Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File:                     1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier:          2jaNIsAV2ecmmVaYcpDvbQHtfUqkZZLrG53n+msrkgk=
Subject key identifier:   CB:A6:80:90:D1:8C:68:0A:51:6C:68:0E:8D:3D:85:A7:38:7A:98:82
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer:       /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial:       027D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number:          080E
Signing time:             Wed 20 May 2026 23:15:54 +0000
Manifest this update:     Wed 20 May 2026 23:15:53 +0000
Manifest next update:     Wed 27 May 2026 23:15:53 +0000
Files and hashes:         1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: eyhoQuad2joGlZFI+IXZkUFW9u72ANjyyh4ihDGnB9Y=)
                          2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
        Validity
            Not Before: May 20 23:15:53 2026 GMT
            Not After : May 27 23:15:53 2026 GMT
        Subject: CN=6a0e40a9-b9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:ed:d6:7e:56:5a:19:b3:81:99:e5:b5:c1:
                    b5:fc:10:1f:79:ef:80:4c:2d:d4:e0:15:60:d4:ff:
                    3e:c3:22:65:32:96:93:24:fa:64:b0:1b:18:2a:58:
                    a8:6b:24:09:48:2f:38:88:40:ad:30:fb:12:5d:6d:
                    5c:9e:99:ac:61:d9:51:78:7e:06:b8:c2:59:a3:41:
                    74:36:1f:3f:72:f9:36:3a:87:93:87:12:70:cb:fb:
                    74:26:8c:e8:53:0c:dd:0a:98:90:68:94:b4:a9:63:
                    5a:34:69:5c:e9:fa:84:47:a0:21:e1:86:cf:24:65:
                    9a:21:07:9b:4a:0a:dc:4e:80:df:74:bb:bf:70:fa:
                    41:9e:24:15:7e:0b:0e:63:a6:b8:af:39:16:23:cf:
                    1d:18:2c:c2:40:c8:5a:8d:a2:ab:88:6e:07:3e:ca:
                    d8:ea:36:18:35:4a:ec:90:dc:30:64:0a:a2:19:8e:
                    82:70:19:66:cc:93:d9:32:df:80:89:f6:ed:5c:6d:
                    28:d4:fa:68:a5:c2:38:5f:2c:f3:c7:6b:d7:da:22:
                    6f:a5:5c:79:a0:96:fe:b4:e9:09:5c:30:92:a8:df:
                    f4:1d:e0:86:b2:b0:40:73:8a:dc:44:59:d9:1e:ce:
                    04:4e:8b:fc:c0:54:d9:d0:34:3b:97:a2:98:72:8a:
                    0d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A6:80:90:D1:8C:68:0A:51:6C:68:0E:8D:3D:85:A7:38:7A:98:82
            X509v3 Authority Key Identifier:
                keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:63:34:87:aa:48:00:0a:28:89:45:02:d1:11:83:3a:a0:09:
         10:66:40:39:7b:82:b3:f9:54:d9:fa:8e:25:39:1a:cd:d8:8c:
         c9:64:57:11:66:82:74:cd:55:95:54:6a:01:4a:78:be:15:cf:
         3f:54:91:0e:a6:4d:ad:0b:3e:40:88:ca:12:9d:f0:a9:d6:e2:
         24:a0:b4:4e:63:85:57:ba:1c:21:06:86:bd:90:08:8c:88:c3:
         9a:a2:be:bf:7f:3b:80:c1:d9:26:42:75:1d:c0:5a:11:d0:fc:
         8c:7e:51:05:e9:64:4f:29:17:23:4e:df:e9:9f:c6:68:35:d5:
         ac:39:6e:07:4d:65:a9:1e:a7:2e:ea:c1:6d:2f:bd:e6:77:5e:
         d1:57:d6:16:17:19:e8:e7:af:84:ab:df:4a:b1:6d:37:0c:09:
         57:b7:ae:03:90:f1:d2:be:7a:69:13:b1:f2:01:be:d7:f1:12:
         ea:a5:f7:9d:88:40:26:40:e3:5e:4a:73:ea:18:16:d1:d0:8e:
         98:52:bb:93:ec:f2:45:40:44:02:5a:1c:d1:c4:d8:62:92:6b:
         f3:0c:be:b2:46:e0:ad:e0:95:4c:f6:d7:d8:29:bd:68:c1:dc:
         59:9b:f6:af:88:aa:e2:e5:d1:f2:13:80:2b:53:be:25:94:c5:
         31:9e:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:35 2026 by rpki-client