Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File:                     n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier:          V1Smmfcep6Anf6ZwEhWCY18ubOd7iazRFpCruyD2+64=
Subject key identifier:   83:ED:5E:C1:26:6C:41:2F:95:B0:52:28:68:3C:48:14:55:35:15:EC
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer:       /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number:          E1
Signing time:             Wed 13 May 2026 06:43:27 +0000
Manifest this update:     Wed 13 May 2026 06:43:27 +0000
Manifest next update:     Wed 20 May 2026 06:43:27 +0000
Files and hashes:         1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: m8SnTx1O1GR2l71w9xWS3/J76yw3Fy1ioMTmYxW8FWA=)
                          2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
        Validity
            Not Before: May 13 06:43:27 2026 GMT
            Not After : May 20 06:43:27 2026 GMT
        Subject: CN=6a041d8f-623b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:fd:cc:5a:2f:8e:da:93:72:4e:81:53:e9:
                    47:6d:61:40:32:a8:0f:d8:b2:8b:4d:0b:e5:c4:3a:
                    01:7e:60:b2:06:36:3e:39:ae:f5:e7:34:fc:dc:4a:
                    67:ad:9e:be:13:24:29:3b:80:43:43:14:74:72:ff:
                    54:74:fa:c3:22:4d:fc:99:18:a2:ff:3c:80:c5:0f:
                    4e:51:dc:8f:1e:f5:8a:56:77:ac:4b:77:87:77:91:
                    ac:0b:6d:df:7f:7f:4b:c5:82:cf:80:2b:a0:43:f6:
                    9f:ee:d0:b8:25:36:49:e4:d6:dd:af:cc:7c:59:39:
                    81:77:7a:90:83:8d:a6:61:bb:92:0d:5d:cc:94:57:
                    cd:6a:1e:8c:63:36:36:67:51:a3:c6:2f:98:49:c5:
                    07:a7:9f:23:b4:50:88:a4:fb:44:e1:2b:f5:81:48:
                    82:5a:eb:da:b5:8b:1c:e7:46:58:3d:34:4d:b1:e4:
                    1d:ed:60:b6:14:c0:4d:39:c0:f5:31:cf:01:1a:5b:
                    3f:34:31:f9:a3:87:40:d6:06:ac:11:45:36:4d:83:
                    15:df:87:c1:5e:b3:c8:e1:d7:98:6d:eb:a9:3e:f1:
                    ce:5c:42:9c:4f:a3:7b:8d:2a:4f:c9:87:22:0b:fc:
                    4a:fb:82:c6:1d:39:a2:13:4f:bc:83:22:19:45:39:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:ED:5E:C1:26:6C:41:2F:95:B0:52:28:68:3C:48:14:55:35:15:EC
            X509v3 Authority Key Identifier:
                keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:4b:1a:7e:91:c5:4a:39:4b:12:07:99:56:4e:f0:50:40:
         ab:57:c4:f8:c5:b8:66:69:43:9f:e3:73:d4:1a:11:1d:d5:41:
         5b:d6:61:05:47:de:15:54:6c:79:6e:35:39:91:55:ab:6c:62:
         9e:2b:86:53:36:92:8b:bf:b0:1b:b2:ee:fb:8f:64:b1:2a:a2:
         5e:6b:66:26:29:80:cd:82:61:b4:6f:8a:9c:6d:2d:85:cd:72:
         26:ad:77:f6:f5:cc:87:39:7e:b1:7b:06:0f:54:cd:64:83:51:
         a3:79:17:8a:06:df:7a:7c:9e:53:4c:95:d7:ec:1a:1c:49:d7:
         3b:1d:82:1f:60:20:bc:72:d0:80:78:d5:82:84:5d:4c:07:90:
         2a:95:01:20:cd:90:6a:a1:22:a1:f0:90:d8:72:cb:17:64:55:
         c7:48:6e:9e:e7:b4:b4:50:e5:6f:e3:c2:68:50:0d:02:89:df:
         93:b3:3e:3e:13:b3:f2:99:fa:20:06:39:00:4a:77:e8:3d:d7:
         45:7c:19:a1:e1:80:de:d6:dd:1e:0f:a5:4f:89:80:9f:fe:d0:
         07:34:37:e0:ba:34:04:25:f9:5a:18:c6:12:f9:bf:b7:bc:08:
         68:e7:c8:27:45:d3:59:cd:51:1c:d1:a0:c9:8b:3e:64:e0:fb:
         e8:94:62:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:59 2026 by rpki-client