Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File:                     -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier:          EVn57x2anxJM6tFyIoebIPx0JmRoI+s6rSI/vFCc/eI=
Subject key identifier:   69:1E:E1:C3:CC:BE:94:D5:EB:61:B8:13:05:BB:F8:B8:FB:FF:0A:FB
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer:       /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number:          0148
Signing time:             Wed 13 May 2026 05:21:42 +0000
Manifest this update:     Wed 13 May 2026 05:21:42 +0000
Manifest next update:     Wed 20 May 2026 05:21:42 +0000
Files and hashes:         1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: OBs33HDwnW0OWIQdwg5AYxBzGYRV+VUy+mMzIK6P3Lo=)
                          2: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=)
                          3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
        Validity
            Not Before: May 13 05:21:42 2026 GMT
            Not After : May 20 05:21:42 2026 GMT
        Subject: CN=6a040a66-48fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:10:4f:18:95:58:c6:0c:42:85:b8:7c:46:
                    6f:79:a6:0c:ca:44:1f:92:31:74:75:f6:fd:99:4f:
                    26:71:11:3a:6e:6e:3f:c3:0e:8d:d8:f1:69:3c:33:
                    99:bb:b9:fe:52:d2:de:21:c7:69:46:bf:dc:71:4b:
                    cd:15:21:2f:69:ea:af:2a:7c:85:28:2c:84:cf:21:
                    63:26:25:1f:e4:22:41:61:2c:c9:d0:6f:ab:c9:70:
                    04:91:c2:65:a5:9c:88:b0:69:5b:79:39:a7:54:d1:
                    c3:4d:19:92:bf:5e:21:6c:b2:f0:64:ab:0d:32:b2:
                    53:bb:79:2c:c6:8c:1f:70:c8:00:78:ea:54:92:a1:
                    eb:25:93:11:c7:74:a6:62:61:3f:5c:44:ff:94:01:
                    7b:bb:ca:30:e4:ba:b6:1c:9c:94:08:8a:ae:5f:c0:
                    71:40:f2:72:30:21:51:eb:16:15:7e:69:ab:04:e2:
                    eb:46:70:31:ca:72:43:09:28:bd:a1:24:4c:1c:7d:
                    97:8c:b5:d9:de:02:79:54:05:db:40:5a:a0:b5:a8:
                    25:24:b2:dc:0c:de:9e:65:32:47:18:f9:91:74:a7:
                    0d:fd:e8:c1:7c:99:db:5d:d8:10:fe:c4:2a:9b:52:
                    c6:b5:61:be:e9:64:ee:bb:b8:6b:53:bc:b3:03:3d:
                    2c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1E:E1:C3:CC:BE:94:D5:EB:61:B8:13:05:BB:F8:B8:FB:FF:0A:FB
            X509v3 Authority Key Identifier:
                keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:18:36:ea:04:83:7a:66:1e:2c:17:c8:05:9a:ae:8a:76:
         d4:61:3a:d3:7c:6d:97:9e:88:42:f9:b7:7c:ce:17:be:46:74:
         c7:62:66:fa:b8:c8:b6:1a:9d:92:e7:0f:e5:f8:89:9f:97:3e:
         f4:88:5d:68:66:a5:a8:cb:39:cf:53:ed:77:ef:c7:6b:74:46:
         51:d9:44:9d:db:6e:ec:dd:a6:da:1c:e8:89:fb:1e:53:e9:66:
         25:c3:57:c4:ef:75:03:2c:66:9f:97:54:53:15:29:2e:21:fd:
         8e:8b:57:77:b2:ab:b3:af:f4:47:d3:75:60:b7:c3:af:cc:03:
         0d:ee:47:bd:91:99:82:b1:f1:ad:e4:30:29:91:4b:22:2f:8b:
         66:8f:5b:4b:55:31:53:e5:6e:1f:22:74:f0:5e:8b:9e:e5:22:
         bb:b7:47:82:43:14:84:cf:76:eb:7d:b8:b9:80:03:76:d7:6b:
         c2:10:f7:7a:08:97:8a:7a:11:db:cf:91:e7:06:f4:18:7b:10:
         eb:b4:2e:ef:fe:97:c4:63:46:96:e9:8f:65:c8:cb:4c:1f:30:
         02:3b:42:b3:86:9a:46:11:bf:8c:50:5d:ea:6d:05:be:cf:19:
         1a:de:4f:d5:6e:86:08:4e:96:98:08:3c:f3:05:8d:f7:3f:1c:
         6f:84:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:29 2026 by rpki-client