Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
File:                     xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json)
Hash identifier:          t5VPyxMSA1dSH2ks6/u9qfh9uFKw2V21UbM9fQQwsHw=
Subject key identifier:   40:74:C5:AB:E4:7D:E4:F1:8E:C0:91:54:13:D7:3A:71:55:EE:AE:0D
Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
Certificate issuer:       /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Certificate serial:       0558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
Manifest number:          054D
Signing time:             Tue 12 May 2026 23:33:01 +0000
Manifest this update:     Tue 12 May 2026 23:33:01 +0000
Manifest next update:     Tue 19 May 2026 23:33:01 +0000
Files and hashes:         1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: dV0Icq7Lu2unOnuip2Dtg0triXG8PF/6OZTIjloPUKY=)
                          2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: bVXZbXIetCBnuQjaSLYLUQur0ysTmVtMviP//NDBnCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
        Validity
            Not Before: May 12 23:33:01 2026 GMT
            Not After : May 19 23:33:01 2026 GMT
        Subject: CN=6a03b8ad-e18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:20:82:01:63:4b:fa:38:6f:7a:5b:79:38:
                    69:be:73:91:81:dc:1c:61:40:5c:a4:95:f5:ad:75:
                    42:fd:a1:e7:53:3f:af:e8:39:b9:60:4b:93:ac:90:
                    85:a6:d6:45:a2:39:54:ee:12:1b:66:20:79:a3:7f:
                    7d:40:cb:10:4a:55:92:ae:35:45:d7:00:d7:61:80:
                    42:89:fb:81:22:77:9a:c7:7e:41:c7:9a:a8:53:89:
                    79:7f:13:53:18:e9:3d:cc:37:56:2a:f6:11:03:e2:
                    ad:e6:23:a1:97:54:6d:31:c0:5d:4d:9e:c9:14:06:
                    d6:e4:a4:26:f8:d6:dd:6a:13:d1:91:cc:47:04:b6:
                    db:c0:ab:4e:ed:a4:07:69:a4:e6:9d:4f:bf:21:f0:
                    0b:3f:6e:56:ef:3f:1f:36:26:50:51:02:76:2a:12:
                    19:2c:66:ae:52:ef:6c:74:f4:f3:53:57:d9:a7:78:
                    7d:f9:00:5d:8a:b3:52:35:36:e4:99:7f:02:6a:9f:
                    2d:7f:3d:af:e8:47:80:85:cb:7c:ce:bb:c1:bf:9c:
                    9f:cc:66:b5:c0:c2:04:26:b3:7c:09:2a:42:b6:7c:
                    21:05:75:98:d5:be:cd:62:5d:8d:7f:67:06:6f:fb:
                    ce:34:91:a2:3e:ff:fe:4c:22:8b:24:5f:d1:2b:c2:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:74:C5:AB:E4:7D:E4:F1:8E:C0:91:54:13:D7:3A:71:55:EE:AE:0D
            X509v3 Authority Key Identifier:
                keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d4:ef:0c:3c:46:14:65:ac:ef:0d:87:28:31:b7:59:84:98:
         24:65:d6:c4:68:56:6a:e6:78:a7:43:72:9e:e4:ed:6a:e9:bb:
         c1:bf:b0:cd:8e:5e:e2:0d:9e:ff:41:24:12:12:0a:27:3d:8c:
         bd:67:b4:d2:fa:7e:70:10:f6:57:39:69:50:f4:eb:cf:87:b0:
         05:81:51:54:0b:30:9f:94:9d:d5:c0:bd:23:63:a3:b6:d1:29:
         94:49:91:5f:de:bb:d6:0e:c0:d3:6e:c1:5d:e3:40:4c:09:35:
         32:03:5d:2d:28:41:e7:64:bb:38:00:c4:63:69:cc:5d:7a:d3:
         b6:ce:7f:77:93:2a:41:e1:25:ab:58:ad:92:21:34:b2:cb:d4:
         88:eb:53:2e:22:a8:b1:40:87:df:c2:dc:02:dc:03:aa:81:92:
         69:aa:48:5e:7b:16:5e:ae:f2:26:bb:9e:39:e1:58:ee:d2:22:
         6a:e4:41:8c:c6:9e:90:47:a9:7f:c8:95:f6:db:30:90:74:d4:
         2f:2f:08:c3:10:94:1d:8d:e1:2e:cf:e3:25:b5:47:62:b4:9e:
         63:70:03:d0:ea:8c:53:30:81:bb:31:98:45:95:9d:0f:a3:32:
         59:a3:b6:46:1c:c4:17:22:9b:8b:1c:bd:58:b9:cb:8b:63:52:
         27:a5:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:48 2026 by rpki-client