Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
File:                     fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json)
Hash identifier:          QSo+BbTcTwGftYrz8A4ukezDAvc1BUOFqOGZ3TNrpu0=
Subject key identifier:   89:E5:9B:94:D1:F8:B0:03:B4:EC:84:43:4A:72:3E:59:79:8B:E5:4F
Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68
Certificate issuer:       /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68
Certificate serial:       0779
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
Manifest number:          0771
Signing time:             Wed 20 May 2026 21:40:55 +0000
Manifest this update:     Wed 20 May 2026 21:40:55 +0000
Manifest next update:     Wed 27 May 2026 21:40:55 +0000
Files and hashes:         1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: lUYgNL6lIK81pgLYEFHDHaXPUCB3vulr/MUTTSmpgpg=)
                          2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: /2CQn8Xz4XzOHOkBAvSY7m36OcQFemlRFzK8Et8qbzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl
                          rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68
        Validity
            Not Before: May 20 21:40:55 2026 GMT
            Not After : May 27 21:40:55 2026 GMT
        Subject: CN=6a0e2a67-99cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:4d:36:86:7e:fc:85:61:10:8e:60:e9:4b:
                    97:e2:77:e7:d6:7b:94:c1:64:7a:8e:a5:11:1a:e7:
                    be:18:db:c8:a5:5a:39:2e:a2:e1:3f:df:86:33:cf:
                    8c:7c:aa:ec:9c:94:bc:17:7e:9c:ab:79:8d:fe:d9:
                    37:bf:80:86:51:00:6b:95:15:72:19:93:33:63:d4:
                    29:fd:9e:8d:2a:f8:b1:39:24:1a:3d:15:3f:c7:80:
                    e6:8c:39:33:92:0d:93:5d:56:f4:a1:ca:76:ed:3c:
                    4b:84:3d:1a:01:2c:3e:6a:78:6a:dc:e2:62:87:1e:
                    0d:6f:7a:35:fa:d2:79:04:d5:df:26:0b:7c:bf:5e:
                    d5:e3:cb:ac:41:c5:53:b2:35:35:26:5b:ca:e3:26:
                    eb:5a:c2:24:3b:5e:cf:5f:08:fd:8b:c9:c6:ac:49:
                    00:fb:28:ad:50:25:74:92:d1:97:49:e3:2c:a9:d0:
                    48:45:a4:08:c2:da:18:a9:bc:99:84:e6:89:76:a8:
                    18:92:c4:c3:51:5e:1f:55:4f:54:e0:fe:d5:ab:71:
                    83:da:2e:fa:ac:5a:39:b5:fb:7c:5e:1c:7a:52:09:
                    14:bb:9c:4f:fd:f4:cc:db:77:7b:4e:90:e2:48:8e:
                    a6:d7:28:b5:cd:05:dc:4e:a0:b2:68:bc:e2:f6:aa:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E5:9B:94:D1:F8:B0:03:B4:EC:84:43:4A:72:3E:59:79:8B:E5:4F
            X509v3 Authority Key Identifier:
                keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:45:83:d8:66:18:34:da:3b:fa:d2:a2:23:01:ea:1f:24:a3:
         ec:86:32:5c:ad:69:83:16:83:19:cf:b3:cf:d4:fb:99:59:b3:
         c0:f7:ee:5d:76:36:7b:d4:ad:f1:d8:23:98:03:12:df:00:72:
         a8:9d:03:06:08:35:c8:86:9b:16:e8:c3:20:ba:bc:69:92:cd:
         03:54:cb:50:17:25:21:6d:73:63:63:e3:54:0a:b8:63:3c:3f:
         6c:73:67:85:8a:e8:5f:01:02:1b:42:cd:dd:47:22:6d:ac:05:
         41:74:12:ca:a3:2f:c6:72:61:33:a1:ba:23:60:a4:c6:e6:9d:
         78:56:80:b0:6c:80:e3:55:ff:82:bd:c7:f2:85:e9:b7:e7:66:
         1e:37:9b:1f:19:0d:8a:a3:c8:93:27:0b:71:c5:c0:b6:64:63:
         a8:be:e2:7a:fe:8f:c7:81:3b:c1:fa:e3:b6:0f:61:ae:ab:2f:
         f8:70:cd:51:80:b8:19:75:55:fe:ba:9b:b3:c0:f0:e1:1b:e8:
         54:27:5b:59:71:71:87:4d:52:49:02:39:d8:0e:62:34:f4:fc:
         d6:b2:d6:c8:d0:02:6e:59:f8:13:fd:31:43:b2:ab:36:ce:16:
         f6:2a:8a:fd:d1:4d:d8:89:c4:40:ec:c7:05:de:d3:7b:07:42:
         f9:ff:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:48 2026 by rpki-client