Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
File:                     AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json)
Hash identifier:          8cvng+pjkewkRwDm0m/WbF8Xdy/VSdaM0V6+9BdS39M=
Subject key identifier:   46:72:31:9F:06:2A:E4:5F:45:6F:47:3D:17:1F:B1:EF:D9:3E:6D:89
Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
Certificate issuer:       /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
Manifest number:          5C
Signing time:             Mon 11 May 2026 08:12:23 +0000
Manifest this update:     Mon 11 May 2026 08:12:22 +0000
Manifest next update:     Mon 18 May 2026 08:12:22 +0000
Files and hashes:         1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: rgsT+HRAikTEKcqDL2uHE3V7sD8N6gDgoah3T2mSC50=)
                          2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: E6omI9lqZzM/PwLCS0UMdFdpwNRWOrVUdR04/HJ2Es8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
                          rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
        Validity
            Not Before: May 11 08:12:22 2026 GMT
            Not After : May 18 08:12:22 2026 GMT
        Subject: CN=6a018f66-da93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:fa:86:c4:76:ae:10:f5:31:a6:fe:22:7d:
                    87:d1:5a:1a:dd:9b:65:23:dc:c6:74:d1:87:d7:13:
                    83:ed:7c:ad:bb:f8:39:60:29:e2:5c:8d:26:98:ed:
                    ab:7f:fb:5f:f0:7e:b5:e0:3e:4b:55:af:cf:1d:79:
                    ae:fa:05:5f:d7:df:d4:f0:2b:d8:46:a1:b3:c1:14:
                    02:5e:6e:a8:99:d2:41:b9:3e:83:9a:1c:18:67:ec:
                    8b:8f:df:7d:1e:42:0f:48:f1:c5:71:cc:fd:1c:d0:
                    56:f8:e7:34:3d:27:3f:c0:97:9d:68:de:41:e7:06:
                    0b:89:dd:2e:94:4d:f4:d6:22:d8:02:95:c4:be:3f:
                    ab:21:46:39:94:3f:5f:08:b4:3e:51:e3:01:35:2f:
                    8b:8c:1f:a9:ad:7f:da:c7:bd:06:18:d2:59:e7:06:
                    3c:67:ac:f5:c7:90:25:7e:93:84:50:13:b0:f4:9c:
                    b6:26:0c:23:87:50:f2:06:5e:8f:73:e1:2d:54:fd:
                    01:3c:2c:72:bc:6a:c4:b3:56:88:93:15:29:af:7f:
                    bd:6f:6d:d3:8b:d3:19:1e:47:70:36:61:3d:5d:34:
                    04:af:8e:a2:1b:73:b4:76:16:1f:16:4e:99:73:8d:
                    bf:d7:3a:ce:e6:d4:27:bb:74:8d:37:b7:35:0d:59:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:72:31:9F:06:2A:E4:5F:45:6F:47:3D:17:1F:B1:EF:D9:3E:6D:89
            X509v3 Authority Key Identifier:
                keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:f8:95:36:80:6a:41:1a:32:ef:43:fb:68:de:af:6d:16:
         29:80:86:87:77:bf:5c:ba:f3:73:aa:b4:3c:11:4e:75:0b:e4:
         07:48:01:02:26:4f:d7:01:c7:75:f3:0c:11:46:03:7d:1c:6e:
         b5:89:15:95:97:49:45:a6:91:32:27:fb:de:e4:c0:2f:c5:d7:
         b7:82:e7:d8:b5:02:d1:d1:48:5f:91:ff:1d:58:f5:f3:2a:74:
         14:2c:84:55:ad:83:dc:b2:e9:19:b1:94:03:91:4f:ab:c9:98:
         2b:3e:b6:86:6e:43:83:9a:a2:a2:5e:a0:18:17:88:76:a1:89:
         d9:28:f0:44:6b:7f:5e:e5:fe:17:a1:58:c8:a6:b4:bb:6b:18:
         e5:1e:bc:20:ba:90:2c:30:8f:c2:66:d6:57:59:29:09:ec:d0:
         8b:b0:d1:7d:a7:7c:9c:97:0b:09:4b:d2:61:41:00:0c:5d:d5:
         ec:d6:f0:ff:06:84:38:3d:5d:d2:12:5c:93:42:ea:bd:89:c7:
         c1:de:82:30:e8:96:44:ea:15:7a:b1:fe:fe:16:d0:06:f6:59:
         a2:aa:65:7e:6c:e6:d4:42:e0:83:5c:77:e7:cd:16:99:dd:bd:
         bf:ac:67:a2:4e:e4:2c:a5:ba:34:4b:f3:65:3d:c0:b9:3b:f5:
         e0:02:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:43 2026 by rpki-client