Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
File:                     MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json)
Hash identifier:          RIqbfOR08NHtEInU/Mzp/i80smeJhk74xB0Pcpnc+ek=
Subject key identifier:   00:2C:09:4C:DA:F0:D0:14:EF:23:1E:C7:8B:CB:67:1D:A5:01:91:45
Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
Certificate issuer:       /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
Manifest number:          013A
Signing time:             Mon 11 May 2026 05:29:12 +0000
Manifest this update:     Mon 11 May 2026 05:29:11 +0000
Manifest next update:     Mon 18 May 2026 05:29:11 +0000
Files and hashes:         1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: wf5/LoFO5ydPpL7Rtf4Irx6klmCUMVelkTIl37vh58I=)
                          2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: jZ7jlvG+kbpMf5yr4kDr9NTPJvX7t9Ub5k4dGFxMqwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66
        Validity
            Not Before: May 11 05:29:11 2026 GMT
            Not After : May 18 05:29:11 2026 GMT
        Subject: CN=6a016928-9f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:f7:b1:d2:8a:8d:c5:9c:aa:48:b4:f9:fd:
                    21:06:f8:22:69:d9:9b:fa:58:f1:67:9c:df:cd:86:
                    30:0f:7b:b9:02:9c:87:c4:a1:3a:67:06:85:a3:ea:
                    24:3f:04:ff:f5:11:bd:ef:a4:af:e6:29:15:82:ec:
                    18:7f:7a:84:52:fb:56:48:a8:c1:c7:c1:d9:93:59:
                    25:df:e8:87:af:02:cf:72:16:47:60:74:b6:9e:92:
                    69:55:fb:87:f7:d9:b4:03:38:d0:99:22:0d:7b:33:
                    23:9b:a5:ed:60:52:90:e9:4e:51:dc:b5:cc:78:7a:
                    fb:eb:1e:e0:70:d6:c2:c1:7d:da:31:8d:1d:47:98:
                    17:77:f1:f9:4c:a5:73:a4:bb:13:8d:01:c2:f0:f8:
                    ca:61:8a:10:54:1e:39:a6:a1:3e:01:08:46:da:ad:
                    f9:b2:bf:65:b7:c2:58:b6:de:75:02:c3:c0:eb:d3:
                    fc:93:37:4b:c8:ad:e3:ff:f3:04:67:81:81:86:53:
                    8e:ce:84:c7:07:c3:1c:94:c6:52:97:71:66:47:f0:
                    01:c8:ea:2a:42:3f:bf:ef:d2:15:69:ad:0e:dc:b3:
                    40:95:94:e2:4e:c9:cf:e8:9d:d7:bb:d9:9a:4c:4d:
                    48:a3:31:45:17:ec:2b:ed:06:fa:8d:c1:3c:3e:81:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2C:09:4C:DA:F0:D0:14:EF:23:1E:C7:8B:CB:67:1D:A5:01:91:45
            X509v3 Authority Key Identifier:
                keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:19:28:e6:cc:f0:c1:b8:64:ba:50:6f:1d:6d:f4:62:be:c7:
         d9:92:18:8a:85:bc:fa:9e:2c:5b:d2:19:68:40:96:93:0b:e0:
         f7:cb:ce:8f:7b:6f:e5:37:61:09:4b:33:61:03:fe:19:50:36:
         03:23:06:e6:e2:43:a7:4b:0b:66:91:e5:45:32:48:32:e0:26:
         b1:f9:83:ef:5b:d2:e3:69:cc:44:48:39:4c:ba:9b:4a:c2:7d:
         ab:16:0d:57:2e:32:ab:cb:e1:fb:1a:a5:9d:d1:e8:9f:db:9b:
         ae:14:b9:61:25:e9:95:bd:e4:7e:0e:ce:18:a3:55:d1:13:b7:
         d1:63:4a:3b:fb:45:76:8d:45:ce:44:77:02:a7:5a:49:68:e0:
         fa:a6:81:11:0f:c9:d9:18:2d:e8:2d:24:fa:dd:2b:ec:af:f5:
         ea:c0:5b:1b:09:5d:c5:c5:ed:98:1e:ae:74:1f:35:6f:79:fb:
         64:31:42:0f:83:be:b9:0b:4e:c5:93:1d:83:a7:b3:72:15:3a:
         75:ec:1b:08:04:0b:b8:7d:83:c6:0f:81:b0:13:3e:ab:a1:c8:
         91:b2:0a:58:7f:13:b7:8c:58:b3:42:45:d4:ad:e1:d8:67:f0:
         27:c8:e0:93:92:9f:6c:72:29:69:f9:ab:d7:84:ec:6b:e7:4e:
         8c:64:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:22 2026 by rpki-client