Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
File:                     s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json)
Hash identifier:          yXF5nzjWXL6e0WdL0K5SZ9S8EfdO0eTu+CiyafAMvzQ=
Subject key identifier:   9E:14:B6:EC:6D:C7:DE:1B:D6:97:6C:02:4D:FD:28:3D:BE:96:F2:A5
Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59
Certificate issuer:       /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
Manifest number:          0166
Signing time:             Mon 11 May 2026 05:04:27 +0000
Manifest this update:     Mon 11 May 2026 05:04:27 +0000
Manifest next update:     Mon 18 May 2026 05:04:27 +0000
Files and hashes:         1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: 37RfecBRgLSDqBBcEc1ZNv/kxuuBmGDg6D9mNeWWtlI=)
                          2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: xO1XkrdPpnztC/DOvp1GxSfrdBEGr7OLmqMg43hzTY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl
                          rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
        Validity
            Not Before: May 11 05:04:27 2026 GMT
            Not After : May 18 05:04:27 2026 GMT
        Subject: CN=6a01635b-8d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:a8:45:4b:fe:78:eb:e4:b8:12:a5:9d:84:
                    c8:9e:53:31:50:a2:59:de:a8:d3:d3:00:c6:be:cc:
                    fe:b0:ac:fd:f3:d2:c0:cd:eb:cc:4b:90:11:30:20:
                    b3:7e:5b:33:73:88:e5:28:47:56:e7:8c:38:5d:d4:
                    43:fc:b7:11:a7:58:d8:50:fb:f3:1f:c2:77:ea:63:
                    86:40:ae:93:8f:e4:57:51:46:2d:64:c2:25:1e:bf:
                    75:2e:ce:12:aa:96:ee:09:98:1c:29:59:e2:17:4c:
                    89:2a:b4:11:6b:3a:05:a0:49:c8:b6:24:9b:40:66:
                    85:d7:52:53:db:1d:ca:8b:46:59:7a:78:39:67:a8:
                    60:2b:19:b0:e4:6c:15:eb:2d:92:f8:7a:dd:18:be:
                    19:aa:e2:2b:54:cc:99:6b:19:c7:5a:1c:a5:68:10:
                    2b:62:a0:ba:f0:2b:6f:71:16:14:8d:91:ce:1d:77:
                    7d:cb:cc:bd:03:32:ef:0f:c3:8b:56:48:2d:93:a0:
                    76:95:e5:a6:15:e4:fa:0c:a3:19:a2:de:73:27:2b:
                    be:ea:6d:98:be:6f:2e:37:3a:79:62:8a:b0:08:5b:
                    da:0c:8b:d1:7c:d5:07:26:b6:e2:50:aa:7b:9d:24:
                    14:5d:88:fb:a5:53:2f:09:86:5a:1a:12:8a:52:c0:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:14:B6:EC:6D:C7:DE:1B:D6:97:6C:02:4D:FD:28:3D:BE:96:F2:A5
            X509v3 Authority Key Identifier:
                keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:61:5a:95:9d:39:c8:38:a5:a6:d0:79:90:df:18:87:55:e1:
         a5:0c:e7:fe:16:4a:8a:ad:c8:79:76:aa:69:17:0a:6c:20:95:
         31:d6:0b:70:c3:6e:95:07:d9:99:f7:0b:4e:16:fb:f8:d3:1d:
         fd:4b:80:2d:82:c6:95:4b:af:b7:04:0a:5d:ff:59:ec:1d:85:
         83:cb:ef:c4:ec:bd:7c:10:d2:48:8d:a6:d2:09:e4:da:15:d4:
         0f:8d:ee:a9:de:9c:bf:db:d4:55:ee:07:3b:35:8c:03:62:d9:
         f2:74:05:16:78:48:fa:c5:d8:19:45:36:92:dc:c4:82:b3:a6:
         a4:93:62:9b:92:be:d4:21:23:0d:ce:29:b4:bb:e3:7c:b6:42:
         7a:28:ad:0f:80:c1:21:2c:85:a2:5d:72:4f:cb:9d:50:42:79:
         e4:07:cd:3a:d7:72:49:4b:5d:33:33:e9:fc:ff:c2:a4:95:7d:
         0f:c1:95:39:91:a0:26:33:f9:66:47:ce:43:0f:4b:12:f9:e3:
         6d:07:69:5c:13:da:6b:79:2d:f4:ea:03:bb:53:11:69:b6:cd:
         31:d0:dc:ae:9c:3c:7e:42:8f:c1:02:9d:b2:d1:35:d3:b0:00:
         27:4b:6e:20:ff:0d:04:be:01:4e:71:d2:f4:88:f0:94:25:80:
         0b:aa:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:27 2026 by rpki-client