Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File:                     jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier:          gvO76zB7V7hVGMn0q+CsW7pP9UBkJeoRTlIep8Yx3ic=
Subject key identifier:   EB:5C:92:D0:F9:2F:D2:5E:25:79:15:D5:94:3C:CD:9A:38:B3:3E:D5
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number:          01B8
Signing time:             Thu 21 May 2026 03:59:51 +0000
Manifest this update:     Thu 21 May 2026 03:59:51 +0000
Manifest next update:     Thu 28 May 2026 03:59:51 +0000
Files and hashes:         1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: hKZ2bjhC9QyNVeBtgABNrLq7motx2gQq6F+cfmRxWsE=)
                          2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: May 21 03:59:51 2026 GMT
            Not After : May 28 03:59:51 2026 GMT
        Subject: CN=6a0e8337-e357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:15:5e:2a:7d:1b:df:c0:de:54:19:a2:63:b3:
                    22:a3:a1:f4:38:a9:b4:94:0f:6f:a8:a8:f3:76:1d:
                    c2:97:46:26:3c:36:b2:82:46:1b:07:25:96:96:77:
                    f5:9e:52:ba:d8:e9:51:0c:fe:5f:d9:13:5a:65:f6:
                    d2:bc:20:64:0e:bd:61:cf:34:ff:45:2a:57:55:34:
                    98:00:e0:67:09:9b:32:98:ae:f0:80:18:7b:79:f7:
                    e8:41:9f:3c:09:e8:7b:9f:11:60:13:f8:28:4a:80:
                    3d:c1:4a:f1:70:e3:5a:2d:7b:a8:cf:95:ca:04:cd:
                    d0:fa:15:97:62:fe:74:89:a4:74:a5:ca:f1:81:b4:
                    6f:c2:7c:da:36:00:79:05:8e:e2:15:a2:ec:94:ca:
                    ad:34:d1:b7:0e:7e:3e:ee:00:95:03:96:8c:e1:e5:
                    ff:80:13:15:f3:93:9b:8f:b7:4c:d4:64:c4:71:ea:
                    a4:09:36:68:68:18:f6:41:db:cb:d6:c1:81:01:ec:
                    c6:06:4d:9c:31:73:3b:46:64:5a:f0:69:03:5c:2c:
                    61:0f:a4:1d:76:cd:b6:15:13:27:b6:ba:a0:c8:2f:
                    9e:7d:3c:90:73:ec:55:b4:56:40:70:cf:7b:5b:a0:
                    19:81:ab:d8:64:f3:fe:62:03:79:bd:73:46:0f:80:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:92:D0:F9:2F:D2:5E:25:79:15:D5:94:3C:CD:9A:38:B3:3E:D5
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:ff:03:6a:76:cc:58:09:68:b2:6c:46:4e:28:08:6b:c6:
         43:d9:d5:0f:66:43:83:b3:66:64:52:04:b0:36:87:e5:d3:39:
         8a:f1:4e:c7:eb:9a:09:ee:38:a3:15:53:40:e9:1e:f3:07:e4:
         24:7c:7a:02:2c:6d:45:11:cc:de:78:cf:f2:37:7e:04:56:a8:
         d8:3b:31:97:e4:9a:2c:2e:3c:26:74:a0:3b:24:b0:ea:50:63:
         d6:9e:56:57:27:a6:a0:59:38:e4:6e:47:e7:dc:81:51:8f:e3:
         e2:6a:6d:5d:cd:b7:04:9e:53:ef:1e:07:da:4e:6e:a8:bf:98:
         dd:48:b8:b1:6e:99:7a:56:25:38:c3:57:85:4f:75:72:c4:76:
         f9:81:d4:4f:f1:21:e4:66:51:c0:e6:80:10:48:67:09:4e:f1:
         d9:da:32:aa:b9:4d:e0:eb:24:60:f9:eb:ce:ec:62:9d:91:8c:
         c9:d1:72:81:86:39:91:d5:01:d0:85:0f:71:0d:25:28:06:44:
         3f:e3:50:6c:18:f3:b0:39:d6:9f:f9:df:80:80:14:bd:ba:fa:
         3e:4f:2e:fb:f5:3e:f2:fd:28:08:41:55:b9:fb:44:f7:99:d3:
         04:f2:53:45:16:1b:e7:a9:51:c1:ff:77:a1:f7:c8:85:b7:33:
         b3:e1:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:04 2026 by rpki-client