Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
File:                     asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json)
Hash identifier:          2Yz+g/3L45pqvngFQfa1b9cURuwvHDMkK07NRfqdRKo=
Subject key identifier:   92:D8:93:A9:81:0A:4D:97:D5:D5:B7:29:88:16:CF:66:4C:A2:4E:A6
Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
Certificate issuer:       /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Certificate serial:       1108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
Manifest number:          10FF
Signing time:             Tue 12 May 2026 17:18:02 +0000
Manifest this update:     Tue 12 May 2026 17:18:01 +0000
Manifest next update:     Tue 19 May 2026 17:18:01 +0000
Files and hashes:         1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: QgYR25l8sN5iNcyPWaZ8SowffMWQRPbaDAEc6F8X45U=)
                          2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: 8aCMHKssPdN319TEwBaL3NJec+4ceW9OeNk+s6B7p4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4360 (0x1108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
        Validity
            Not Before: May 12 17:18:01 2026 GMT
            Not After : May 19 17:18:01 2026 GMT
        Subject: CN=6a0360ca-ab1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:19:7d:2d:1a:dd:86:0b:59:10:9d:f7:98:
                    1c:03:ee:c7:d2:65:ea:a4:8e:d5:68:14:0a:2b:47:
                    a4:d9:b3:54:8a:d4:1c:30:02:2b:0a:c9:18:cd:2b:
                    ce:2f:b5:58:13:bd:63:af:a4:ab:2f:bd:0f:20:f8:
                    13:89:64:66:6d:68:ed:e0:b6:f5:46:ed:70:a1:03:
                    2b:d9:97:00:3d:40:40:4f:b1:f2:08:03:ec:1a:9e:
                    ca:65:91:35:6c:1a:25:2f:4e:86:71:27:01:1d:a6:
                    46:8c:18:1a:67:c4:22:b9:1f:82:49:ce:79:10:a4:
                    26:ca:f5:84:8d:0e:d1:f0:69:40:ce:b4:55:d5:d6:
                    81:98:f3:d4:62:31:a7:0e:63:a9:44:ec:33:55:8b:
                    50:22:08:e0:43:47:0a:b0:e4:84:6b:fa:38:db:5f:
                    b4:85:a5:97:f6:05:bc:34:cc:9a:1a:55:15:be:7f:
                    98:ce:19:37:68:92:22:95:9f:a3:cf:75:ed:ff:6a:
                    cd:08:5c:c3:23:13:02:b6:3a:68:1f:75:f4:52:f2:
                    cd:c3:21:23:93:a5:93:de:e8:ad:c9:11:9a:9b:78:
                    f9:c3:79:c7:60:ad:8d:36:39:e6:ad:b6:c9:3a:24:
                    12:5b:d1:85:34:9e:4e:1e:44:a7:52:86:29:3f:89:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D8:93:A9:81:0A:4D:97:D5:D5:B7:29:88:16:CF:66:4C:A2:4E:A6
            X509v3 Authority Key Identifier:
                keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:06:ea:00:55:15:6e:db:72:db:22:58:27:f6:d4:b8:07:
         be:8a:77:66:7d:9e:de:be:e1:8d:20:7f:c2:3a:68:20:56:4c:
         64:20:a0:ac:50:28:92:23:a7:74:d2:da:65:32:58:2a:7e:25:
         9a:52:9c:b6:de:2b:fe:62:b7:7b:c6:67:02:e2:3b:72:f8:cb:
         f0:0d:df:24:ba:7b:6c:78:40:e6:e1:c7:0d:62:4f:41:af:cb:
         33:2b:4c:3f:c8:ff:f2:15:94:c8:f1:75:5e:7e:e6:fe:17:a0:
         24:8e:9d:f2:7f:23:8c:2c:c5:54:b7:b8:37:f7:b2:03:76:16:
         5d:f1:95:8b:99:9b:e6:aa:a4:70:49:2a:f5:ad:c4:7a:6a:53:
         82:cc:07:84:a1:ff:f6:6b:80:6b:a8:f4:4a:9f:39:ea:cb:b3:
         0a:f9:2b:96:65:01:1e:50:fa:c5:47:b1:12:97:68:ac:85:c9:
         33:0f:1f:79:75:60:27:08:d2:a1:ab:5a:e2:5a:8f:5d:1a:7f:
         86:d7:c6:6f:0d:3a:4b:17:a7:06:de:bf:d1:d9:01:3b:d7:16:
         f1:b1:0c:b0:dc:33:51:f3:75:4a:f5:74:7c:7a:d6:e0:88:ba:
         4f:47:84:91:9d:6d:17:74:41:39:d1:21:a8:4a:0e:89:c3:eb:
         89:0e:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:24 2026 by rpki-client