Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File:                     o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier:          USbGcv9hS8JEt0mGKBO8jfPlDTDsQ4W/lFPx5qlW/qo=
Subject key identifier:   9E:65:DB:62:37:27:01:3D:15:88:70:49:67:19:E8:E9:3F:DC:09:21
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       0489
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number:          0472
Signing time:             Wed 13 May 2026 00:16:17 +0000
Manifest this update:     Wed 13 May 2026 00:16:16 +0000
Manifest next update:     Wed 20 May 2026 00:16:16 +0000
Files and hashes:         1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: iiq1/4diz8UpAwdib8kIUIP8WvIaSc1sgiPSk4xCLr8=)
                          2: 0B5742C234AD11F1851A1E75B8833773.roa (hash: mrkKKc0cU8SDUFTCBDWltPPNG2EiLfGGhf70i5GAtLs=)
                          3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: rMZ/eL7Ct3fn9wQpOxP0LaOUQqMdK4drCnBgZLgiToY=)
                          4: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 6jrH7luWVFa/EBIKOSXO0MpS17prp6l8m7pIdmNPjD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: May 13 00:16:16 2026 GMT
            Not After : May 20 00:16:16 2026 GMT
        Subject: CN=6a03c2d0-70c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:f0:3f:ed:5e:6a:f4:21:08:2c:39:76:72:
                    af:c2:60:f3:47:3f:6c:1f:bb:97:21:2e:95:c7:b7:
                    48:95:79:5c:84:be:53:2f:6e:f2:52:8c:26:15:ea:
                    e3:63:ed:94:53:e8:38:59:c8:a0:04:97:e6:92:ce:
                    34:c7:51:72:ab:c6:75:23:97:1c:c7:aa:1b:d6:12:
                    0e:45:de:88:b0:91:39:f5:e2:a2:73:7a:c7:f1:9c:
                    72:23:5e:27:47:85:55:41:09:64:3a:13:93:6a:47:
                    0d:63:b7:7a:0a:0c:99:48:10:b4:68:a5:ce:d8:04:
                    ee:43:45:d8:94:9d:67:d5:e8:60:c4:3b:76:85:94:
                    b0:c6:2f:43:18:26:96:05:8a:32:0a:3f:e1:17:71:
                    3b:da:fd:66:f3:14:e3:1e:11:d7:2a:f1:16:da:a9:
                    73:25:db:17:54:49:4b:a4:9a:4a:ec:31:be:3f:87:
                    d3:54:17:fc:27:2a:bf:a9:29:d4:9a:28:4e:ee:31:
                    e7:59:d8:a6:92:30:03:40:62:04:a9:61:f8:10:35:
                    43:7d:24:35:52:1b:c5:ce:7f:68:6e:41:0a:fd:e4:
                    b4:26:95:79:0d:4f:ab:ff:e4:cf:9f:c6:0f:e0:df:
                    a0:b2:68:da:b2:09:1b:c2:83:51:9b:9b:6d:54:b0:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:DB:62:37:27:01:3D:15:88:70:49:67:19:E8:E9:3F:DC:09:21
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:9e:d5:37:0f:a2:36:80:4e:11:97:2a:a2:d0:49:02:ef:
         10:fd:9f:c0:78:20:2b:95:ea:58:d5:3d:ad:6a:30:c2:22:19:
         07:66:30:e4:57:e2:18:91:4e:ca:64:70:81:20:10:26:55:42:
         fc:37:5e:b7:b3:2b:14:33:69:bb:a7:66:1d:35:9a:bc:83:34:
         e1:f2:d1:97:2d:dc:e7:49:a3:66:8c:10:dc:ca:6b:91:00:d0:
         54:66:f5:ff:07:dc:4b:70:b3:f2:91:c7:d4:11:5b:dd:57:e2:
         57:41:21:54:72:9d:20:56:8d:47:00:27:f2:c9:5b:4c:dc:fa:
         78:45:26:14:b4:bf:02:e9:09:cc:b9:31:66:96:8d:d1:b8:64:
         bf:bf:00:9a:67:86:b5:cf:7b:ea:48:e1:ae:d4:95:6c:29:95:
         b1:8e:e4:6c:03:99:df:bf:0e:87:f7:6c:e5:0a:ad:c3:c8:58:
         05:f4:48:ed:66:c2:17:e4:5f:90:fb:d8:6c:08:59:f8:1c:9e:
         37:c0:fe:f9:7c:21:83:2b:3a:6b:2f:1c:12:4d:81:2e:63:be:
         33:b7:9c:a6:2d:7a:5c:3e:f2:a9:c4:44:bc:50:4a:40:fb:7d:
         a1:a8:6e:99:dd:21:fd:c0:77:4d:9b:8e:91:f2:6e:de:c8:5f:
         0d:7a:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:35 2026 by rpki-client