Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
File:                     9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json)
Hash identifier:          2/MqB187N9LSRBl0ytFQKSpd/QK9ioxgD3aJKxqJr7o=
Subject key identifier:   E8:FF:A8:3F:3E:EC:1A:74:15:51:C8:88:64:AF:13:8F:8E:87:A8:6B
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Certificate issuer:       /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial:       092A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
Manifest number:          151E
Signing time:             Tue 12 May 2026 18:52:23 +0000
Manifest this update:     Tue 12 May 2026 18:52:22 +0000
Manifest next update:     Tue 19 May 2026 18:52:22 +0000
Files and hashes:         1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: BlEcDAJEseb2bQZRDhIiZaKKsr/9jndBFUR9m9G8Bg4=)
                          2: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: 1kffUSlltPUrAXr4qbgMKEHLahPn0f0i1hKA6TYPuXQ=)
                          3: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: WP8uvLo3dm5cFDDJiS6DGbwFfOiibsT0ay5tm2cY/KY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346 (0x92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
        Validity
            Not Before: May 12 18:52:22 2026 GMT
            Not After : May 19 18:52:22 2026 GMT
        Subject: CN=6a0376e6-04c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:39:c8:e8:40:37:d9:82:78:eb:f3:e2:2c:
                    88:9e:d3:7a:1a:cb:34:45:3d:0d:c6:6c:4e:c5:b0:
                    14:b4:76:7a:62:ed:07:2b:e4:cd:d2:15:8b:68:2a:
                    42:97:90:c2:d2:e3:ed:27:08:e3:7b:01:5d:34:85:
                    89:15:1f:a3:5a:52:bd:34:6d:fd:7e:33:ef:de:15:
                    eb:d1:42:24:8f:84:61:97:9d:71:f3:2a:5b:16:c6:
                    d4:f9:f7:f8:cf:03:5f:5e:d6:f2:32:b1:16:91:bc:
                    10:80:ed:73:02:21:61:82:0c:65:9b:43:db:7d:2c:
                    35:90:10:85:f9:d7:f5:c8:ed:0f:32:f0:3a:ea:3c:
                    cd:d6:cd:7e:0b:25:a7:75:b2:4c:3d:63:0a:4e:ac:
                    b4:3a:ee:a0:0f:29:f3:98:41:df:84:6e:ea:fc:5e:
                    78:f0:ba:08:1b:c9:5c:fc:de:3f:8c:d8:32:09:ae:
                    8e:ed:16:9a:7e:a1:aa:98:42:b0:64:1b:a2:63:24:
                    74:12:dc:6e:92:dc:89:bf:e2:c2:07:dc:83:8e:84:
                    73:75:7d:96:1b:3d:65:f9:40:65:92:0c:e9:aa:ae:
                    76:7b:63:2f:5b:49:bd:f0:ac:63:d6:53:b8:b8:46:
                    b8:6a:eb:74:24:44:bb:3d:1b:2a:2c:5a:96:e3:80:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FF:A8:3F:3E:EC:1A:74:15:51:C8:88:64:AF:13:8F:8E:87:A8:6B
            X509v3 Authority Key Identifier:
                keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:87:17:6d:e7:18:c5:09:53:fc:eb:10:f5:b6:c8:af:35:01:
         5a:9b:ca:8f:e8:89:eb:5d:34:52:f7:e8:ff:b8:7e:24:18:cf:
         af:5a:c8:09:34:33:a1:e1:c4:33:29:a2:db:27:54:68:36:c0:
         d7:95:53:d8:6d:04:fa:21:00:7b:f0:7c:10:d6:fd:79:b0:e4:
         a8:73:b8:35:d7:fe:49:6c:3b:22:b7:20:ed:af:b6:2b:e9:0c:
         1b:75:21:f5:5f:9d:bc:a8:85:43:ae:40:c9:01:20:c1:37:23:
         c5:f7:e3:d2:09:08:4f:35:e2:3e:34:7b:f3:04:25:c6:7c:43:
         9f:12:e7:14:bd:04:00:ec:36:a9:7a:0e:24:af:fc:3a:29:3e:
         b3:c6:72:f9:14:37:f8:4b:fe:71:0c:53:ba:31:c2:20:4d:d8:
         6a:56:f9:18:d9:3f:38:1f:d3:9e:e9:81:16:cd:9b:f8:46:b5:
         fa:1a:77:b8:55:df:78:44:0d:44:d0:2b:7b:7f:1b:97:45:40:
         e3:fd:68:f2:85:35:c9:c3:0b:bb:af:3a:68:89:bb:77:ed:b6:
         93:48:fc:0f:0a:96:5e:c7:2a:d9:fb:80:09:5c:5e:cf:13:44:
         90:07:39:6e:bf:d1:f0:55:9b:1c:de:7f:d9:68:de:cd:60:16:
         cb:48:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:28 2026 by rpki-client