Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File:                     83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier:          TOLpl4XtQdaM6Xo5CNeby+MHwiwmb7JNQ3GA3B/SkWY=
Subject key identifier:   D2:63:8B:C3:E8:DC:65:79:7F:0D:5A:E8:B1:BB:C1:84:98:20:09:FE
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer:       /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial:       0A3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number:          0A31
Signing time:             Tue 12 May 2026 19:48:21 +0000
Manifest this update:     Tue 12 May 2026 19:48:21 +0000
Manifest next update:     Tue 19 May 2026 19:48:21 +0000
Files and hashes:         1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: VwCc2+I+yXhJA2vKE6wMSifCQmk/yH94LqUbl/RPx6g=)
                          2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ouYBwpfCXuAbXe6I0vrvzKSbU872/FUx3W+kR5PDwWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2620 (0xa3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
        Validity
            Not Before: May 12 19:48:21 2026 GMT
            Not After : May 19 19:48:21 2026 GMT
        Subject: CN=6a038405-9633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:bb:b8:10:46:1c:64:88:0f:b5:4c:3e:cb:
                    49:77:af:0c:e1:59:51:f4:8b:b3:f4:73:54:8e:43:
                    1f:40:2a:32:ee:01:47:ae:49:4d:05:1a:7f:d6:1f:
                    8d:f0:5c:6f:fb:b9:5e:98:17:5e:7d:7b:5c:9f:7c:
                    e8:89:ee:25:b2:97:96:a0:18:0b:c3:94:1d:50:a1:
                    7e:43:03:52:df:b0:9c:5f:eb:47:f8:09:ff:7a:28:
                    12:5b:93:ce:fa:d2:4f:85:13:8f:23:7e:42:a3:7b:
                    fd:14:2d:ed:1f:8e:16:d8:cd:fd:f5:ff:cf:ca:9f:
                    98:88:f3:43:4c:33:82:a3:99:b2:71:b0:b6:30:63:
                    ac:15:88:a4:3f:b3:f1:ad:9b:76:a5:50:a3:e4:2a:
                    ae:57:a8:2c:5c:13:bd:6a:00:01:60:86:0c:92:de:
                    70:c9:a4:92:b3:31:a6:34:f1:e9:b6:4f:c6:46:66:
                    1a:49:14:f0:56:10:d3:a2:f9:ce:12:72:19:3b:ad:
                    b6:4e:2f:5a:f5:59:1a:28:12:80:df:27:a7:26:d0:
                    4e:3e:b7:0a:29:95:89:5b:f9:66:f0:67:d0:ad:61:
                    88:d2:32:b1:91:1e:32:33:59:de:88:29:5c:4e:b4:
                    a8:9a:ae:63:fd:67:45:42:cd:a5:d0:24:6b:1d:cf:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:63:8B:C3:E8:DC:65:79:7F:0D:5A:E8:B1:BB:C1:84:98:20:09:FE
            X509v3 Authority Key Identifier:
                keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:16:73:27:86:06:2f:23:c5:9f:3f:fe:f5:72:23:e2:f6:
         49:0a:b6:5d:d4:10:13:a9:2e:c0:e1:88:45:df:9a:2f:d3:e2:
         69:52:7d:65:9d:9d:d2:fe:e8:77:b0:52:ab:a2:10:74:65:55:
         67:14:8d:3c:77:0b:5c:67:29:86:bf:69:e3:b6:ac:0c:4c:6d:
         34:04:a1:fe:32:0e:f4:2e:6f:58:7b:24:3d:0f:ce:e8:ae:a7:
         d6:6a:c5:2a:0a:51:18:a8:d2:bd:8b:f5:a4:cd:69:2a:5e:cf:
         4e:1d:08:15:2e:fe:93:d2:39:7c:7a:15:92:4f:59:a4:9e:59:
         93:52:5c:a6:d6:66:dd:65:cd:0e:93:d9:9b:c1:92:d0:cc:86:
         06:e5:c4:3a:cb:cc:4e:ea:44:70:44:e0:18:a4:ac:e8:c8:a0:
         1b:f8:6a:72:c7:1b:b5:c0:69:b8:79:8a:c7:ca:9a:7e:3b:62:
         97:9a:91:97:b4:74:79:c1:e2:03:09:ff:19:4d:94:c8:bb:ce:
         bf:ad:ae:68:e8:27:a7:3e:c9:47:51:50:2d:2e:da:7b:e4:15:
         7c:b6:bd:c1:de:fb:c6:4c:07:84:71:45:d7:e7:7e:e4:25:06:
         a4:7d:65:17:a7:b1:b8:70:8d:4c:bf:39:48:d7:7e:90:6c:6b:
         13:75:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:20 2026 by rpki-client