Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File:                     N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier:          V0XymF15yLnP9F1A7KV09nKexgZFhjiFJ9irlfx5S9U=
Subject key identifier:   30:86:2F:AF:9F:11:85:3E:DA:4E:4A:26:2B:A8:37:04:0B:DE:61:7A
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer:       /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number:          50
Signing time:             Mon 11 May 2026 08:26:57 +0000
Manifest this update:     Mon 11 May 2026 08:26:57 +0000
Manifest next update:     Mon 18 May 2026 08:26:57 +0000
Files and hashes:         1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: fwqtCnloHZovZ0rURiqexT+aJ1Dg2jg71TVmIvu2D7E=)
                          2: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: EjJ1CDCwau1fKrzrYHxK/Qrh8GUA8jF4SY+Z2pjXM+w=)
                          3: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: BgD9Nozy6YrPBl3k/LaQh1iksmIlumLLGLfxZ8EsuWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
        Validity
            Not Before: May 11 08:26:57 2026 GMT
            Not After : May 18 08:26:57 2026 GMT
        Subject: CN=6a0192d1-4857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:e3:6e:92:19:bd:13:ea:14:6f:d4:24:6b:
                    75:11:31:31:2c:ed:c0:a2:e2:e3:f5:ee:a8:b9:f5:
                    4e:57:81:d2:e0:38:06:36:e1:4d:a0:62:1a:73:ee:
                    27:8c:fb:0c:f7:25:35:b2:ca:dd:59:9d:0f:74:f8:
                    ad:99:bf:07:3f:c3:a0:ea:9b:d7:e7:12:ca:0a:4c:
                    dc:bd:71:e5:70:64:69:a9:10:25:49:d9:fb:a1:7f:
                    c3:60:29:e6:b7:28:f3:32:a9:f9:69:c9:40:3f:b6:
                    3e:f4:7d:9c:aa:07:51:ea:c7:0a:bc:64:31:d8:49:
                    fd:22:6c:76:f6:2c:95:62:b9:db:99:cf:11:68:ad:
                    0d:cf:50:ca:a3:fc:34:9d:b8:b5:42:6a:d9:38:c4:
                    97:09:dc:e5:43:a5:fc:7f:8f:0c:ca:fc:a8:98:03:
                    84:dd:64:0e:f3:ab:46:6a:00:de:cb:97:b5:e7:1c:
                    8f:a9:66:4e:bc:e3:6d:5b:bd:36:1e:e2:b4:36:97:
                    a3:72:35:37:41:4e:47:75:10:75:aa:7b:a1:9e:e5:
                    a6:a8:5a:a2:4f:67:d8:3c:2e:1d:57:a5:9e:82:60:
                    76:a7:e2:a8:86:25:ee:13:20:de:b7:fb:74:78:77:
                    95:b0:d6:5a:64:9d:c5:f5:c5:36:ad:5a:02:8b:87:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:86:2F:AF:9F:11:85:3E:DA:4E:4A:26:2B:A8:37:04:0B:DE:61:7A
            X509v3 Authority Key Identifier:
                keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:a9:bb:f8:c7:fd:6a:10:5e:1e:50:89:8d:ab:ae:c7:d0:
         a5:e5:4e:ec:c0:63:e1:3d:4a:02:ae:09:c7:b0:63:97:ba:53:
         a9:5b:ac:76:80:25:62:b0:80:df:5f:1f:44:ee:2d:2e:88:76:
         87:0f:d8:3b:c3:cd:0b:8f:c2:1d:d6:6a:90:67:94:85:e1:eb:
         46:39:2e:6f:8b:42:7a:d4:4c:4f:81:10:15:08:75:b1:cc:5d:
         53:54:f5:43:0c:76:54:01:39:9a:39:fc:15:e9:45:dd:d6:81:
         eb:ed:49:85:e0:b4:49:f6:a2:12:f9:60:f7:f8:c4:d9:16:73:
         f8:38:c7:f0:44:bd:c8:ab:a1:4e:29:bc:52:4d:8f:85:5c:e4:
         81:2c:1c:6b:e0:b0:28:a5:15:97:da:0e:8f:6a:56:ab:16:e5:
         a6:c6:71:48:f1:52:c2:f9:44:b0:6c:1d:fd:91:23:e0:df:32:
         2e:72:79:fe:d3:80:ce:0a:dd:a7:e9:42:45:5a:96:c8:b6:3a:
         8b:3e:bc:96:a1:82:ed:6e:e9:1d:1d:d3:3b:92:9f:0b:27:09:
         cf:35:48:37:4e:f5:5e:bf:bb:8b:22:0c:f4:8d:b7:e9:38:2e:
         87:0b:08:ac:47:da:c4:b8:d8:93:80:7e:48:85:28:1e:0e:40:
         95:aa:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:49 2026 by rpki-client