Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
File:                     7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json)
Hash identifier:          Cf1qwq9oHZMpolYbJxKLzd6yIT2RjxdhL13PHl80l5o=
Subject key identifier:   D5:EE:96:C2:DD:3D:60:CC:2F:88:62:66:5C:7B:BB:13:89:C4:13:CE
Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA
Certificate issuer:       /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA
Certificate serial:       1BC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
Manifest number:          1B90
Signing time:             Tue 12 May 2026 16:16:26 +0000
Manifest this update:     Tue 12 May 2026 16:16:25 +0000
Manifest next update:     Tue 19 May 2026 16:16:25 +0000
Files and hashes:         1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: +9xFD7ALsbWQPS4WiATnfUwbqnCAKX19A+vt3P4Q0VM=)
                          2: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: nSC5zdMsQPFLTo2n37S2hHT1g8ZFIDvzCzjnrqu5sXM=)
                          3: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (hash: OGm0uB3FR35hN/gFsyIV99ObU52GXmXg7+3oLUUM2jI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl
                          rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7104 (0x1bc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA
        Validity
            Not Before: May 12 16:16:25 2026 GMT
            Not After : May 19 16:16:25 2026 GMT
        Subject: CN=6a03525a-12cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:46:81:f3:32:b1:34:da:80:af:fa:31:3a:
                    d4:24:ce:f5:3a:45:ad:d5:5e:e2:4d:43:0e:80:92:
                    1d:38:cb:11:9c:e4:dc:1e:5e:4c:25:e0:39:c3:db:
                    6e:cb:4a:bf:d6:f4:f1:94:25:e6:9d:c0:6e:c9:49:
                    41:d9:e3:7b:b6:a4:e5:87:b5:f7:b4:68:b5:35:24:
                    3a:c6:3b:c3:f2:72:ae:55:82:b4:b4:e0:0f:c2:b5:
                    b1:fc:f2:d8:f6:1d:76:2b:41:ec:59:a1:65:24:2a:
                    91:a6:a7:fb:6a:ec:da:cc:dc:96:e9:0b:c2:bb:3d:
                    fd:f5:bc:a7:36:0a:a6:f7:08:91:3f:e8:2e:94:b9:
                    80:5c:a2:8e:76:9a:31:dc:49:2c:bc:da:bd:31:69:
                    66:dc:b9:67:a8:f0:69:cf:f7:68:eb:2d:4d:f5:9f:
                    b8:c1:b6:0e:1a:c7:93:3e:af:83:1f:78:88:f5:24:
                    58:fb:1f:28:3b:d6:b4:5c:35:87:03:83:48:7d:45:
                    36:58:13:4e:2e:a9:28:15:39:bd:c7:1e:a3:59:24:
                    50:5d:ae:07:9f:fb:90:cb:14:da:d6:22:ee:b4:cb:
                    d7:e0:9d:43:c9:20:30:54:97:c9:b0:77:51:58:45:
                    d9:21:3b:3f:5c:c6:0f:fb:1d:92:6d:b6:cc:fa:54:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EE:96:C2:DD:3D:60:CC:2F:88:62:66:5C:7B:BB:13:89:C4:13:CE
            X509v3 Authority Key Identifier:
                keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a2:5d:c9:26:b5:2e:1f:99:e6:37:bb:78:ed:5a:70:d3:0a:
         c4:f4:df:d6:5a:10:ec:e9:b0:b6:a2:bb:95:99:52:7d:70:a1:
         44:78:90:f1:94:ba:74:3c:28:f9:a0:7c:92:b0:ec:37:cf:cf:
         85:60:c1:5f:ae:b5:54:1a:b2:8c:d2:5d:ce:95:a8:b8:bd:04:
         f4:6e:93:91:87:e3:3d:0a:51:57:ba:3c:b3:e1:00:0b:0f:42:
         0d:7b:fd:03:0b:f0:6c:87:31:86:75:3e:8d:54:9b:30:41:65:
         19:2f:fc:20:da:3b:14:fd:0c:da:d9:24:32:09:96:f1:76:e1:
         31:88:66:a8:5b:49:cb:74:a5:30:e1:f0:3f:c6:3b:c8:df:42:
         91:1b:d7:c2:d2:b6:c6:83:dc:53:06:a9:04:21:d4:cb:1b:40:
         9c:72:8e:96:e3:89:7f:36:8a:53:9f:28:98:fc:07:15:34:c1:
         35:c1:31:69:aa:c0:39:a2:cd:7f:24:96:5c:fd:4e:dc:c2:b9:
         2f:30:69:42:0c:45:65:1b:97:ad:b4:33:da:ff:40:df:84:67:
         96:66:1f:32:92:e0:44:25:4b:e1:7e:d4:e7:52:68:e1:4b:26:
         b7:06:03:f9:ce:ed:7d:7b:fe:b6:c3:ad:4c:67:6a:31:41:ed:
         aa:9c:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:20 2026 by rpki-client