Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
File:                     a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft (raw, json)
Hash identifier:          juu/anjyU1Fn9hGNpSoBQG9uAB2U7+999sJEWYPP0tg=
Subject key identifier:   7B:81:C4:6C:F8:31:17:C7:A4:12:71:C0:B0:7F:79:92:91:D4:81:20
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Certificate issuer:       /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial:       1536
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
Manifest number:          151F
Signing time:             Tue 12 May 2026 16:51:26 +0000
Manifest this update:     Tue 12 May 2026 16:51:26 +0000
Manifest next update:     Tue 19 May 2026 16:51:26 +0000
Files and hashes:         1: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl (hash: FKzp/+bR/6RlavqBBYUKo1tyq725+YonjkB5kG1M1Ko=)
                          2: F693F2689CB811EB97F77E14C4F9AE02.roa (hash: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5430 (0x1536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
        Validity
            Not Before: May 12 16:51:26 2026 GMT
            Not After : May 19 16:51:26 2026 GMT
        Subject: CN=6a035a8e-e768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:f4:6d:4e:ba:05:67:65:ce:62:b6:bd:08:
                    46:40:27:a0:ae:23:b5:ce:19:49:c0:1a:67:db:8a:
                    22:f9:d5:af:75:d1:15:6b:63:01:bf:5f:41:f0:8a:
                    ca:d1:95:7a:f7:d8:5d:2d:5d:5d:73:7f:72:ac:5b:
                    ba:3b:63:f9:b1:64:de:f3:ce:0c:2d:c5:19:9f:d2:
                    2f:d5:a8:98:7f:f4:c1:fe:91:1e:71:62:ca:92:54:
                    51:0b:56:d4:d4:d6:f7:8d:8d:df:78:9f:45:d2:d7:
                    f8:26:85:dc:e0:10:20:8b:20:c5:8d:a9:c4:46:7d:
                    ba:67:80:3a:e6:25:ec:b1:fe:f0:c2:f3:96:64:ed:
                    a4:c5:15:46:38:a4:30:8d:04:5e:c1:45:ab:5e:d4:
                    55:fc:8b:4b:81:0d:c3:d9:87:17:6d:ee:d3:dd:6c:
                    f0:c9:aa:04:a7:cc:62:3b:fe:15:d9:17:ab:35:f6:
                    82:08:4d:c3:c9:b0:f8:6b:be:35:8c:38:15:77:3e:
                    a2:7b:d5:14:1c:98:a9:b2:72:3b:7a:b7:22:42:3f:
                    88:ab:74:04:c1:fd:1f:cf:7e:27:3e:0d:f4:8e:f3:
                    b9:de:2a:70:a5:0e:3c:cb:84:f2:63:59:89:eb:b4:
                    24:7f:40:f6:cd:72:31:ad:ae:8c:9f:8e:20:44:58:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:C4:6C:F8:31:17:C7:A4:12:71:C0:B0:7F:79:92:91:D4:81:20
            X509v3 Authority Key Identifier:
                keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ab:8f:a9:97:8a:98:29:fd:8c:64:32:f2:14:d0:8b:e9:ca:
         40:78:d6:ac:d9:df:64:6d:3c:ec:96:04:20:d2:6a:94:3a:e6:
         ff:d8:b9:69:ef:b5:96:df:ed:84:1a:80:a5:2a:98:07:e3:09:
         89:9b:d0:eb:f3:f0:0e:fc:e9:d4:81:cc:6e:10:1f:f2:5b:d0:
         20:ac:d2:d4:5a:48:57:4a:f2:2d:1c:ec:0f:59:74:de:5a:a2:
         df:ef:5a:04:0c:29:82:13:ff:9b:4f:97:6e:72:2a:92:82:9b:
         fd:ec:61:a0:eb:26:ba:5d:95:22:4f:47:57:98:7e:95:1b:a7:
         ef:09:50:7d:93:72:26:d5:e5:ac:53:4a:bb:87:3f:f1:0b:bb:
         7d:0c:cb:fb:cf:c4:54:3a:f9:00:e2:df:1a:2a:85:e0:ee:4f:
         33:7d:47:e6:f1:a7:13:b3:b6:e4:b9:be:0a:4c:89:d2:bf:5c:
         8c:e1:21:9f:3d:eb:ff:1f:54:d4:62:24:5b:eb:e4:d9:bd:89:
         00:f1:9e:3e:6a:0e:fe:08:c2:7c:00:b9:40:94:32:54:cb:fd:
         fd:19:e8:13:18:1a:5b:79:ef:22:b2:6e:4e:19:f8:b5:8f:04:
         81:d7:9b:c3:35:5d:d9:ce:42:c5:97:87:d5:fe:c4:54:16:0c:
         b5:c4:98:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:02 2026 by rpki-client