Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
File:                     RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json)
Hash identifier:          aaY+KnQ8O72yMwvRi1qC7W02f8wMRBmXftgKwbYTwRI=
Subject key identifier:   5C:FA:AD:AB:97:07:95:E3:65:24:5E:79:5E:20:D1:EB:16:82:84:DD
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Certificate issuer:       /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial:       15DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
Manifest number:          1584
Signing time:             Mon 04 May 2026 16:47:16 +0000
Manifest this update:     Mon 04 May 2026 16:47:16 +0000
Manifest next update:     Mon 11 May 2026 16:47:16 +0000
Files and hashes:         1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: 3t+YQMBQVUw9lqvNCDc7BKsbr7J5gbIiwlvq8QEElNc=)
                          2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: +rqWHU55mXZywL8CIstlBjQ5J8L3aIdxs349BgpUkec=)
                          3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: OFEYBm648I0e9Wbf7xTKz4rv2oT1O4Q0cFf6EvpbVvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
                          rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5596 (0x15dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
        Validity
            Not Before: May  4 16:47:16 2026 GMT
            Not After : May 11 16:47:16 2026 GMT
        Subject: CN=69f8cd94-6957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:05:f2:ab:5a:a6:46:99:aa:36:10:4c:28:
                    93:0d:e7:a9:d3:45:a1:92:c6:42:cf:6f:35:b1:c3:
                    84:4c:3b:68:77:20:11:fa:eb:d4:95:50:c0:4e:06:
                    ee:cc:1c:ff:34:d7:c9:ba:78:c4:17:4a:b8:d9:89:
                    4c:37:28:dc:51:cb:76:f2:9d:6e:11:53:2c:44:54:
                    65:2a:d1:8b:b5:52:1f:67:00:24:10:09:1e:87:8f:
                    93:03:ff:13:71:b6:57:1d:11:aa:a5:cb:c5:d6:f7:
                    f0:0b:4c:0f:bf:65:ea:d3:3a:ec:3a:89:a4:5a:d7:
                    ba:49:a6:a0:e2:96:57:08:92:9b:83:c6:ed:2d:19:
                    5b:10:56:53:fb:4d:ff:ed:c4:64:3d:8a:ca:f6:3a:
                    96:5b:be:99:dd:f4:24:da:1f:33:bd:82:dd:ef:20:
                    62:d2:2e:fc:4f:63:d4:18:41:da:1a:23:c8:2a:e1:
                    67:90:e3:e9:17:7b:5f:90:ff:9a:a0:ab:be:1d:71:
                    ce:48:3a:bf:8a:b1:27:b1:bd:6b:b4:fc:ae:67:24:
                    3d:46:1a:ad:af:88:a0:f2:98:da:6a:e7:b2:f4:5b:
                    38:71:75:5c:78:0d:3a:29:39:93:0e:09:d0:f8:32:
                    9d:6b:86:35:9b:03:44:27:a9:fe:40:ce:96:a2:57:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FA:AD:AB:97:07:95:E3:65:24:5E:79:5E:20:D1:EB:16:82:84:DD
            X509v3 Authority Key Identifier:
                keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5b:70:b6:42:5c:a1:96:f6:77:e1:f7:38:74:36:7b:26:f6:
         07:e6:eb:72:50:57:84:6b:9a:db:9c:00:a4:6a:36:db:74:bf:
         72:e5:8b:9a:34:7f:13:42:cc:c7:2c:02:8d:1c:9a:e8:53:18:
         bd:0f:d0:03:38:f8:cb:7b:28:42:44:4b:d1:e7:36:fe:25:20:
         4c:c7:3b:0e:11:18:bb:22:01:22:d8:17:11:04:56:36:1b:99:
         df:cb:27:56:17:55:86:48:4e:00:35:46:e2:f9:df:bc:5c:06:
         b6:5a:7a:04:03:bd:63:d5:9f:02:16:e3:2e:5b:61:97:7f:c8:
         aa:c5:7b:3f:08:ea:1f:37:1c:8a:fc:4c:91:19:33:3b:f1:ba:
         a0:40:06:96:65:c0:98:0d:ff:be:14:b5:43:8f:11:b1:cd:f5:
         b3:9a:09:1e:ef:c5:5c:47:d2:a3:25:85:c9:3a:5f:35:d5:fe:
         fd:40:76:4d:0c:fd:4b:20:81:08:35:3c:2c:16:01:bc:7a:12:
         dd:2f:5a:be:ab:7b:64:09:44:f8:f7:f9:56:1a:35:b1:70:af:
         c3:27:f9:4b:b9:8f:cd:b6:ff:a7:6c:3d:94:e6:ab:9f:fa:72:
         2b:38:f0:02:e2:80:9d:97:7c:61:a8:b6:cb:95:1a:a6:2c:42:
         1c:55:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 05:46:38 2026 by rpki-client