9ah+zW1GPVy9/jJOKIGxwkWYiZhHRHbAf3PcIVOTXU=
Subject key identifier:   53:6B:5F:83:FB:F5:47:6F:1E:35:97:95:1B:26:47:67:59:2A:B2:51
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer:       /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number:          72
Signing time:             Mon 11 May 2026 07:57:13 +0000
Manifest this update:     Mon 11 May 2026 07:57:12 +0000
Manifest next update:     Mon 18 May 2026 07:57:12 +0000
Files and hashes:         1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: dBMwmipgG3ZBf0f5HWvbrXX5d0T7KluOMQXV8Jqw+E8=)
                          2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: ABz2wyyPJmQiKwD0Cid0vK+VZEE/DgOmkSrsLq1Yrtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
        Validity
            Not Before: May 11 07:57:12 2026 GMT
            Not After : May 18 07:57:12 2026 GMT
        Subject: CN=6a018bd9-f699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:8f:77:6d:87:18:9e:85:93:32:26:c5:56:
                    90:39:37:19:d4:dc:95:8a:42:a5:31:95:6f:08:61:
                    56:90:63:b0:43:b9:59:21:31:69:60:ca:d9:39:a4:
                    5b:d9:d8:43:a8:bd:10:90:80:8b:5b:30:55:67:8d:
                    5b:d5:15:96:63:f9:e7:0f:35:98:06:d3:e8:76:37:
                    17:fc:b4:03:8c:fc:3b:2d:3b:a4:14:b4:70:fd:09:
                    b9:90:88:42:93:99:f1:ad:3a:57:90:a7:af:44:a6:
                    f2:30:6e:c9:89:22:ca:c7:42:c3:0e:b8:59:46:32:
                    d5:4d:e8:3a:c5:75:1c:22:03:5b:8b:89:cb:30:ff:
                    a7:19:ef:20:5f:66:8f:4f:b6:c3:f8:b5:86:14:6f:
                    1f:af:41:e1:4f:7d:b8:c9:f7:33:bb:b3:3f:21:14:
                    de:0d:1d:6f:c0:27:f4:d1:61:5e:53:e7:2f:4a:e5:
                    91:e5:48:b1:e3:e7:72:32:dd:dd:24:d2:e3:e1:10:
                    77:b5:c3:ad:f4:6f:ce:70:33:43:97:22:19:08:ff:
                    d1:f9:dc:b9:1c:7b:0b:01:9c:12:3a:45:73:8c:ce:
                    4b:e4:b2:6f:ad:1b:a4:57:79:55:fe:88:ec:33:2c:
                    f6:5c:b6:64:66:2b:21:44:2e:e9:77:ad:76:76:d8:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6B:5F:83:FB:F5:47:6F:1E:35:97:95:1B:26:47:67:59:2A:B2:51
            X509v3 Authority Key Identifier:
                keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:66:7e:c0:2b:20:be:87:f2:fc:af:0e:4a:dc:25:3f:91:94:
         f5:07:34:18:4a:a0:10:6f:06:76:2e:14:f9:fc:d0:2d:8a:39:
         15:bf:58:64:8d:b5:a9:c3:3d:23:79:c0:c4:9b:d6:27:17:6e:
         6f:b0:76:9a:15:6f:62:b1:b5:4f:0a:5d:27:e5:6b:f0:2c:70:
         20:70:79:e5:c6:0c:3b:59:5d:c4:38:e6:3c:4c:de:1c:5c:2a:
         ae:dc:57:6a:17:93:9a:34:9c:74:bc:b5:a2:fe:55:d9:7a:a7:
         91:54:c0:56:07:83:5f:af:86:a6:90:7f:df:f6:ae:5c:c0:ce:
         50:c0:19:ff:5f:ce:7b:54:a6:5d:c7:f5:da:04:df:9c:48:a3:
         d7:aa:57:73:7d:35:55:23:43:93:c4:6f:3a:06:dc:ab:2d:58:
         26:15:f8:70:72:5e:1c:98:32:98:b6:d1:ff:c2:35:26:03:4f:
         91:80:53:1d:4d:2f:2e:51:88:8d:df:15:08:c4:19:c1:c0:8c:
         78:a3:e6:14:73:ab:dc:ed:38:bc:60:ff:45:dd:6c:75:83:63:
         fb:76:b9:e6:99:0f:c8:2c:30:67:68:1d:49:7c:95:3c:2a:0a:
         e7:7a:16:fa:dd:56:e5:ef:73:1d:fe:9d:2c:2e:0c:bc:91:74:
         82:49:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:28 2026 by rpki-client