Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File:                     1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier:          z55OGOp8MGpwVOxs1G0OtHNds+zjKiompHx6ohE749w=
Subject key identifier:   15:20:8F:48:04:FD:3F:99:40:0D:67:D5:7C:42:A9:30:9E:4D:C9:67
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer:       /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial:       1608
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number:          15F0
Signing time:             Tue 12 May 2026 16:44:09 +0000
Manifest this update:     Tue 12 May 2026 16:44:09 +0000
Manifest next update:     Tue 19 May 2026 16:44:09 +0000
Files and hashes:         1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: AYQ+iaH++SpopSnQZ71rK2gfXhYAsTmCz5C5If1B85I=)
                          2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
                          3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
                          rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5640 (0x1608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
        Validity
            Not Before: May 12 16:44:09 2026 GMT
            Not After : May 19 16:44:09 2026 GMT
        Subject: CN=6a0358d9-f0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:cc:34:41:ba:46:61:bc:4f:eb:14:4b:e8:
                    73:bf:2c:48:7b:a9:80:66:19:bf:ae:a0:a5:15:58:
                    f8:e2:3c:4e:65:b1:f8:77:4e:c0:d6:ab:cd:32:59:
                    6b:64:14:f8:78:e6:a2:fa:51:5d:7d:f7:b4:5e:84:
                    5a:1f:0d:ec:58:42:f9:66:9e:44:48:2c:8d:f6:cb:
                    90:8a:b2:b4:2d:fa:3d:7b:18:64:db:ac:22:52:7a:
                    dd:60:84:f1:e7:11:1c:ba:7e:c8:02:2d:75:92:6d:
                    b8:01:33:6e:29:00:21:f9:ba:f2:3a:18:6c:99:d0:
                    8e:b7:07:29:90:77:e9:1a:df:3c:00:15:c0:74:87:
                    dc:42:54:70:6b:7c:be:08:34:c0:57:f5:76:1f:5a:
                    d2:85:67:6a:c5:a7:d9:9c:19:3b:f2:9d:c3:81:ee:
                    6e:85:4b:c2:7f:f4:0a:f9:11:6d:95:06:95:e8:a8:
                    0e:a5:0c:83:b2:84:39:e0:82:49:04:b2:93:77:e9:
                    a1:56:37:c9:7c:8d:c2:7a:f4:96:40:91:a6:cf:ee:
                    45:ab:31:bc:c5:d2:7e:75:71:ad:7d:41:4d:7e:41:
                    28:5b:83:64:36:3e:78:42:fe:59:fc:e3:01:b4:ce:
                    ce:7d:24:86:b5:d4:ea:7e:43:7b:d8:b0:79:f2:8b:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:20:8F:48:04:FD:3F:99:40:0D:67:D5:7C:42:A9:30:9E:4D:C9:67
            X509v3 Authority Key Identifier:
                keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:19:20:cc:14:8b:f5:e3:9c:20:51:53:57:2b:07:46:05:0e:
         2d:56:c2:02:0f:0b:45:bc:af:38:57:f0:17:8b:1c:4d:16:cf:
         c5:92:87:99:00:a9:84:80:15:f0:d8:b0:a4:a8:41:7f:ee:47:
         63:c3:c3:31:16:6f:01:ee:c5:a7:91:12:c6:b1:ef:7e:a4:16:
         92:86:6c:66:a1:8a:ab:1c:18:11:58:e0:11:c6:4b:1f:21:b6:
         2e:7d:c3:2e:54:8a:c6:dd:f4:21:01:51:34:0b:49:89:34:17:
         d7:4f:db:06:b7:98:0c:03:2f:44:ca:f6:51:40:8f:0c:eb:4c:
         b1:cf:e9:f5:32:83:13:1c:1b:3a:35:44:88:0b:bb:f4:05:e5:
         91:7c:2d:63:a7:ff:95:56:d2:3b:b6:64:b6:11:77:47:1e:c9:
         b4:8e:5a:e6:92:c6:af:ac:33:76:5e:be:f7:9e:2c:be:97:c8:
         6a:e7:e8:e5:02:8c:a5:00:b7:40:e2:e4:63:bd:c5:eb:5a:43:
         95:8f:43:8a:01:cc:fa:66:45:2f:2f:a0:fc:80:7b:75:d9:16:
         a5:ec:8c:ba:28:3c:6c:0e:a1:29:65:7d:ce:5b:ff:a2:85:48:
         47:35:9b:c5:1d:c3:70:4b:04:1d:64:dd:94:26:c5:21:a1:7a:
         b6:65:9c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:27 2026 by rpki-client