Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File:                     RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier:          aUoq0/Lno0hpH7fWDzM6z2FAljhGydNE2dcvn4nlHpQ=
Subject key identifier:   5C:5B:FB:08:EE:89:BE:99:32:48:78:26:C3:77:8D:45:C6:38:19:78
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer:       /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial:       0796
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number:          078E
Signing time:             Wed 20 May 2026 21:33:00 +0000
Manifest this update:     Wed 20 May 2026 21:32:59 +0000
Manifest next update:     Wed 27 May 2026 21:32:59 +0000
Files and hashes:         1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: 7jt05GvbigROvO+mqkoWz+FiPgwriJE+zIqAboU32Ck=)
                          2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: sbyF3KrKZsJPlhcWGIocE8R+wXMDx5Dh9kMEDZMegNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
                          rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
        Validity
            Not Before: May 20 21:32:59 2026 GMT
            Not After : May 27 21:32:59 2026 GMT
        Subject: CN=6a0e288c-7862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:e6:d9:4b:fb:f3:03:29:62:38:b9:31:3e:
                    07:50:3f:66:32:fb:b2:a4:8d:eb:6e:1e:2c:85:63:
                    ab:6d:c1:ca:e2:70:03:cc:3d:00:e4:d0:c5:2e:37:
                    01:2b:f5:6d:85:da:af:9f:96:a4:2f:bd:3d:66:0d:
                    12:bc:70:3e:cc:c9:46:a4:e0:dc:af:58:39:0b:85:
                    52:d2:43:3e:12:8a:ee:57:71:60:68:e4:5c:7c:f0:
                    45:59:8f:57:f2:ee:9b:35:a0:ae:e7:27:e8:a6:c1:
                    d4:d3:a3:f6:9d:f4:57:85:9e:97:c7:95:a0:41:49:
                    c9:fd:a7:be:07:48:68:a9:13:e6:6f:26:25:1f:8a:
                    8f:f5:a1:48:89:51:20:73:c5:18:b9:c1:1b:d3:41:
                    0e:3d:70:0a:70:4e:3a:80:63:5f:eb:d1:bd:c9:4f:
                    cc:69:7a:1f:7e:6d:51:ec:61:94:1a:23:25:c6:d6:
                    f0:33:32:20:0e:2f:41:24:c9:7a:62:85:88:33:3d:
                    8b:19:43:7f:38:29:88:71:b5:bf:df:85:88:fe:96:
                    97:c2:37:9c:eb:b6:cc:2a:50:eb:b0:26:24:70:ea:
                    b6:f1:d1:19:af:7e:cb:3b:c4:d7:39:91:aa:a4:d0:
                    1e:78:9f:91:ce:6f:aa:eb:4b:33:06:f6:45:b3:9c:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5B:FB:08:EE:89:BE:99:32:48:78:26:C3:77:8D:45:C6:38:19:78
            X509v3 Authority Key Identifier:
                keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4d:48:1d:09:7e:78:70:9c:22:9c:10:86:4e:7c:de:7d:f7:
         56:96:3d:4a:4a:84:35:ff:66:e1:1a:d2:06:4e:d5:68:b8:d0:
         73:19:f8:f0:7f:fd:82:99:74:d0:a9:7a:70:a2:2f:96:35:93:
         94:9f:63:82:86:4b:55:ca:c9:cf:71:cc:a5:d4:32:f9:1b:06:
         67:55:00:9b:85:0f:90:47:3c:0d:06:b8:85:cf:0f:ce:6c:56:
         2c:4d:e3:1c:a7:86:c8:8b:32:f1:1c:a5:72:78:2d:c1:08:50:
         a7:66:1a:bd:32:c9:af:94:4f:f9:a6:1e:27:91:b1:dc:25:b3:
         a9:e5:04:c6:24:8e:e0:60:d6:59:be:5e:8b:5c:3c:8c:a3:bc:
         fa:86:bd:10:ff:b5:f2:b8:28:40:f9:cb:b4:4e:4d:5f:4f:40:
         bd:1b:de:42:78:3d:2e:68:cb:bb:8b:1f:a6:4a:6c:43:56:56:
         7f:a2:c7:0e:5a:01:b6:45:dd:19:4f:c8:a3:d4:ad:bf:c6:cd:
         58:0d:fa:80:12:c3:1b:2e:a9:62:af:99:f8:06:05:94:5d:eb:
         9a:c0:75:b1:ae:57:6d:4f:51:09:e9:6f:4f:a3:d8:d5:be:13:
         8e:b3:8c:15:68:c6:fc:c4:15:d2:f8:69:1a:d3:3e:bc:e4:16:
         81:ca:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:37:36 2026 by rpki-client