Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
File:                     oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json)
Hash identifier:          cviuN7QIRY7KrAXKeX7ZmtWquoWekTMYgMOhfRtC4BU=
Subject key identifier:   37:00:B7:F1:A2:B5:AC:18:54:8A:92:F5:F7:AB:63:61:CD:5A:57:FD
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Certificate issuer:       /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
Manifest number:          AF
Signing time:             Wed 13 May 2026 07:23:54 +0000
Manifest this update:     Wed 13 May 2026 07:23:53 +0000
Manifest next update:     Wed 20 May 2026 07:23:53 +0000
Files and hashes:         1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: HjUpU8bHKi1d8kuEH9jomz4XHMs7AxRXcErZHzkmSGc=)
                          2: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: 53ZWjWlrVEqMyyvIGIAG0rSeNEbjukC62nS0Gg37TsM=)
                          3: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: JA5c+7d2qZTIm69DCdbstQqBEizQ9Ks5KiXF+78kjhU=)
                          4: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
        Validity
            Not Before: May 13 07:23:53 2026 GMT
            Not After : May 20 07:23:53 2026 GMT
        Subject: CN=6a042709-e9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:48:11:40:77:2d:79:f2:a9:a0:a6:bc:75:
                    57:39:fd:66:1e:9f:6f:86:17:a4:98:23:3c:f6:ce:
                    06:1a:88:51:dc:40:02:6b:dc:51:e2:b8:b8:7a:a4:
                    48:d3:79:cb:8f:35:3c:f4:4f:69:04:a5:13:36:3c:
                    d7:d9:1f:93:db:5e:fa:fc:7d:9e:44:a3:16:3c:29:
                    aa:fc:70:52:bf:8d:49:4e:eb:5b:b6:61:b2:68:75:
                    ab:f7:29:ce:31:5d:3f:dc:a5:4c:eb:8d:cf:f4:55:
                    9b:20:35:6f:8d:ac:73:7f:dc:24:39:17:34:81:5b:
                    3d:1e:1d:a0:9f:30:a0:a3:ba:2a:5f:76:e1:83:9f:
                    02:3f:56:bc:ed:b5:6c:fc:34:ee:00:51:85:e0:26:
                    36:a9:5b:b9:76:b1:bc:51:bd:38:63:b8:e8:05:38:
                    01:90:e5:17:10:a0:c7:2c:4c:48:2a:cb:10:7a:5e:
                    ca:6f:cd:c7:14:8d:30:93:a6:9a:3a:b5:56:59:4d:
                    16:67:cd:fc:82:b8:05:40:60:90:d9:d0:ba:21:a7:
                    fe:ba:67:f6:d3:d9:a3:63:5b:53:3a:c0:20:ba:3c:
                    8b:ae:c3:d9:9c:ff:9b:ae:e0:c2:4b:36:1b:9e:18:
                    93:b0:3a:1a:86:1b:33:46:d4:c1:2f:fb:78:52:2b:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:00:B7:F1:A2:B5:AC:18:54:8A:92:F5:F7:AB:63:61:CD:5A:57:FD
            X509v3 Authority Key Identifier:
                keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:82:87:f7:f9:93:ec:9a:05:2f:c5:c0:a9:ca:86:6d:13:
         8b:81:c1:d9:78:9e:88:d5:1d:f7:46:e1:97:f0:3e:7f:7d:49:
         3a:49:38:92:11:15:8d:05:bd:ba:3f:ff:7b:02:c8:1e:14:c0:
         58:7d:ab:ff:36:01:64:c1:f3:e5:ee:80:86:81:d8:a7:0e:72:
         b4:c4:34:14:ce:72:45:69:f7:b2:09:e1:14:b1:05:e0:24:8b:
         16:7a:92:40:4d:1b:21:04:9f:f2:41:85:c0:53:21:22:0e:1f:
         32:24:d3:a5:9b:3e:43:17:98:ee:8e:d5:b4:59:f2:1d:2a:ca:
         0b:9c:51:9e:db:da:75:d9:d5:e7:7d:61:05:03:83:9b:5d:93:
         25:e2:ab:24:88:f8:92:66:a1:e2:37:85:cd:20:75:41:61:ac:
         72:15:92:51:e3:d9:7e:1d:29:99:2b:ab:a2:14:22:4c:13:75:
         9a:ce:21:24:b1:7e:13:39:2b:62:e2:4b:61:27:04:af:4d:f5:
         7d:df:44:e6:58:eb:27:00:fa:47:74:22:02:9f:61:38:c4:c7:
         25:fe:d3:80:98:1c:31:f1:e8:4b:ac:62:8d:71:b1:28:52:a7:
         de:83:58:5e:ed:90:58:a8:fc:0e:b4:17:20:27:7a:66:a8:c5:
         dd:f5:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:31 2026 by rpki-client