Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
File:                     2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json)
Hash identifier:          AUsARDctnk3roZQN7SDShbUf45kjC9zuhmGOsZRFY4A=
Subject key identifier:   15:CD:A0:51:36:16:A0:89:72:44:80:BD:48:10:35:FF:BF:23:2B:C3
Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
Certificate issuer:       /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
Manifest number:          D1
Signing time:             Mon 11 May 2026 06:53:07 +0000
Manifest this update:     Mon 11 May 2026 06:53:07 +0000
Manifest next update:     Mon 18 May 2026 06:53:07 +0000
Files and hashes:         1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: 8oncukNWXLsBPOKtvDhMcK/aCQBSusnpLm4ljQCDlvM=)
                          2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: tWtaLRbtDVtWiOlLn3BiRHdz2Yx30phG2bPvS2Dv5GU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
                          rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
        Validity
            Not Before: May 11 06:53:07 2026 GMT
            Not After : May 18 06:53:07 2026 GMT
        Subject: CN=6a017cd3-33b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:29:3a:ed:f1:d9:10:1d:84:4f:4e:d0:22:
                    27:c2:94:e5:92:d5:2d:11:df:a3:90:2c:59:47:90:
                    2a:39:3a:93:e7:d7:5c:ab:58:92:6d:d0:f5:68:4e:
                    72:1f:8f:70:16:eb:61:44:be:eb:f5:4f:1a:08:a8:
                    60:c1:06:75:3b:c7:54:89:39:6f:52:40:7d:76:42:
                    60:a2:5b:6f:9d:2d:31:a3:1b:9a:8e:c4:9b:1a:d8:
                    d7:76:74:74:1a:4d:b6:55:23:51:f0:08:52:8a:8a:
                    0b:ec:49:ff:7c:e1:dc:97:90:46:71:17:bf:44:15:
                    db:62:f2:98:64:8b:8b:90:78:9d:1a:b2:25:49:03:
                    ae:0b:77:81:86:fa:e8:0c:0f:98:0c:18:23:7b:dc:
                    8d:a0:97:e8:b7:64:68:4b:8e:1f:19:b2:5e:c5:68:
                    6e:d2:e2:27:e3:25:56:79:56:88:a2:65:78:98:a0:
                    54:5c:ca:6d:82:1b:a6:1e:47:12:21:01:62:82:f0:
                    8f:d4:e2:b0:0c:74:7d:5f:81:1c:79:45:bb:4d:4a:
                    24:36:f5:18:5a:b8:b1:89:2a:6e:5a:b3:5f:cd:9a:
                    26:b8:24:9f:c0:8a:b9:dd:a0:7a:16:2d:4f:8c:20:
                    73:f0:95:4f:96:ea:77:ef:21:44:de:fb:a3:31:18:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:A0:51:36:16:A0:89:72:44:80:BD:48:10:35:FF:BF:23:2B:C3
            X509v3 Authority Key Identifier:
                keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b0:6d:5c:53:81:c1:c1:03:68:f1:b5:02:b5:1a:7f:aa:62:
         22:78:c0:21:9b:d7:cb:25:b6:de:44:eb:94:49:c0:c0:4c:06:
         28:2a:6c:46:30:b0:a5:c5:0d:0b:42:e8:2c:74:a2:f4:56:15:
         36:fb:ac:ce:5e:fa:43:2d:2d:d0:e3:51:13:a0:1e:ee:c5:6b:
         2c:15:38:4f:db:cf:e5:d8:55:23:da:bb:bd:cc:40:68:3b:b5:
         25:14:8a:8f:80:10:55:4a:2c:6d:98:9c:13:81:f5:a0:81:e0:
         0e:02:e7:0e:7e:72:45:d3:c5:3d:0d:09:6f:ff:be:f3:97:95:
         63:b4:31:fb:55:0c:25:6d:4f:85:f4:f2:03:4a:6c:15:c7:ec:
         0f:b4:c1:a8:39:11:63:1e:6c:97:82:73:6f:e7:6d:4e:33:31:
         04:7f:a8:99:f5:95:4b:cf:4b:54:a8:fa:07:4f:95:c3:11:1a:
         c2:5d:83:b9:da:6a:36:35:12:7e:bb:45:29:ec:1f:f3:b0:a6:
         98:66:61:9a:17:19:64:a9:b3:9f:6f:f5:62:96:8b:82:fc:27:
         8e:7e:eb:e5:89:20:d5:a6:70:b2:16:b4:df:41:2d:6d:b4:e3:
         48:78:d2:47:be:85:6c:9e:38:7b:48:50:e3:df:05:34:f0:40:
         f1:ff:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:47 2026 by rpki-client