Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
File:                     66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json)
Hash identifier:          JXc38bdZvXd+Bx9M/pjZotDOhGHttzNBe1U4Km+Na3Q=
Subject key identifier:   31:5A:D5:E8:1C:A3:2A:80:99:6C:72:E8:97:85:7D:40:68:5D:78:5A
Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
Certificate issuer:       /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
Manifest number:          0169
Signing time:             Thu 21 May 2026 04:53:49 +0000
Manifest this update:     Thu 21 May 2026 04:53:48 +0000
Manifest next update:     Thu 28 May 2026 04:53:48 +0000
Files and hashes:         1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: VfOV/AHGDKb8+QtkR0Xo0+odZdj1Cx21IQMSNypU+no=)
                          2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: TP1lZPycmwhzIV9eyCEIRMOWox0jw70KYaYid67Sq48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
                          rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
        Validity
            Not Before: May 21 04:53:48 2026 GMT
            Not After : May 28 04:53:48 2026 GMT
        Subject: CN=6a0e8fdd-d7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:9a:fa:e3:a0:f1:2b:04:b8:21:50:fe:77:
                    00:d4:5e:a9:fa:a4:49:48:ee:b5:ff:00:71:8e:44:
                    e6:a3:22:f7:22:31:29:12:07:0d:f9:7f:c6:39:7c:
                    bc:87:c4:0d:1f:e3:38:39:7a:44:c3:2d:f1:36:d6:
                    e7:2b:92:7a:11:ad:6d:1d:56:90:c5:2d:2f:50:6c:
                    c3:68:d6:51:ac:ec:d4:49:82:4f:90:df:b3:9e:2d:
                    4f:2e:c6:49:ae:28:d5:ca:1c:17:32:61:84:22:bb:
                    6e:44:f4:26:70:66:9e:20:6c:61:6c:b3:84:18:9c:
                    a8:65:2c:ab:ce:7f:c4:37:81:f8:b1:1c:f7:79:58:
                    0b:82:25:d2:7d:cd:f3:de:2c:ac:b9:60:6b:74:2a:
                    83:d1:18:9d:77:8d:e6:50:fc:60:87:be:c2:06:4f:
                    1a:b4:74:7b:02:15:98:d8:9a:f0:44:26:e9:bf:74:
                    cf:6c:cc:41:cf:e6:88:ac:a8:40:ea:07:6a:4e:74:
                    4d:62:87:2b:e4:f9:3f:ce:51:a8:a3:e9:9d:5f:38:
                    c2:ac:60:39:9a:1d:83:85:8b:27:1c:be:ad:ee:44:
                    ab:cb:19:25:82:6d:4e:2a:e7:7a:7b:07:b4:cf:ab:
                    f6:45:a6:46:38:b7:8f:c8:a5:e1:d9:fc:aa:59:77:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5A:D5:E8:1C:A3:2A:80:99:6C:72:E8:97:85:7D:40:68:5D:78:5A
            X509v3 Authority Key Identifier:
                keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:1b:3f:cc:d9:ae:5f:0c:86:cf:83:70:90:20:20:bd:2f:
         c9:b4:3d:77:43:2f:45:9f:50:04:60:9e:30:24:fd:79:44:21:
         67:9f:67:71:bf:7d:72:ea:0c:01:db:4a:3b:54:c6:f7:b3:2c:
         18:a9:5e:aa:ac:e6:61:cc:1b:9e:1c:d2:1c:65:2a:fe:73:ec:
         b8:7e:5e:49:5e:59:65:66:d9:7d:b2:3c:fc:ba:27:67:e0:df:
         21:bd:8b:0f:c0:db:7c:db:b0:ab:56:c2:1b:0c:67:da:4a:4d:
         b9:3b:db:2c:15:d7:a1:0c:e0:3a:80:f8:0c:ee:15:a1:db:98:
         41:f7:82:8c:e4:ee:79:19:75:22:c7:a3:9c:c1:a5:a4:23:c4:
         90:52:85:b6:ea:f2:a4:7b:85:7f:14:56:f0:bb:c4:b5:03:a9:
         cc:f3:08:50:1b:06:05:13:d2:e2:41:3e:b5:04:ae:f0:02:bb:
         78:f1:12:0b:23:5e:ee:17:2a:47:9c:4a:e1:c7:48:88:ce:a7:
         b1:fe:e3:40:27:37:9a:3e:15:a3:b7:6e:cc:1b:56:86:e5:a6:
         b9:7c:84:25:59:35:ec:8a:38:39:70:ef:64:68:68:b8:fb:a9:
         f0:53:b7:11:79:7a:79:ef:08:a7:73:23:42:0b:50:55:20:02:
         3b:f7:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:36:06 2026 by rpki-client