Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
File:                     9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json)
Hash identifier:          H+Eedj7NT+YLUaMGLxoA6qTdLrEVuIeheNW0Ht8PtZE=
Subject key identifier:   17:9D:8F:34:A2:DE:41:7F:1A:05:33:3F:E7:6B:B3:24:41:A1:CA:89
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Certificate issuer:       /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial:       02BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
Manifest number:          029B
Signing time:             Wed 13 May 2026 01:49:22 +0000
Manifest this update:     Wed 13 May 2026 01:49:21 +0000
Manifest next update:     Wed 20 May 2026 01:49:21 +0000
Files and hashes:         1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: 1Omi3gRC3+uZfYX9zWhAu5q2XMp6uw4EG4V0hVvM+5o=)
                          2: C82A0778680811EE88B5527CC4F9AE02.roa (hash: aGkSuS0d5kC8SSbfjCl/wREw36WuVh33R9qpSzjLESg=)
                          3: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: JVxMI3BBydPHJQteEqMVI2GOfo7MKjizmO2le+yttg4=)
                          4: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: hMb2hcSIJToNCOk3fqaJJZYV+N/CGmHdt8jBqc5Ar/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75
        Validity
            Not Before: May 13 01:49:21 2026 GMT
            Not After : May 20 01:49:21 2026 GMT
        Subject: CN=6a03d8a1-4523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:d0:2e:0a:ae:b8:f4:3a:bb:33:3b:51:b9:
                    a3:f6:ca:9a:4b:bd:e5:2f:91:4e:76:af:34:fb:5d:
                    e6:7c:33:fd:e8:5d:0b:4b:ca:37:a5:57:77:04:f4:
                    21:49:ee:21:4e:0b:4a:4e:db:a6:35:73:28:17:c6:
                    ff:00:a6:7d:55:71:cf:53:e4:f2:a5:fe:37:bf:34:
                    d9:ce:e3:37:8d:16:35:23:ac:87:2d:2a:ba:1c:2b:
                    74:85:b4:35:92:9e:79:e1:f5:f8:f8:30:9f:00:c2:
                    ab:ab:c6:de:7a:9c:81:b3:2c:39:13:91:71:2f:fa:
                    58:51:26:a1:dd:56:67:3f:58:5d:3c:89:b3:6d:c6:
                    12:30:91:2b:3c:d3:59:4a:af:33:54:cc:65:14:b8:
                    90:4e:9f:57:e2:7d:c4:3d:7a:2f:a2:ec:73:55:92:
                    03:d4:51:80:b4:8b:2e:a7:17:97:36:72:ba:45:2d:
                    29:d0:82:d9:7d:70:e3:d9:9f:8f:7c:fe:4c:39:91:
                    14:83:6d:ad:c1:24:49:51:40:2c:81:a5:94:4c:8f:
                    be:b7:c5:af:8e:99:df:48:9b:14:44:90:41:bf:5f:
                    fc:8e:6c:e2:8a:98:97:d0:4f:e4:4e:39:44:59:95:
                    26:b7:1d:d1:cc:ae:ac:79:6e:00:41:c3:2c:92:77:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9D:8F:34:A2:DE:41:7F:1A:05:33:3F:E7:6B:B3:24:41:A1:CA:89
            X509v3 Authority Key Identifier:
                keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:27:cf:23:f0:fb:8a:44:d9:4f:93:d9:8d:9a:90:79:96:
         62:7c:d1:92:dc:56:a3:b5:ec:b4:c0:60:d7:23:3a:99:cd:c9:
         a1:da:3b:1b:a1:fc:a6:d7:8f:7f:4f:3c:a1:67:70:a8:62:68:
         9c:74:b7:37:96:de:40:7b:3e:89:b2:3b:14:e0:1e:ec:a1:cf:
         bd:67:1e:26:81:f8:26:cf:47:88:18:ca:48:79:3b:39:de:6e:
         d6:c1:a6:6f:93:8d:b4:26:77:51:5c:17:1b:bf:ac:f1:71:01:
         3c:59:b9:e6:67:c4:20:46:31:9e:54:fd:1c:d4:5c:b9:78:ae:
         f4:6d:a0:26:11:ed:f5:50:64:8d:b4:bd:1b:f5:37:ed:a1:55:
         c6:12:aa:0a:39:5f:04:e8:f7:39:f5:9f:c6:2c:b3:ac:80:df:
         1d:02:64:d6:6b:d1:73:0d:af:8f:fd:19:f6:3e:9e:25:a0:42:
         9c:f8:78:13:c5:53:58:78:e8:a6:2a:26:d3:15:76:f1:88:f8:
         f3:4c:9a:d8:13:40:94:25:4e:78:35:76:14:15:d0:fb:dd:fb:
         eb:59:a3:65:80:55:a8:02:f1:13:82:61:fc:a5:bf:f2:2b:a8:
         83:ab:91:92:f9:d6:1b:a6:7f:5c:e5:ac:de:47:89:4c:79:1d:
         2b:ad:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:50 2026 by rpki-client