Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
File:                     J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json)
Hash identifier:          k8HIRvxJP4+ziZDWsXl4Djx1SvQ+ciVd0twsTdzqpAk=
Subject key identifier:   C1:F7:92:51:03:89:CD:D4:37:2F:4F:09:9F:C5:7D:A4:42:56:31:14
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0C32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
Manifest number:          0C1E
Signing time:             Wed 20 May 2026 18:47:58 +0000
Manifest this update:     Wed 20 May 2026 18:47:58 +0000
Manifest next update:     Wed 27 May 2026 18:47:58 +0000
Files and hashes:         1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: Y8W19Ukb0aN8GqAMLWWFI6s6vtQdwnyTScF29Af0i7s=)
                          2: E1647F18303311EA8796D584C4F9AE02.roa (hash: hvHQ4oovH4LfseVNWUdyIbRafNtihmdVkn0b5XITvtA=)
                          3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: TblqmML4Z56TJGS/QmGAg1lALjsba+7daK1iMQjSZu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3122 (0xc32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: May 20 18:47:58 2026 GMT
            Not After : May 27 18:47:58 2026 GMT
        Subject: CN=6a0e01de-65d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:6d:6c:05:04:92:aa:78:ba:a9:f0:cb:5d:
                    cd:a5:15:4a:7c:0a:6a:fd:6b:ed:7f:c4:8e:52:87:
                    05:ff:31:4c:d8:f1:10:3f:e9:22:58:e7:2e:35:7e:
                    04:57:ed:be:7a:6c:20:65:78:9f:fc:7c:e1:49:d7:
                    a4:94:d9:7a:3c:c8:82:86:99:f7:21:77:61:c5:16:
                    39:da:d6:73:c9:d9:27:f7:31:26:3f:d9:5c:46:09:
                    09:8a:a4:01:84:cc:b3:fb:94:4d:09:e1:09:ce:01:
                    84:bc:2c:75:4b:0c:dd:02:9e:c9:ad:e4:d8:0f:ac:
                    56:cf:58:e3:1a:1e:b8:64:bc:2c:ca:79:65:c1:c5:
                    a9:ff:d6:a4:81:3b:e6:69:9e:3f:18:1d:9a:6b:6d:
                    f6:01:04:d0:7f:0f:d4:86:e3:d0:84:b0:fd:3a:87:
                    aa:a1:35:49:57:22:d7:f0:b6:89:29:48:e8:62:82:
                    55:32:d8:42:e5:50:79:78:a5:a8:78:9a:bf:17:0b:
                    b2:e0:ff:0a:41:5b:66:36:b6:65:c4:44:7c:03:8f:
                    91:34:fa:8f:e0:98:31:e4:38:7c:c5:a9:53:e2:4b:
                    f3:ed:e7:41:cd:16:c1:f6:7c:9e:ba:6b:48:bf:e9:
                    17:af:b9:17:23:74:96:34:8e:58:09:00:69:f8:10:
                    e6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F7:92:51:03:89:CD:D4:37:2F:4F:09:9F:C5:7D:A4:42:56:31:14
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:41:b1:e8:76:0b:26:39:eb:96:41:25:72:c0:19:fc:75:ec:
         d1:e5:70:fc:cb:e0:84:a4:cb:83:ee:c3:29:42:24:b5:24:fd:
         98:9d:14:49:e0:f8:d9:c3:63:01:c6:5f:70:76:95:43:9f:23:
         94:4f:66:f6:d5:a1:b0:11:e7:27:62:f7:37:61:97:57:d0:60:
         b8:20:c3:23:61:6b:50:46:0a:64:4d:90:ea:b4:a8:0c:61:ae:
         fc:25:68:a6:8e:fc:9f:c1:99:f2:ce:db:f5:ef:c7:dc:a1:00:
         3d:48:4a:83:a5:39:d6:b8:ac:c1:73:7c:86:b8:1f:f3:4f:93:
         a0:21:cd:7d:e0:54:33:b7:a2:34:b9:70:67:ed:fa:f3:f9:4e:
         4e:47:8a:b5:c1:03:cc:73:a7:2d:07:1f:ba:af:b9:f9:42:5b:
         c4:2e:76:d1:36:f6:1f:6a:d1:6d:07:ba:27:b3:24:ed:23:cf:
         7a:c5:4d:0b:51:b0:69:02:ea:10:88:b6:ed:be:68:0e:93:22:
         24:c0:f2:2a:93:27:ad:d3:ce:59:4b:46:ed:66:19:56:6f:9a:
         8d:a6:f6:43:b3:28:80:54:d1:5c:6c:70:43:be:84:ac:84:f9:
         37:3d:9c:7d:d8:a6:d9:96:f3:6c:20:04:f4:67:6f:bf:21:e3:
         ef:63:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:15 2026 by rpki-client