Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
File:                     RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json)
Hash identifier:          Pn3oaFEE4Ie7nEkLAF7mymZbBp32+M7a/PAAGa2m5bY=
Subject key identifier:   73:79:0C:39:6F:81:A0:A3:7F:72:E3:E2:8C:9D:09:A2:12:2C:F8:20
Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
Certificate issuer:       /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
Manifest number:          013A
Signing time:             Wed 13 May 2026 05:31:38 +0000
Manifest this update:     Wed 13 May 2026 05:31:37 +0000
Manifest next update:     Wed 20 May 2026 05:31:37 +0000
Files and hashes:         1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: 21HwyjTDI+pOoVqVt3T/vTYbqRbSlL+DyEBp6lFS04Q=)
                          2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: IInDuG92MgBM/R/1sWNASwByUg/xqTFX5MGgVtF2hko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
        Validity
            Not Before: May 13 05:31:37 2026 GMT
            Not After : May 20 05:31:37 2026 GMT
        Subject: CN=6a040cba-6e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:c5:f6:55:e6:c8:4f:ef:c0:15:b7:29:57:
                    2d:b0:1c:10:28:e1:49:89:31:72:8e:50:70:6e:7a:
                    af:06:71:45:1f:35:3e:a3:ea:c8:64:e3:bd:f3:70:
                    e9:89:13:8a:4b:e7:0d:c7:ce:6a:b9:04:98:35:5f:
                    c8:ba:7c:3b:02:3c:7a:9b:53:8c:74:69:ee:4a:9a:
                    24:d3:f0:55:bc:80:f3:e0:f7:bb:44:79:1d:11:e2:
                    1e:d8:fa:9e:5a:ec:e3:33:3e:0d:e7:70:44:99:ac:
                    2d:d1:6d:00:62:62:94:dc:14:1c:04:58:03:ad:41:
                    43:ae:b7:70:49:1a:16:a4:d7:23:00:76:fc:a5:55:
                    60:97:b8:fd:4a:c3:62:de:9a:49:70:7b:90:d5:f9:
                    56:2f:26:a3:c8:9b:10:51:04:a1:69:0a:5e:98:6e:
                    a5:5f:73:4a:68:67:8f:2c:35:96:d7:1a:10:32:03:
                    98:d2:d9:63:63:8e:58:7a:a1:e1:ef:ba:67:f3:1c:
                    34:46:63:4d:a6:b0:59:03:ed:28:02:3f:43:7b:a3:
                    f5:1e:26:b4:05:b7:40:9a:93:d3:dc:f7:6c:ab:9e:
                    da:61:dd:8e:e5:4c:ae:1c:ef:98:89:d0:0c:b3:a5:
                    d4:a7:96:fb:ad:a7:1c:17:2b:3a:e0:a4:34:69:e6:
                    e9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:0C:39:6F:81:A0:A3:7F:72:E3:E2:8C:9D:09:A2:12:2C:F8:20
            X509v3 Authority Key Identifier:
                keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:90:6d:fc:3c:1b:3e:74:c6:2f:31:e4:52:09:da:d5:0e:
         48:64:e4:56:9a:9c:a5:7b:89:3a:05:d6:aa:df:a8:50:ce:96:
         40:59:3c:d9:69:82:5e:fb:3f:ac:fb:1c:69:b5:87:2c:49:b4:
         2a:eb:65:d6:14:6d:84:f9:7f:ba:f3:09:a7:f9:3b:23:0c:f4:
         a9:62:fe:88:ee:91:ef:92:de:f6:61:8e:07:73:60:28:17:e1:
         e5:28:39:73:e6:4c:76:f6:63:c1:27:49:69:27:56:a2:61:c5:
         a6:b9:75:3e:95:86:9a:73:1c:f5:f9:ee:cc:9e:0f:0f:01:6c:
         ac:4c:8d:1e:f5:05:87:75:6d:c4:2b:6a:4f:be:7f:e9:cb:e3:
         d2:2b:8f:65:26:cc:66:9a:b3:18:e8:c5:9e:d2:90:c7:b1:30:
         b7:72:21:fc:e6:45:3c:e9:8c:90:22:11:12:0d:34:43:ce:35:
         49:fe:85:13:a3:e8:0e:4b:64:12:c3:4b:95:23:ce:a4:6b:57:
         13:1c:5d:fd:cf:1e:d9:c2:a5:ee:c8:99:9e:7a:67:01:c9:04:
         77:b7:6e:bb:08:f4:3a:7f:ae:41:18:19:e2:0b:7a:9c:a1:83:
         56:4a:29:cd:5f:62:1b:45:21:11:44:52:e4:0b:36:df:6d:5f:
         95:63:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:52 2026 by rpki-client