Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
File:                     s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json)
Hash identifier:          y80sS7cDXUt9L3YEe8ZWRKWmosXZXpKM+FaJtQou3QQ=
Subject key identifier:   F1:69:BA:05:95:A3:AF:6E:AD:CA:53:32:90:E1:1D:00:68:3D:51:2B
Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
Certificate issuer:       /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Certificate serial:       1585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
Manifest number:          157A
Signing time:             Wed 20 May 2026 16:46:21 +0000
Manifest this update:     Wed 20 May 2026 16:46:21 +0000
Manifest next update:     Wed 27 May 2026 16:46:21 +0000
Files and hashes:         1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: aKCUivrLsxT4EI42lY2xxFtikztD0GSo6m2zk+Mm6B8=)
                          2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: TR5agGU/zIk0GyCHwMsitWR6qVN8gmfKUUGH+aQoTx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
                          rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5509 (0x1585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
        Validity
            Not Before: May 20 16:46:21 2026 GMT
            Not After : May 27 16:46:21 2026 GMT
        Subject: CN=6a0de55d-abd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:54:bd:1c:64:31:16:d4:ef:23:37:64:bc:
                    da:72:43:06:c1:95:ab:ab:68:55:f1:91:f7:95:56:
                    c3:9e:82:42:16:29:c0:01:ed:24:59:d0:55:81:7b:
                    3b:fd:fb:f3:fc:44:42:57:b6:e8:4c:bf:ab:16:44:
                    e6:7a:ff:a2:36:75:0c:e3:74:af:7e:6f:7d:c8:c1:
                    b5:b9:72:ce:25:0b:63:27:6e:23:47:9b:8a:e6:e7:
                    67:45:2b:db:97:d1:8c:6c:72:f5:f2:4b:23:08:a8:
                    e2:15:51:91:46:ce:43:e4:7c:e1:fd:b3:41:82:d5:
                    a3:6d:15:ad:f0:57:31:b2:5a:12:6c:94:d3:4d:4d:
                    0f:83:f8:68:7e:62:28:3f:33:f2:ef:07:c1:38:02:
                    7b:bf:de:57:a3:b8:86:65:54:99:df:cb:20:47:9b:
                    36:28:8d:8e:92:aa:d8:d9:38:a9:34:ae:30:6d:fe:
                    6c:d7:24:b8:d5:92:2e:24:5d:75:50:38:e8:16:68:
                    9d:23:ee:0c:b7:9e:1a:c6:39:6e:ae:52:a3:b7:17:
                    e4:9f:29:76:90:41:2c:c1:09:ff:2f:b4:52:72:a2:
                    97:17:ee:d7:d2:b0:2f:e7:02:d8:7a:49:e1:5d:8c:
                    6a:36:c5:14:dd:66:9c:6a:0a:06:a4:f3:d0:d4:6d:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:69:BA:05:95:A3:AF:6E:AD:CA:53:32:90:E1:1D:00:68:3D:51:2B
            X509v3 Authority Key Identifier:
                keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:76:c3:62:56:08:e1:4f:81:ae:42:0b:8f:81:dc:e7:0b:2f:
         bf:60:e0:14:ea:fa:44:c4:82:e7:e1:60:c7:4f:ba:92:6b:82:
         0a:1a:5a:e0:57:f5:26:77:0c:63:c6:6f:d8:12:64:8e:2c:93:
         de:eb:9b:95:fc:e7:fa:bb:f2:d0:04:1b:a2:ed:e9:96:6f:13:
         0c:3e:ef:a9:34:96:ca:49:b2:ee:2d:a2:69:68:82:2e:ec:d3:
         4d:59:fc:70:95:53:bf:54:90:eb:9d:8a:a3:da:a2:03:54:9e:
         c5:17:29:94:12:2c:bc:06:a4:f5:6e:46:a8:7b:ef:88:73:90:
         9f:6d:b1:e3:74:d7:05:21:cd:a0:6f:52:36:26:60:0a:49:40:
         74:b6:20:37:e1:d4:fd:21:d2:0a:40:29:c1:e0:90:17:51:a0:
         e2:9a:3e:02:a1:64:b4:f6:97:c4:5d:0b:db:d8:e6:17:09:eb:
         cf:06:21:e0:78:85:e9:75:77:24:04:13:12:25:16:66:1b:2b:
         a2:17:f7:74:96:67:c0:68:37:50:7d:fd:eb:74:4f:2f:ed:db:
         af:6f:f6:df:7d:b1:51:cd:50:ca:62:7f:bb:be:b4:67:50:7d:
         1c:98:56:94:3e:94:87:bd:6c:ab:09:8d:f1:30:a6:85:24:a4:
         b1:7f:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:36 2026 by rpki-client