Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
File:                     cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json)
Hash identifier:          rUD2SfYJ14al/xtMly26+Dic0QTqK9pLxPYGcF1pW0U=
Subject key identifier:   9B:04:63:30:55:01:03:DA:F9:50:F1:D1:C8:BD:07:C0:D2:81:8B:A7
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Certificate issuer:       /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
Manifest number:          01CF
Signing time:             Thu 21 May 2026 03:41:10 +0000
Manifest this update:     Thu 21 May 2026 03:41:09 +0000
Manifest next update:     Thu 28 May 2026 03:41:09 +0000
Files and hashes:         1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: tHeeCmDSbTwxvmGpp0gol7mjGus8+/psqFhRm2qG7UQ=)
                          2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: 00LuaUNmIyPdgmkhjWdXCJt4yLwtEm0sc7JiqhVSo/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
                          rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
        Validity
            Not Before: May 21 03:41:09 2026 GMT
            Not After : May 28 03:41:09 2026 GMT
        Subject: CN=6a0e7ed6-ffb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b5:ec:dc:7c:96:45:2d:a8:4e:bc:a8:ef:13:
                    be:1d:e6:94:9a:55:a1:98:dd:e0:d0:73:36:5a:24:
                    19:a9:1b:84:b1:ec:9b:e9:1a:a6:a2:da:de:14:e0:
                    30:c2:88:e3:a1:fd:60:95:d8:6a:1b:e5:6b:c2:5e:
                    65:62:2d:66:ea:ae:21:02:57:bf:72:91:e4:a9:b0:
                    66:ea:2f:be:c2:fe:87:ae:3d:fd:ef:1f:e3:19:09:
                    82:5d:ea:2c:ec:55:0c:ee:ae:84:06:3b:73:d6:b6:
                    50:c8:ae:e3:74:a2:40:e6:c0:5a:7d:b2:7f:fb:52:
                    e1:27:e8:3e:19:cc:04:10:c5:82:f6:f1:ec:98:2b:
                    1f:92:f4:d2:cb:95:08:70:85:8f:3c:9f:87:4d:e5:
                    17:a8:35:8a:0a:ef:32:37:fe:4e:dc:60:87:de:53:
                    35:0d:66:31:9c:ff:a9:e9:25:ca:bf:ce:11:30:bf:
                    96:56:6d:64:4d:6a:ff:3c:79:79:95:ae:f6:a3:b6:
                    30:ef:28:ce:62:62:4b:95:eb:93:c2:39:e2:23:4b:
                    c1:bb:1a:b2:0e:92:39:6b:22:5c:b4:53:77:64:7a:
                    c8:45:a5:48:a6:18:67:2c:be:eb:12:90:2f:cb:03:
                    b9:07:c9:21:33:1d:c3:a7:37:49:ff:e8:8e:70:20:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:63:30:55:01:03:DA:F9:50:F1:D1:C8:BD:07:C0:D2:81:8B:A7
            X509v3 Authority Key Identifier:
                keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:21:00:68:18:d8:d0:31:07:1b:80:06:e6:77:93:e6:5d:0f:
         2c:91:82:33:0d:28:60:bb:bf:7e:42:73:11:01:95:35:ca:4e:
         3c:3f:d3:5f:b9:38:68:6c:c7:86:e3:d3:0d:b5:98:9c:bb:c4:
         34:02:de:d3:e8:f4:20:83:b6:cf:b3:6f:cf:2c:87:c5:9b:31:
         54:95:72:7c:99:68:f7:83:fd:6d:91:45:d5:ee:00:9a:17:aa:
         bb:c8:5b:4d:9f:bc:ee:2d:7e:7b:58:fc:df:fc:f6:8a:23:dc:
         7c:65:9f:e1:78:a1:43:22:0f:a2:fa:fe:f5:49:12:ae:19:ee:
         2e:fa:54:fe:a2:1e:14:c6:50:26:c1:2b:a6:32:9e:45:4c:aa:
         c9:db:5c:be:b1:c7:d6:c6:04:6c:f7:19:63:8f:85:de:e0:28:
         5d:0d:41:e6:20:54:2b:54:54:3b:29:20:ec:a0:60:d9:c2:27:
         7a:31:d6:14:5e:46:b6:06:6d:9d:69:f1:1b:65:f3:52:8e:57:
         f7:44:e9:d0:7e:4f:a5:27:53:e4:98:fd:9e:4f:cd:ce:4d:8a:
         ca:ac:bd:84:7b:96:9f:7e:d9:d1:9e:42:8e:5a:b0:55:32:a3:
         fc:56:91:b7:a3:4a:b7:27:c9:34:27:6f:79:c8:0b:a0:3d:87:
         42:ff:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:10 2026 by rpki-client