Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
File:                     F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json)
Hash identifier:          Cs6QWG37XAVwy2B8k4jE1siAZRrpATnNkZJePyww5aw=
Subject key identifier:   FB:E2:3E:E0:43:6F:68:3B:7F:8B:71:C4:D1:F0:A4:94:79:EB:33:D0
Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2
Certificate issuer:       /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
Certificate serial:       04A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
Manifest number:          0499
Signing time:             Wed 13 May 2026 00:04:37 +0000
Manifest this update:     Wed 13 May 2026 00:04:36 +0000
Manifest next update:     Wed 20 May 2026 00:04:36 +0000
Files and hashes:         1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: cwCzpnnbPdcAeaZMbh5EwQSIoJRpZ/bsvU34yhReZ+8=)
                          2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: lfsTIDGCnQK6PH10P+vYNBk6SfyJpYoVAr9CgVPitiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl
                          rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F680E, serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
        Validity
            Not Before: May 13 00:04:36 2026 GMT
            Not After : May 20 00:04:36 2026 GMT
        Subject: CN=6a03c014-11b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:c0:dc:28:87:fd:fb:b1:37:8d:ac:76:c9:
                    28:40:cc:e7:16:a1:7d:35:6a:52:bc:8f:29:90:73:
                    f9:11:94:a9:57:0a:b6:41:40:54:2f:f6:fd:6b:59:
                    2a:85:b5:c9:95:97:3d:a7:d2:b1:c2:11:84:56:c9:
                    5a:6c:8b:69:fa:af:a6:47:e0:99:9a:2b:8c:1a:c8:
                    2b:ff:d9:f9:3c:12:da:e7:65:d2:61:f1:35:81:f4:
                    ee:d5:54:ed:be:9f:ea:51:8f:80:e4:67:c6:13:3d:
                    26:3f:1f:d2:66:69:43:26:9d:e2:a0:7c:ab:78:e8:
                    09:94:62:d3:d7:e6:95:3d:97:03:19:15:a7:f0:27:
                    59:26:eb:7d:4c:42:5a:95:04:de:78:32:8d:82:ab:
                    76:ca:c8:ef:64:95:cc:ff:47:59:f2:72:cd:b4:44:
                    5b:c2:78:37:a2:1c:c6:28:bc:17:35:0f:5c:9d:f9:
                    1b:14:ed:12:2d:d6:df:43:b6:c3:f8:fc:cc:8f:82:
                    62:6b:3a:31:7b:7d:92:22:db:45:9a:31:dc:5c:a8:
                    c2:81:2d:37:57:f1:10:26:92:be:12:dd:c5:c9:cd:
                    83:53:47:aa:45:c2:82:aa:f4:80:64:52:02:fc:0a:
                    70:38:e1:31:b5:64:d1:c7:4c:59:29:b8:49:67:e9:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E2:3E:E0:43:6F:68:3B:7F:8B:71:C4:D1:F0:A4:94:79:EB:33:D0
            X509v3 Authority Key Identifier:
                keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:bf:8c:f6:9e:39:37:e7:bd:8c:0c:22:b6:e0:2c:f2:7d:
         2f:a3:c7:46:87:12:35:1b:e4:e1:d6:d6:32:1e:c7:8b:76:04:
         b8:5b:4b:89:b3:90:74:be:b3:b2:26:92:43:85:39:1e:e0:c3:
         df:df:93:03:e4:c5:9b:60:a3:1a:cc:21:64:64:c6:7a:a9:84:
         ba:c6:a0:72:c9:08:14:c9:ad:59:6c:3e:29:1b:f9:23:63:cc:
         7b:1d:1c:7c:34:87:73:70:12:69:77:48:de:b5:c1:92:18:8d:
         1d:d7:17:b3:2e:29:8a:4e:94:3e:3a:b7:07:be:85:97:ca:d2:
         79:c7:8c:6f:ac:1f:34:39:97:fb:82:e7:6a:64:84:05:14:7d:
         19:12:8e:c9:0e:35:a7:07:a8:9d:12:36:df:94:18:69:8a:17:
         93:77:a2:a0:50:5f:a1:05:50:73:a6:11:ec:34:c4:ca:da:83:
         e7:f7:ba:2b:1c:8b:14:f3:ad:d6:5f:3b:c3:b3:98:0e:1f:ca:
         b8:12:ba:a1:d6:2f:de:f0:09:41:b7:03:c8:10:d5:a4:10:eb:
         c6:56:83:12:10:d9:ac:2c:45:2d:e9:ea:4d:e5:f7:2e:b5:3b:
         57:a4:ac:9d:b9:a0:7e:cb:8d:bd:73:33:2e:d5:ba:0c:5d:12:
         3d:22:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:45 2026 by rpki-client